Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/EUNVQfItB5kI4DskuqseiNSjOU0.roa
File: EUNVQfItB5kI4DskuqseiNSjOU0.roa (raw, json)
Hash identifier: xPfEChcgP5z58NYI2ZuJoK+n4/17HjQ5B+gYqcDE21o=
Subject key identifier: 11:43:55:41:F2:2D:07:99:08:E0:3B:24:BA:AB:1E:88:D4:A3:39:4D
Certificate issuer: /CN=e02a93acae2cea321b7caa4ec551675ab9907b56
Certificate serial: 0185A634515FAC7E74F48BD5840DE1A656DC
Authority key identifier: E0:2A:93:AC:AE:2C:EA:32:1B:7C:AA:4E:C5:51:67:5A:B9:90:7B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/EUNVQfItB5kI4DskuqseiNSjOU0.roa
Signing time: Thu 12 Jan 2023 13:38:44 +0000
ROA not before: Thu 12 Jan 2023 13:38:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 2a12:be00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:34:51:5f:ac:7e:74:f4:8b:d5:84:0d:e1:a6:56:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02a93acae2cea321b7caa4ec551675ab9907b56
Validity
Not Before: Jan 12 13:38:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11435541f22d079908e03b24baab1e88d4a3394d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:53:87:3b:e0:f0:69:69:97:70:91:2c:75:
06:a1:1e:9e:f1:a2:41:72:94:24:f9:f1:6f:c9:01:
d1:d3:07:e1:39:ed:cc:98:5b:6b:77:a2:9d:0d:c4:
47:55:51:1d:b2:75:28:bb:63:42:00:f8:4a:fd:e8:
4b:c5:b1:4e:9e:05:e0:04:f3:e7:78:d1:d8:e5:f5:
31:b4:5a:6e:20:91:56:1a:e4:cc:22:11:c4:94:7c:
ce:86:11:82:cf:38:1c:98:e7:44:95:f7:a4:2f:1f:
b4:f8:4c:13:fb:b3:b8:ca:00:9e:eb:22:c3:67:20:
cd:f2:b1:9b:4d:b4:01:7f:64:67:4c:fd:5b:4e:21:
f5:1a:cc:dc:44:6b:62:b0:4d:b3:a0:8c:a5:a3:f1:
b3:87:eb:da:e7:88:b4:76:7f:b6:77:24:29:ec:cb:
f9:a1:ea:d1:de:d7:31:a4:ca:f5:fb:86:49:ea:82:
30:58:1f:db:bf:81:22:0a:dc:05:fa:c8:4a:85:3c:
44:8b:1d:2f:0c:43:72:ae:cf:99:28:2d:54:71:be:
8d:ad:f0:06:59:4c:b1:c2:71:46:26:b2:ad:e7:70:
15:6a:d5:3a:95:cb:06:3b:da:fc:3c:f4:9c:83:14:
2b:e8:02:23:84:c5:0a:7a:65:c0:5b:51:03:20:54:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:55:41:F2:2D:07:99:08:E0:3B:24:BA:AB:1E:88:D4:A3:39:4D
X509v3 Authority Key Identifier:
keyid:E0:2A:93:AC:AE:2C:EA:32:1B:7C:AA:4E:C5:51:67:5A:B9:90:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/EUNVQfItB5kI4DskuqseiNSjOU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:be00::/29
Signature Algorithm: sha256WithRSAEncryption
13:5b:51:cb:23:d4:a5:66:98:dd:61:c5:fa:1b:82:d6:d0:ed:
53:30:99:c7:1b:63:55:1f:1f:9e:70:ee:38:ea:06:a0:33:12:
cb:23:34:53:95:7a:98:33:b7:54:58:48:02:56:a1:31:d1:c4:
0f:b7:91:f4:4c:61:d8:77:25:71:f0:42:04:5a:df:f9:5f:a2:
03:4f:d3:97:bc:83:5a:ac:78:92:42:99:69:c0:be:98:c1:fb:
5e:b1:02:fc:15:70:c6:f4:4f:cb:8a:09:2d:9e:8e:10:41:60:
1a:59:fc:f5:c5:4b:f3:69:c9:ce:13:66:c0:02:91:c2:a9:c7:
c2:9a:78:09:26:73:23:7d:df:9b:7e:97:fa:0a:35:fc:33:5b:
14:d6:90:27:29:43:dc:b3:a7:87:c4:af:25:31:c3:85:2f:e6:
4f:24:1e:c8:cf:6f:08:f8:c3:b0:3b:fc:dc:dd:ba:5f:4b:10:
49:c4:37:c3:26:4a:62:d1:d3:64:7d:f8:94:1b:3e:bc:ef:db:
9c:f5:18:c9:db:09:ff:69:f1:b6:b6:c4:43:94:5e:97:f6:97:
ca:1e:4c:84:11:06:29:44:92:bc:f6:dc:08:be:1f:29:83:de:
7c:3b:fd:c6:70:4e:9b:15:2a:03:d1:ba:e7:a4:6a:70:b1:5c:
f7:c3:12:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 11:16:40 2023 by rpki-client on console-fra.rpki-client.org