Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eXRLByoAqIb08ufeB6Qi9uteVu4.roa
File: eXRLByoAqIb08ufeB6Qi9uteVu4.roa (raw, json)
Hash identifier: E5XVfC2RdENZHMhY4XM7YBsY1UD8Pd1rDz1W1WKhqps=
Subject key identifier: 79:74:4B:07:2A:00:A8:86:F4:F2:E7:DE:07:A4:22:F6:EB:5E:56:EE
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246E8801728B3A733DC4CE439E78329
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eXRLByoAqIb08ufeB6Qi9uteVu4.roa
Signing time: Mon 02 Jan 2023 11:38:47 +0000
ROA not before: Mon 02 Jan 2023 11:38:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213163
IP address blocks: 2a0c:9a40:b00b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e8:80:17:28:b3:a7:33:dc:4c:e4:39:e7:83:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79744b072a00a886f4f2e7de07a422f6eb5e56ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:df:9a:a8:a3:ec:46:37:6c:f5:5b:8d:8c:bc:
7d:cf:db:e9:d2:42:7b:47:ac:7f:69:75:04:3c:e9:
26:f4:3c:8b:3e:6d:17:06:ee:d4:1d:a0:4d:48:9b:
7d:91:1e:6a:e7:d0:1e:f1:51:d7:4e:c2:e4:2b:9e:
90:e4:17:5d:01:bd:45:fd:34:21:ad:43:a5:42:3d:
36:5c:1f:37:27:71:ba:15:bb:20:b3:21:0e:6f:bc:
fd:cc:91:69:b6:25:b0:57:62:3d:19:16:01:f8:9a:
2a:ca:17:22:71:6c:72:c6:b1:92:7c:86:84:03:da:
68:1e:d8:2b:18:9e:4b:e3:2b:b4:de:ef:d1:c8:ff:
b5:df:88:1b:61:ef:0b:e8:73:a8:0a:53:d0:a2:83:
cd:4b:f3:49:85:9e:62:80:55:2b:8d:01:7f:8d:60:
47:aa:d2:ed:de:bc:c5:ce:8d:79:1a:1c:d9:44:1a:
55:fe:05:7c:0e:52:73:cf:84:34:a6:75:4b:4a:94:
db:cc:ac:3c:30:64:3c:aa:0e:90:1c:84:8f:68:50:
23:96:a6:b6:02:03:ad:96:d9:93:29:28:69:32:47:
b0:51:4b:6f:4a:4d:ce:b1:33:37:47:d0:be:53:15:
73:0b:8d:96:dc:63:76:2b:02:c4:e9:d8:db:69:cc:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:74:4B:07:2A:00:A8:86:F4:F2:E7:DE:07:A4:22:F6:EB:5E:56:EE
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/eXRLByoAqIb08ufeB6Qi9uteVu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
97:17:3c:18:c9:af:36:fd:8e:8a:84:d2:3a:dc:41:3d:5f:c4:
d0:82:1e:13:29:bb:2a:16:e3:47:15:a9:ff:93:6c:77:06:30:
7a:a9:be:89:4c:da:c6:9a:50:8c:f3:94:87:b9:ce:99:a1:13:
31:de:f8:f3:ac:2f:fe:74:ef:c0:77:5c:75:1f:dc:a6:4f:46:
84:fa:82:bf:25:29:48:84:b5:76:19:62:04:5a:65:35:1a:99:
14:6b:fd:ec:6d:95:c7:a1:5c:d4:b7:f6:ef:21:1e:95:48:03:
48:e8:60:02:ce:42:6e:9f:09:45:f3:b3:84:91:74:b7:6b:01:
6d:38:78:29:69:c9:9e:00:f7:cd:42:ff:25:61:1c:78:5f:38:
a9:37:ee:9a:d8:ed:40:69:6a:f9:5b:ab:32:09:34:98:36:67:
59:f4:a4:97:80:79:20:ba:e6:3b:9c:df:bb:00:7e:32:91:dd:
04:46:1a:f3:55:c1:93:ba:67:d3:10:ab:43:a0:b3:e3:4c:89:
f2:8b:84:f7:25:e3:25:4e:ad:89:da:68:3a:71:01:97:49:ee:
a4:a2:51:35:44:91:47:11:c3:7c:84:8a:e2:d4:a0:ac:cc:fb:
bd:a8:b4:2a:20:83:60:b3:86:ef:1c:57:39:01:69:88:8d:d4:
93:53:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:50 2024 by rpki-client on console-fra.rpki-client.org