Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iEB-bJ7wvp_EP5sRRFmcPAtto6E.roa
File: iEB-bJ7wvp_EP5sRRFmcPAtto6E.roa (raw, json)
Hash identifier: 0YsgTQIKM98qS9m5j+N2Aug/r6Gik7D43CvvatecScE=
Subject key identifier: 88:40:7E:6C:9E:F0:BE:9F:C4:3F:9B:11:44:59:9C:3C:0B:6D:A3:A1
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739003D1489DBE12F9C6B048CB6F9C59
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iEB-bJ7wvp_EP5sRRFmcPAtto6E.roa
Signing time: Mon 02 Jan 2023 17:38:16 +0000
ROA not before: Mon 02 Jan 2023 17:38:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208088
IP address blocks: 2a0b:b87:ffb3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:03:d1:48:9d:be:12:f9:c6:b0:48:cb:6f:9c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88407e6c9ef0be9fc43f9b1144599c3c0b6da3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:3b:42:43:f8:bd:9b:a0:56:48:9f:77:36:
76:f0:ea:3d:3d:4e:e5:89:d5:f1:f4:a1:10:fe:9b:
43:3a:a0:dd:9c:3c:27:fd:4e:2f:fe:f0:ff:6f:e9:
0c:0e:76:f9:04:97:32:80:54:10:ef:16:19:55:4c:
5c:77:fb:53:40:19:48:b8:70:d7:9a:96:00:df:d1:
b6:7c:dc:73:d8:f5:c1:46:32:1e:f9:97:9f:6b:fd:
b7:dc:e0:7d:64:b2:e7:00:24:ed:53:88:4e:c2:27:
ff:22:2e:30:56:a1:16:78:60:e1:be:2d:0a:4b:73:
8c:b4:e1:0f:7a:d3:da:7f:f8:f7:18:41:90:ac:78:
36:8d:82:56:f9:83:ac:c9:25:cd:59:40:f6:af:c0:
f5:6b:4e:9b:08:0c:c7:89:91:32:86:2c:40:71:64:
b6:e5:b7:80:6a:2a:af:12:43:cc:18:c5:22:1e:b5:
66:37:e5:38:dc:f9:c9:20:5c:10:59:fb:16:6b:24:
d5:e6:5f:53:54:2f:60:0b:cc:d6:12:3f:2c:6c:56:
04:55:09:a5:80:f4:11:45:dc:47:2b:18:46:19:d2:
65:86:eb:14:18:3d:30:50:5e:8f:7f:4f:8d:68:e0:
81:ea:40:12:f5:3f:f3:55:2b:a5:a9:91:fa:f1:c1:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:7E:6C:9E:F0:BE:9F:C4:3F:9B:11:44:59:9C:3C:0B:6D:A3:A1
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iEB-bJ7wvp_EP5sRRFmcPAtto6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb3::/48
Signature Algorithm: sha256WithRSAEncryption
b1:03:e7:9b:b0:28:cf:e8:9f:04:50:51:f2:ca:e7:40:0f:71:
a3:e3:f9:bc:cf:fd:95:e1:f1:fd:55:39:3e:97:f4:21:b8:3b:
42:6e:5a:89:5c:f1:50:42:c5:54:5a:a0:6a:66:17:dc:dd:38:
2d:35:d1:c9:e2:fe:02:89:84:f8:7e:49:1a:d4:c9:03:1e:58:
22:de:80:bb:43:5b:98:70:49:53:66:69:da:4a:a5:b2:4b:d1:
45:72:df:83:fc:6d:02:5d:d7:ac:4b:85:b5:ff:6f:e8:c9:a2:
60:cb:ad:8b:9a:96:33:4f:e7:d7:a2:ce:26:0b:cd:59:17:65:
72:80:4a:f6:92:c6:9b:b8:b3:36:74:a8:da:f4:6c:93:65:5d:
59:f4:08:9a:a6:d1:cb:7f:f4:38:e0:a8:7d:cb:da:f6:4b:9c:
f6:01:71:c0:8b:b9:e5:ff:5c:4d:cc:f1:f8:57:a2:00:c3:cb:
26:da:b3:7b:50:08:1e:52:73:01:79:40:aa:f6:c1:0d:a2:dc:
27:f2:94:f2:0c:81:eb:1b:71:e1:1f:c7:a4:d1:15:5c:76:8d:
6f:25:3d:79:aa:8b:a2:33:5c:e8:c2:ef:d3:a7:35:73:b4:84:
a3:a9:18:c0:1e:fb:b9:ae:06:b2:ed:f9:f5:06:03:7d:97:eb:
40:58:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org