Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/EeDnzTdexpu-hQPC4zmmrixQLhg.roa
File: EeDnzTdexpu-hQPC4zmmrixQLhg.roa (raw, json)
Hash identifier: 7vrBgc8luOSUm+wsV8SOHqHpF5hfM4ImGEtpP2Vu5U4=
Subject key identifier: 11:E0:E7:CD:37:5E:C6:9B:BE:85:03:C2:E3:39:A6:AE:2C:50:2E:18
Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial: 018572B429006EB7C9A0AD2D60ACC23785ED
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/EeDnzTdexpu-hQPC4zmmrixQLhg.roa
Signing time: Mon 02 Jan 2023 13:38:07 +0000
ROA not before: Mon 02 Jan 2023 13:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201273
IP address blocks: 2a12:8340::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 Feb 2023 14:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:29:00:6e:b7:c9:a0:ad:2d:60:ac:c2:37:85:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Validity
Not Before: Jan 2 13:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e0e7cd375ec69bbe8503c2e339a6ae2c502e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:7e:74:a2:2a:a9:9d:83:27:95:be:7c:91:
c4:eb:97:f3:aa:8d:33:c8:ea:88:6e:b5:5d:95:ef:
94:2e:37:33:92:01:ea:74:90:fe:53:73:ba:89:91:
ef:23:6d:5b:9e:fb:69:1b:c0:48:21:3e:d4:6f:4a:
f1:30:ce:52:bf:62:c8:52:d2:3e:b9:1d:e7:ca:e6:
33:1b:f3:5e:16:46:fd:72:7b:30:d0:64:1b:7c:28:
7e:ab:3c:55:6b:bb:70:3c:c2:65:f0:1d:ca:5b:da:
47:b1:55:1a:1a:28:f0:14:e3:da:5c:78:67:54:00:
1d:56:0b:1a:04:30:e6:68:63:7d:f6:32:c9:f6:cd:
84:27:9a:39:54:4d:4b:92:70:20:57:59:85:5e:6d:
5e:0b:3d:7b:a1:a6:4b:39:d5:bf:70:b3:2a:bb:41:
73:19:7f:c3:30:f1:7e:38:f5:2d:2e:b4:2b:c2:93:
5f:05:3c:f5:b9:8b:e5:66:80:9f:6a:35:fa:a5:66:
f0:73:35:d0:21:ca:fd:3f:32:f6:c5:f8:90:dd:21:
62:5d:fa:d7:ac:84:15:85:52:5d:58:14:14:01:a1:
c1:a5:b7:97:13:df:df:ae:28:ce:52:b1:84:4a:7e:
22:ef:65:18:f1:25:25:d0:b3:1b:61:5a:a8:19:3e:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:E7:CD:37:5E:C6:9B:BE:85:03:C2:E3:39:A6:AE:2C:50:2E:18
X509v3 Authority Key Identifier:
keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/EeDnzTdexpu-hQPC4zmmrixQLhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8340::/48
Signature Algorithm: sha256WithRSAEncryption
26:bb:d6:91:99:b3:c2:8c:d4:0e:d6:6d:dd:92:fc:54:76:76:
dc:2b:d2:7c:dd:d1:6c:09:c9:b0:ab:c5:90:9b:f1:49:c6:70:
5a:71:2b:d4:a7:99:af:e8:ba:c8:0c:2f:e6:54:2d:6d:45:18:
15:b3:78:ae:e9:e8:d3:a2:7a:a4:17:45:d9:39:37:d1:5c:ed:
65:d7:f9:8f:63:c5:87:59:37:e6:83:87:26:43:87:f8:76:69:
f7:34:ee:af:97:9a:e7:82:30:2f:55:3f:f9:22:b9:9b:d3:c5:
02:68:f1:cf:d2:e3:bd:85:78:22:e3:69:b9:b2:8e:c7:9c:6e:
3e:55:1a:8f:e0:16:dd:fd:b2:36:e4:f8:a6:c4:82:9c:92:bb:
0c:06:26:38:7a:4a:be:7c:ba:31:02:fa:f4:d7:e5:84:ce:9c:
1c:25:6f:48:54:d0:da:39:bf:6d:31:e7:66:59:38:af:00:ff:
04:de:26:99:68:40:cb:d4:eb:ed:c0:9c:23:5b:de:18:89:88:
4c:a4:5c:76:68:17:b3:b4:6e:ad:ff:fc:7f:9c:88:29:79:a5:
d5:8e:a6:d7:8e:cf:9a:49:30:c9:9d:ff:4b:55:e7:2e:c3:d4:
12:6d:01:93:19:09:65:a3:b3:6c:53:83:a2:cb:cc:7c:77:74:
7a:d3:ab:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:16 2024 by rpki-client on console-ams.rpki-client.org