Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EaizSsPGA2TTAQpCTURudeDynN0.roa
File: EaizSsPGA2TTAQpCTURudeDynN0.roa (raw, json)
Hash identifier: aDLkYDxckcb5C0MZrDC6iUMPxDeEEOSUTfP2hc4p2PY=
Subject key identifier: 11:A8:B3:4A:C3:C6:03:64:D3:01:0A:42:4D:44:6E:75:E0:F2:9C:DD
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019334137322011CB0FFBE35026C95A977C9
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EaizSsPGA2TTAQpCTURudeDynN0.roa
Signing time: Sat 16 Nov 2024 08:25:10 +0000
ROA not before: Sat 16 Nov 2024 08:25:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214168
IP address blocks: 2a0e:9c0::/29 maxlen: 29
2a0e:91c0::/29 maxlen: 29
2a11:8c80::/29 maxlen: 29
2a12:1ec0::/29 maxlen: 29
2a12:1f40::/29 maxlen: 29
2a12:3240::/29 maxlen: 29
2a12:4680::/29 maxlen: 29
2a12:4980::/29 maxlen: 29
2a12:6980::/29 maxlen: 29
2a12:7d00::/29 maxlen: 29
2a12:9180::/29 maxlen: 29
2a12:be00::/29 maxlen: 29
2a12:da00::/29 maxlen: 29
2a12:e900::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 16 Nov 2024 17:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:34:13:73:22:01:1c:b0:ff:be:35:02:6c:95:a9:77:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Nov 16 08:25:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11a8b34ac3c60364d3010a424d446e75e0f29cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:47:43:74:c9:8d:cc:b8:4b:05:73:e0:d0:
90:47:46:18:b5:23:0c:bb:20:e2:eb:72:79:81:b8:
be:e9:06:f9:fa:cc:08:20:39:56:ef:12:d3:0e:53:
29:7f:f0:78:5c:da:29:07:86:79:2e:4d:c4:e4:a3:
76:09:b8:f3:3b:66:79:b8:65:61:af:3f:7a:a3:d5:
1d:e3:57:3b:5c:32:57:e4:59:34:59:7a:b7:b5:29:
dc:ed:ff:8a:63:b5:9d:02:d2:60:8c:07:7f:86:61:
da:b3:80:91:d9:cc:35:61:b7:95:cd:d4:94:50:78:
01:6b:55:bc:c3:37:f9:c0:3f:96:9b:e2:e6:82:92:
cd:18:be:7b:ff:85:b3:b4:83:35:84:38:75:9c:a3:
66:db:9f:1c:4b:ba:ca:28:c1:ab:6d:cb:65:66:2d:
a4:1b:26:2e:63:56:ff:ae:38:ed:2b:76:e1:1a:10:
8c:22:67:0f:2c:89:d7:8a:bc:78:0d:74:52:dc:a1:
f4:bf:c9:d7:71:11:21:0b:7e:cd:5d:dd:97:bf:d1:
25:3b:94:d8:3d:75:64:d8:44:6a:c0:50:c5:1e:9f:
a5:c2:af:f2:fe:45:ed:c7:0d:98:64:5a:ed:b2:f9:
e5:a3:27:1e:3f:65:30:bd:02:99:0b:5c:54:a1:f1:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A8:B3:4A:C3:C6:03:64:D3:01:0A:42:4D:44:6E:75:E0:F2:9C:DD
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EaizSsPGA2TTAQpCTURudeDynN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9c0::/29
2a0e:91c0::/29
2a11:8c80::/29
2a12:1ec0::/29
2a12:1f40::/29
2a12:3240::/29
2a12:4680::/29
2a12:4980::/29
2a12:6980::/29
2a12:7d00::/29
2a12:9180::/29
2a12:be00::/29
2a12:da00::/29
2a12:e900::/29
Signature Algorithm: sha256WithRSAEncryption
54:57:1d:f3:9c:59:ee:ba:6a:3f:4f:12:d6:d3:10:36:02:2b:
f1:79:ba:93:3a:e8:84:e1:06:52:d2:ab:48:35:e7:d8:58:e8:
9a:c3:81:0a:9c:76:8f:42:78:24:b5:52:a1:85:2f:3b:f8:24:
15:3c:9d:37:1a:75:ba:1c:33:af:22:04:1b:19:dc:d0:a3:e7:
69:e4:4b:e3:7c:f8:6f:e2:fc:5a:8e:14:22:81:de:88:e3:69:
c3:ad:b2:e6:a0:19:62:22:7c:3f:0f:01:5c:ee:da:37:98:af:
30:42:88:44:ef:83:96:7e:eb:7c:b3:67:61:05:ea:83:f7:60:
5d:5c:2d:9e:f6:52:cf:be:02:8c:67:44:66:44:7e:91:24:38:
43:6e:f9:f6:24:c4:c9:ae:0d:a5:cb:88:48:4d:82:c0:b9:73:
85:75:4a:e3:00:37:bf:55:f8:78:30:ea:f0:df:2a:28:dc:46:
f4:e7:22:f5:b1:25:50:48:58:0b:71:fe:58:65:09:9b:62:38:
a4:ad:fc:5f:d2:b3:d7:05:a3:30:dd:0a:f3:a5:59:2f:d8:7c:
25:6f:3e:73:0b:dd:57:81:8a:5a:b7:b5:ca:d5:9f:38:46:7e:
90:a6:83:c1:fb:f7:34:bb:73:65:ad:3e:4c:f8:33:ba:32:2f:
52:52:ba:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 19:55:58 2024 by rpki-client on console-ams.rpki-client.org