Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/EAJDCLot-e3vAMvVJ1FC26Ssz-Y.roa
File: EAJDCLot-e3vAMvVJ1FC26Ssz-Y.roa (raw, json)
Hash identifier: bZHXojksCAC2oISVsfxXqH06/CrY2H8c1Auv7jojYcA=
Subject key identifier: 10:02:43:08:BA:2D:F9:ED:EF:00:CB:D5:27:51:42:DB:A4:AC:CF:E6
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 0189C627B61D55C2980E82D7854D8C7F7242
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/EAJDCLot-e3vAMvVJ1FC26Ssz-Y.roa
Signing time: Sat 05 Aug 2023 14:43:58 +0000
ROA not before: Sat 05 Aug 2023 14:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200566
IP address blocks: 2a0a:280:1000::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 03 Sep 2023 05:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:27:b6:1d:55:c2:98:0e:82:d7:85:4d:8c:7f:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Aug 5 14:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10024308ba2df9edef00cbd5275142dba4accfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:51:7d:64:a0:29:97:f3:c7:f9:c9:37:a6:77:
0a:d5:4d:43:ee:d1:e4:e3:b8:51:1a:66:e8:83:3a:
d4:d1:50:3b:20:33:3b:e8:01:69:18:57:cc:eb:fc:
81:6e:6b:2c:c1:e5:8e:3e:d4:93:92:85:50:23:0d:
01:70:4d:52:85:3c:3d:cc:f9:2e:5b:a8:78:c5:0f:
bf:6e:d2:83:93:ce:1d:63:f4:0a:74:d0:a6:af:8e:
82:eb:4c:f4:92:31:4f:0c:ef:d0:db:31:5c:ac:75:
20:35:14:3d:c2:48:4a:7e:ba:8e:cd:82:28:0d:0f:
fc:99:d7:d8:cd:d6:f4:5c:b6:6a:56:fe:b5:7d:b3:
5b:3a:d6:f1:19:d9:37:f4:b7:73:1c:2c:ee:d0:2a:
f0:65:1b:29:07:d9:e7:de:85:bf:ec:c1:0c:ba:39:
56:21:36:a8:63:c9:9f:7c:07:9e:d5:c6:d1:27:1a:
55:74:25:e1:fc:8b:29:58:b6:ad:8a:8c:d2:34:5e:
4b:c8:1d:25:20:7f:3f:4f:b0:51:7c:64:b3:46:38:
d9:67:fa:55:2a:94:63:e2:3f:e1:1d:dd:1e:0f:bc:
32:67:da:03:05:a4:54:47:ba:a0:b6:b7:d9:3a:39:
73:68:8b:39:5c:2a:90:eb:b7:83:cf:05:21:5f:f5:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:02:43:08:BA:2D:F9:ED:EF:00:CB:D5:27:51:42:DB:A4:AC:CF:E6
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/EAJDCLot-e3vAMvVJ1FC26Ssz-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1000::/40
Signature Algorithm: sha256WithRSAEncryption
2f:f6:45:15:fe:1e:be:36:54:88:f3:6d:5c:4d:3f:92:28:10:
64:35:d8:c6:f0:c0:01:9e:e1:65:f3:85:79:b7:93:fd:42:65:
62:8f:ff:17:a7:75:83:c7:83:a9:6e:87:63:3e:a8:1b:2f:96:
5f:bd:90:16:60:20:bc:e0:34:34:d7:cd:40:a6:e3:1f:73:a7:
93:e3:ff:21:f8:b4:2f:aa:c5:08:93:00:ef:19:10:ad:a5:5e:
52:4f:11:ca:c6:20:79:12:3f:1e:24:32:28:e1:b3:0f:98:d0:
75:67:f6:09:79:17:ef:66:f7:3b:58:35:85:36:3f:ac:a7:0b:
9b:89:0e:a0:e7:ec:a0:cd:b6:f4:da:25:aa:ba:cf:a1:90:e5:
44:e9:8a:6b:9e:5c:eb:2e:5d:90:e2:0c:04:8c:25:51:4c:1d:
5e:19:80:b4:4d:cf:d8:75:d3:67:a5:18:f6:10:75:a0:5e:51:
a5:25:18:11:86:8a:dc:c0:ad:bc:04:2a:0c:d3:07:59:9f:16:
d7:35:8d:f5:cc:85:a9:3f:52:f1:bc:06:68:f6:d1:54:77:dd:
9d:50:24:25:71:f8:c2:74:ca:d5:03:28:ba:21:df:95:b2:9d:
d1:24:e5:a1:dc:ef:7d:93:9e:9f:24:16:60:5e:0e:37:da:fa:
fe:62:b1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:22 2024 by rpki-client on console-fra.rpki-client.org