Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/eClh236sgYjOA5Q2OvRwj3LHmqo.roa
File: eClh236sgYjOA5Q2OvRwj3LHmqo.roa (raw, json)
Hash identifier: U7KwqUT2ua/tq9PLFwwJtSlGe1BbXJv3xFhupl4svQ0=
Subject key identifier: 78:29:61:DB:7E:AC:81:88:CE:03:94:36:3A:F4:70:8F:72:C7:9A:AA
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 018571D7E93C4C28A6BCD30055BE9B5E445B
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/eClh236sgYjOA5Q2OvRwj3LHmqo.roa
Signing time: Mon 02 Jan 2023 09:37:33 +0000
ROA not before: Mon 02 Jan 2023 09:37:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 2a00:1a28:1157::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:e9:3c:4c:28:a6:bc:d3:00:55:be:9b:5e:44:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jan 2 09:37:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=782961db7eac8188ce0394363af4708f72c79aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:f7:dd:d5:3a:86:ef:56:c7:6b:b0:46:e1:
d2:96:90:cd:1c:ee:16:93:81:70:e8:65:bc:ce:93:
dc:fe:05:2a:c2:41:ab:b6:65:68:4f:01:73:07:c1:
56:85:34:e7:7b:b7:57:04:d3:1e:44:73:5a:50:c4:
dd:89:b6:94:e5:0c:ed:34:2c:42:48:bb:fe:bb:de:
9f:6b:22:4f:1c:e0:b2:31:16:d7:f5:61:b0:33:49:
93:99:6b:d8:6a:87:a8:42:14:a3:4a:17:81:86:bb:
8d:c0:3d:92:9a:18:fd:62:69:54:92:a8:0a:79:d3:
e2:fc:d6:01:59:69:61:86:97:2b:c4:9d:ac:3d:78:
08:0a:b0:bb:8a:58:48:d9:d4:c3:4a:9f:a2:5a:5f:
99:5d:e8:16:06:c6:9b:92:bc:29:47:38:2d:05:4d:
57:37:92:0a:70:ab:63:53:1b:94:33:e3:c7:c7:d7:
c0:5c:89:73:74:68:d7:ed:15:31:12:55:28:89:70:
a0:8a:b2:2d:83:0e:f1:db:12:05:87:88:d0:0f:85:
33:60:12:30:35:d3:b1:93:f2:73:65:90:12:4a:15:
78:61:be:53:5e:1f:74:a6:90:e4:5e:79:7e:17:e4:
25:95:39:a4:f5:ef:b9:7e:bb:d1:29:fa:c2:96:e0:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:61:DB:7E:AC:81:88:CE:03:94:36:3A:F4:70:8F:72:C7:9A:AA
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/eClh236sgYjOA5Q2OvRwj3LHmqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1a28:1157::/48
Signature Algorithm: sha256WithRSAEncryption
01:e7:47:34:c0:66:48:61:13:62:b0:bc:84:32:83:48:a3:6d:
6c:83:66:61:13:2c:d0:23:58:99:5a:83:56:7b:ce:ce:fa:8a:
8f:26:5e:57:71:1f:4a:aa:36:94:c0:bd:53:9b:2e:f9:1f:8c:
48:82:85:2e:56:06:1f:4d:12:95:03:5e:02:32:5a:b4:49:c3:
01:55:a5:d1:e6:2f:df:6b:87:6e:a3:b4:9c:4b:5a:6c:4a:5d:
84:f0:95:f1:4a:be:45:0a:6c:66:d4:fa:4f:47:c2:4b:ad:c2:
d2:a7:92:d1:e8:6a:0f:16:6a:6c:53:ec:0f:28:77:b3:b2:84:
50:63:cb:19:5c:a5:1c:42:ca:41:c9:12:f4:c6:23:e9:bb:17:
5a:c5:d2:b7:a7:45:3c:66:54:59:11:5c:70:a0:6d:0c:f8:76:
58:7f:f9:75:7f:78:9a:94:b7:8a:a7:83:73:72:23:02:6b:1a:
b2:1d:35:9d:f8:ec:2d:b3:70:87:a5:8d:84:33:17:c6:b5:88:
8d:69:ac:6f:40:7f:73:4f:3f:c3:1b:23:8e:69:31:cf:e0:07:
b9:c8:39:63:a1:14:8c:44:f7:d5:64:e5:28:c0:6b:24:21:2d:
72:89:0e:d1:df:f4:b1:df:54:4d:26:ab:1b:53:6a:ef:74:56:
04:85:ec:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVx1+k8TCimvNMAVb6bXkRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjMwMTAyMDkzNzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODI5NjFkYjdlYWM4MTg4Y2UwMzk0MzYzYWY0NzA4ZjcyYzc5YWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArof33dU6hu9Wx2uwRuHSlpDNHO4W
k4Fw6GW8zpPc/gUqwkGrtmVoTwFzB8FWhTTne7dXBNMeRHNaUMTdibaU5QztNCxC
SLv+u96fayJPHOCyMRbX9WGwM0mTmWvYaoeoQhSjSheBhruNwD2Smhj9YmlUkqgK
edPi/NYBWWlhhpcrxJ2sPXgICrC7ilhI2dTDSp+iWl+ZXegWBsabkrwpRzgtBU1X
N5IKcKtjUxuUM+PHx9fAXIlzdGjX7RUxElUoiXCgirItgw7x2xIFh4jQD4UzYBIw
NdOxk/JzZZASShV4Yb5TXh90ppDkXnl+F+QllTmk9e+5frvRKfrCluCFTwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHgpYdt+rIGIzgOUNjr0cI9yx5qqMB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvZUNsaDIzNnNnWWpPQTVRMk92UndqM0xIbXFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAaKBFX
MA0GCSqGSIb3DQEBCwUAA4IBAQAB50c0wGZIYRNisLyEMoNIo21sg2ZhEyzQI1iZ
WoNWe87O+oqPJl5XcR9KqjaUwL1Tmy75H4xIgoUuVgYfTRKVA14CMlq0ScMBVaXR
5i/fa4duo7ScS1psSl2E8JXxSr5FCmxm1PpPR8JLrcLSp5LR6GoPFmpsU+wPKHez
soRQY8sZXKUcQspByRL0xiPpuxdaxdK3p0U8ZlRZEVxwoG0M+HZYf/l1f3ialLeK
p4NzciMCaxqyHTWd+Owts3CHpY2EMxfGtYiNaaxvQH9zTz/DGyOOaTHP4Ae5yDlj
oRSMRPfVZOUowGskIS1yiQ7R3/Sx31RNJqsbU2rvdFYEhewM
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:41 2024 by rpki-client on console-ams.rpki-client.org