Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eEmssOahPU63d5NjUD4fxeTLkFk.roa
File: eEmssOahPU63d5NjUD4fxeTLkFk.roa (raw, json)
Hash identifier: 1FiDGnm+Anuinu0EJEoN8iZddZlUgdio3G7gJTQxUFw=
Subject key identifier: 78:49:AC:B0:E6:A1:3D:4E:B7:77:93:63:50:3E:1F:C5:E4:CB:90:59
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0185D3F1CE198883A1570B1B7B9AB0DC56C4
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eEmssOahPU63d5NjUD4fxeTLkFk.roa
Signing time: Sat 21 Jan 2023 10:48:37 +0000
ROA not before: Sat 21 Jan 2023 10:48:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200708
IP address blocks: 2a0c:9a40:83f0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:f1:ce:19:88:83:a1:57:0b:1b:7b:9a:b0:dc:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 21 10:48:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7849acb0e6a13d4eb7779363503e1fc5e4cb9059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:07:38:6b:3a:24:8c:bd:4d:b1:c0:27:05:
e9:8f:b3:e2:bc:34:4d:a2:91:74:2e:fa:6b:ae:d6:
75:81:72:51:6d:2f:5a:73:bf:f3:43:cc:67:c6:c4:
c0:fd:97:2f:40:6c:57:84:3d:68:f0:20:03:7f:95:
8b:3d:03:a0:f1:9f:45:3a:61:08:bf:24:bb:3f:d7:
36:ec:3f:80:b4:80:85:57:72:6f:db:d5:80:6d:af:
b0:d2:3d:9c:d0:64:ab:cc:fc:b1:fc:67:6d:07:19:
fc:f6:76:78:a3:b1:5d:fe:6a:2d:c5:04:88:cb:34:
f8:72:d1:85:a6:d5:4a:dc:4d:2d:24:ae:08:ad:ef:
9f:db:b0:e4:48:09:cf:09:34:cc:a1:33:58:28:0e:
c8:4e:e8:97:99:5c:72:fd:2f:2f:d1:d4:0e:dc:c9:
51:d5:a9:5e:7f:ee:0a:f3:35:b7:e6:88:17:8b:fd:
47:8b:48:ab:72:6f:a5:ba:73:7d:cb:4c:7c:c9:5b:
63:1e:9e:97:dd:38:fe:05:77:f6:8d:34:78:5c:51:
24:56:bc:20:97:aa:76:33:91:1f:af:a9:2e:52:8f:
00:99:c7:42:28:20:77:b9:fd:96:67:41:92:9a:8e:
29:b9:3d:e8:5a:39:5f:b0:7a:87:1a:c3:94:67:b4:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:AC:B0:E6:A1:3D:4E:B7:77:93:63:50:3E:1F:C5:E4:CB:90:59
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eEmssOahPU63d5NjUD4fxeTLkFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:83f0::/48
Signature Algorithm: sha256WithRSAEncryption
7b:16:de:21:17:e8:7d:6b:38:5a:d2:8f:56:d6:83:fb:40:54:
1d:99:29:cc:4a:ba:f7:fb:a1:f1:dd:66:89:bd:03:83:bd:05:
5a:89:b9:ce:24:3a:26:e4:ee:86:01:68:c6:84:e1:8d:73:4d:
05:7a:17:90:56:fb:fb:c1:e6:15:48:29:3f:50:c6:6f:0b:80:
81:c1:51:ef:7c:cf:e0:60:68:c9:5c:3e:10:3f:67:da:37:13:
d9:10:1d:ae:7a:b7:d0:00:17:57:58:c1:08:50:6c:5a:0d:bc:
5e:a7:3a:df:2d:a6:84:93:b8:52:c0:dd:1a:96:e4:b6:ae:fc:
b1:d0:18:e9:3b:0f:33:78:fa:5f:bf:e5:4f:98:33:5d:03:fe:
50:8e:7a:a0:55:1a:67:4c:ed:60:c4:bc:7b:38:5c:1e:85:1b:
ef:ca:5b:b3:25:55:f7:45:60:18:65:2b:ad:5a:9e:6a:02:c7:
ad:f5:28:8b:4a:7e:9f:b7:ac:d7:fe:89:94:0a:69:d0:40:f9:
49:61:86:7d:05:2f:84:7c:a2:07:3c:fb:5a:a2:07:54:e7:88:
62:84:25:eb:92:9d:83:b7:0c:ae:97:b7:c1:d7:38:11:98:34:
a4:b6:f0:85:29:9e:c4:18:b6:db:48:e0:4a:e6:e3:4a:4c:73:
38:83:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:36:57 2024 by rpki-client on console-fra.rpki-client.org