Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/5jbZ5d06z36oFo4UEdMZ1EjBEOQ.roa
File: 5jbZ5d06z36oFo4UEdMZ1EjBEOQ.roa (raw, json)
Hash identifier: suc/FlQoM3A0Ezz3uMVPK3u8u13/pHKTcrL8Nl6iPpA=
Subject key identifier: E6:36:D9:E5:DD:3A:CF:7E:A8:16:8E:14:11:D3:19:D4:48:C1:10:E4
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 018571F9F37C3057C5488B102562AF09E4C5
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/5jbZ5d06z36oFo4UEdMZ1EjBEOQ.roa
Signing time: Mon 02 Jan 2023 10:14:44 +0000
ROA not before: Mon 02 Jan 2023 10:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200044
IP address blocks: 2a00:eb9::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:f3:7c:30:57:c5:48:8b:10:25:62:af:09:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jan 2 10:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e636d9e5dd3acf7ea8168e1411d319d448c110e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:40:a8:14:09:90:48:52:f0:bc:00:4c:bf:0e:
94:b6:25:9d:91:e5:e3:62:9e:cb:32:90:11:cd:69:
45:04:b4:1d:30:7c:09:bd:42:9c:85:fe:3c:d2:a6:
5b:93:37:44:48:85:3d:6f:fe:03:8c:33:e1:bb:71:
44:ae:ca:ac:93:41:31:32:fc:e0:9e:4c:aa:76:d0:
c9:20:c6:65:30:8d:af:1c:58:72:da:8c:b1:d7:3c:
7c:4d:81:64:99:72:5b:2e:0e:06:4f:3a:72:42:c1:
96:84:f1:37:30:b8:95:1d:5b:50:c2:cd:94:ef:ff:
6c:d0:4e:ad:a2:ed:85:a7:1a:2f:50:0e:6f:1d:19:
ad:34:eb:ac:ef:98:51:a1:c6:82:5a:69:3f:a2:67:
68:96:33:03:b4:18:8d:c4:36:3f:83:cb:a4:70:71:
87:4c:cf:e8:bf:c2:7b:9f:c5:09:f4:f2:b5:af:9b:
a7:d8:84:48:d3:d3:48:05:0b:0c:be:fd:5d:8e:82:
0f:02:52:44:28:b5:50:96:60:5a:bf:5b:cf:f5:16:
1d:9a:bc:c8:c6:47:27:de:2a:63:de:08:30:07:55:
92:5a:c8:c5:76:5b:e5:79:ee:63:a5:e3:e1:26:e1:
c1:49:2c:b3:58:41:6f:82:25:2e:d0:d0:d8:d0:a4:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:D9:E5:DD:3A:CF:7E:A8:16:8E:14:11:D3:19:D4:48:C1:10:E4
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/5jbZ5d06z36oFo4UEdMZ1EjBEOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:eb9::/32
Signature Algorithm: sha256WithRSAEncryption
12:e6:28:58:d0:39:41:74:f5:de:80:cb:66:ac:84:48:04:11:
19:ea:9a:53:0c:01:a9:cb:b3:3b:d7:6a:35:90:8b:20:6c:7b:
ba:8c:e7:7d:47:43:3c:b5:ea:f5:2d:5b:41:5a:00:2a:76:e2:
0a:23:0d:9f:80:94:05:75:7c:f2:d9:bb:2b:c0:90:de:c2:6f:
9d:44:e4:c4:e2:ac:9b:da:33:7f:41:9f:69:f9:a2:61:8a:e1:
b4:69:ff:4c:47:ca:8f:5a:b6:dd:1a:f9:3b:ec:0a:69:14:c1:
bd:1d:d3:43:f9:21:4a:56:46:ee:7b:d1:db:4b:53:97:88:fb:
3b:71:02:c7:9f:3c:a1:6e:9e:2b:ac:11:87:cc:64:1d:74:1d:
7d:8b:2c:5d:cf:43:04:31:76:34:b3:29:9b:33:22:88:b1:0f:
c3:1b:0f:26:9e:21:81:70:4b:6e:3a:e3:99:b3:93:f2:5a:61:
fc:d8:9d:db:3d:26:10:68:8f:86:07:fd:01:dd:e4:01:13:af:
96:74:38:ed:bd:13:0f:80:48:ac:e5:e3:8b:6c:e8:7c:99:b1:
86:45:07:ba:e1:15:29:bd:e7:ae:55:fa:0f:d3:72:b2:2e:bb:
10:73:3e:27:40:bb:a9:29:b9:37:b4:32:f3:92:95:33:5a:4b:
d5:73:ab:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:25 2024 by rpki-client on console-fra.rpki-client.org