Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eMfRPW_4uHP3uowXLml0jVfIvwY.roa
File: eMfRPW_4uHP3uowXLml0jVfIvwY.roa (raw, json)
Hash identifier: +dmRuF2OVNTtXaQnpIW0h5swDAfGxyWJQbPWMVpW9ts=
Subject key identifier: 78:C7:D1:3D:6F:F8:B8:73:F7:BA:8C:17:2E:69:74:8D:57:C8:BF:06
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018B394070FD175897675406A85E25CF119B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eMfRPW_4uHP3uowXLml0jVfIvwY.roa
Signing time: Mon 16 Oct 2023 16:10:06 +0000
ROA not before: Mon 16 Oct 2023 16:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216150
IP address blocks: 2a0c:b641:ae0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:40:70:fd:17:58:97:67:54:06:a8:5e:25:cf:11:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 16 16:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78c7d13d6ff8b873f7ba8c172e69748d57c8bf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:97:55:07:12:b7:a1:7f:bb:34:e4:b5:5b:
be:0c:ab:c6:1d:5d:78:67:27:70:d6:5f:4c:50:18:
9d:4b:80:62:69:b9:97:f2:4f:0a:a7:c3:22:f4:ea:
80:6c:68:dc:f7:e9:96:b3:d7:1b:f2:40:da:14:ba:
23:19:fa:b6:74:c6:54:95:13:c4:ae:ce:0f:58:1f:
46:49:3f:c9:47:eb:cd:14:1c:63:92:22:3a:45:ec:
76:70:0c:70:ff:a3:17:be:76:7b:af:d7:e9:29:39:
98:81:80:8f:ff:13:01:a3:e2:89:6b:ec:68:3b:ca:
1b:30:93:bd:0c:6c:80:34:1e:cc:9a:51:03:6d:76:
4d:b8:21:1d:d5:28:e4:e9:14:d9:b3:03:66:4b:92:
6e:f1:1d:bd:c0:42:f5:76:48:a6:21:35:3b:19:b9:
57:9f:cf:41:d8:b1:5e:79:2e:0a:10:6e:af:7c:5b:
2f:c7:18:df:a9:0a:72:19:0f:63:69:2a:28:8a:b0:
e9:74:da:64:c8:87:4c:9d:e9:3a:c1:c5:54:ab:5f:
10:18:c0:ef:d4:84:87:a9:67:09:5d:d5:34:e5:a6:
f2:28:80:1e:a1:5f:55:5f:2e:ff:9a:7b:9a:3b:bb:
83:c4:de:67:3b:22:b9:da:15:d4:89:16:6e:bb:f1:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C7:D1:3D:6F:F8:B8:73:F7:BA:8C:17:2E:69:74:8D:57:C8:BF:06
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eMfRPW_4uHP3uowXLml0jVfIvwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:ae0::/44
Signature Algorithm: sha256WithRSAEncryption
55:9c:1f:17:cf:82:61:e1:28:2f:54:2a:73:27:93:0b:04:90:
b3:93:31:06:9f:d5:a4:ee:eb:c6:9c:c0:69:07:8c:30:ec:99:
84:0c:1c:0e:ed:aa:7a:e3:31:58:ac:22:7b:a8:2e:6f:d6:b1:
02:8d:79:21:69:c2:3b:2f:a9:97:b3:0c:1a:6f:a6:ed:4e:43:
9e:7e:27:31:94:70:83:52:d7:db:c5:e1:3d:9f:98:01:20:09:
8c:62:1d:53:86:75:16:44:98:ff:98:ad:21:d4:01:6b:e7:e4:
ec:00:e5:b7:1a:46:f0:a7:fc:df:4c:71:3d:fa:70:53:4e:e7:
07:d1:39:0b:5c:35:55:87:91:af:8a:4e:f1:bf:f2:96:41:23:
7c:a9:43:2a:5e:12:93:48:3c:1c:d4:48:9e:ab:8e:7f:c9:9a:
14:61:0d:4a:e7:56:e9:2a:0c:22:99:ad:d1:af:a8:f8:68:d0:
06:07:b3:ac:aa:95:17:c4:5b:cc:cb:64:aa:3c:50:f8:30:f5:
cd:d5:f2:95:d6:bb:64:53:37:13:98:3b:67:68:27:01:b6:fb:
72:e8:11:17:8e:9d:4e:bc:9e:db:59:47:e7:87:47:d3:03:2b:
56:27:08:b8:d4:1a:14:80:1a:b5:98:ff:57:c3:79:68:df:2f:
aa:21:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:01 2024 by rpki-client on console-ams.rpki-client.org