Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/eID3BOwaG7KWy8IMxKUDwm0l5Dg.roa
File: eID3BOwaG7KWy8IMxKUDwm0l5Dg.roa (raw, json)
Hash identifier: X50RNtJacSAIOcdbajlQQChK2HavEBERaJ9OV3ZN3GI=
Subject key identifier: 78:80:F7:04:EC:1A:1B:B2:96:CB:C2:0C:C4:A5:03:C2:6D:25:E4:38
Certificate issuer: /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial: 01856E38B7BB6ABB7046131195DCB4EEC279
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/eID3BOwaG7KWy8IMxKUDwm0l5Dg.roa
Signing time: Sun 01 Jan 2023 16:44:48 +0000
ROA not before: Sun 01 Jan 2023 16:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13030
IP address blocks: 2001:67c:924::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:b7:bb:6a:bb:70:46:13:11:95:dc:b4:ee:c2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Validity
Not Before: Jan 1 16:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7880f704ec1a1bb296cbc20cc4a503c26d25e438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:c8:27:31:b4:f6:7b:0e:77:62:ae:8a:6a:
1a:1f:48:e4:26:03:d9:d2:a4:fc:f1:20:75:f9:64:
30:03:be:ac:6f:77:72:f1:1a:80:97:25:09:50:46:
61:af:13:e0:53:3e:aa:3d:a2:a6:51:a0:43:2e:ae:
5a:61:4c:4d:b7:de:0e:71:52:87:c6:17:1a:d7:8a:
74:6e:20:27:e0:76:a1:5d:d5:ae:63:c2:64:2e:28:
fc:50:1e:a7:82:f7:47:46:7a:21:c9:7f:88:b3:f6:
3d:95:41:3c:63:75:15:76:f0:bb:95:ec:16:47:ea:
cc:7c:6a:d1:d3:a1:9c:71:a5:e1:ce:8c:51:11:98:
11:4a:4d:85:e7:6a:e3:21:bc:9e:3d:ac:65:27:95:
aa:fa:1d:59:0a:2c:80:55:bc:9d:f9:74:c9:d3:1e:
7c:76:8f:37:5a:8f:1e:be:54:76:37:4c:a4:9d:2a:
d2:3a:6b:7a:83:c8:85:6d:b8:dc:bc:d6:9e:9a:94:
00:7f:45:3a:ad:18:8b:cb:8c:ca:ba:3a:e9:89:a2:
9c:b5:95:17:21:0b:6e:85:13:ef:61:4a:f0:50:fa:
e2:7a:c7:dd:0e:46:92:7f:45:99:61:8b:56:35:63:
75:c0:72:bb:47:75:b1:45:0a:16:cd:db:20:69:10:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:F7:04:EC:1A:1B:B2:96:CB:C2:0C:C4:A5:03:C2:6D:25:E4:38
X509v3 Authority Key Identifier:
keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/eID3BOwaG7KWy8IMxKUDwm0l5Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:924::/48
Signature Algorithm: sha256WithRSAEncryption
2f:27:80:7b:8e:f2:96:cf:18:ff:26:22:85:77:e5:f4:38:8d:
17:2a:a4:0e:bd:2a:c0:d5:c7:46:b2:cc:ce:21:8f:57:e2:da:
58:90:25:9c:27:52:30:e3:5d:d6:4b:eb:40:9b:80:ef:db:3e:
4d:8b:c6:f0:ef:1a:76:c7:67:70:78:f3:9c:6b:e7:db:29:28:
e3:fd:0f:51:da:b0:db:f5:2e:87:3e:be:82:29:81:87:cf:eb:
a8:b9:e1:22:39:0a:aa:e3:36:20:69:8a:15:10:2e:de:53:fa:
45:1b:33:cf:23:a1:3a:6f:af:6f:ed:ba:c7:75:44:ab:bf:2d:
1d:e9:0a:4f:e1:9d:0c:f9:a0:bc:9a:56:fd:a1:b4:97:4d:f7:
0b:a6:a1:2d:b4:f8:9c:9c:0b:0c:63:d2:af:8f:13:cc:2c:16:
0d:36:7a:bf:bd:85:83:c5:fe:21:6e:0f:f8:d9:02:59:c5:23:
98:b2:0d:4f:18:f2:27:94:ac:51:8e:08:6e:8d:13:03:19:5e:
60:8e:0c:88:6c:5b:a4:76:98:df:fa:e4:74:27:b7:5b:be:d8:
e8:88:b6:bc:61:ca:2e:d2:c7:a9:c9:3d:79:90:90:62:a2:93:
8e:a4:ff:9d:82:ef:fd:98:07:55:78:25:08:f5:75:2d:06:df:
2c:1d:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:31 2024 by rpki-client on console-fra.rpki-client.org