Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EBnXqHc2CNDQQaZyYZSPMJNjhJM.roa
File: EBnXqHc2CNDQQaZyYZSPMJNjhJM.roa (raw, json)
Hash identifier: BC4+m7Td6J/QtpE0N3dYbimunf+NCE4HaBY5KdF06zU=
Subject key identifier: 10:19:D7:A8:77:36:08:D0:D0:41:A6:72:61:94:8F:30:93:63:84:93
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7EBBB425E58468A19B48FCA33E773
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EBnXqHc2CNDQQaZyYZSPMJNjhJM.roa
Signing time: Mon 02 Jan 2023 05:15:25 +0000
ROA not before: Mon 02 Jan 2023 05:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210562
IP address blocks: 2a0e:97c0:620::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Jan 2023 07:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:eb:bb:42:5e:58:46:8a:19:b4:8f:ca:33:e7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1019d7a8773608d0d041a67261948f3093638493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ee:de:75:b9:e5:95:60:b6:57:74:a4:03:7c:
8a:87:8d:3d:5e:d2:60:1c:31:d2:ac:f0:b4:d2:55:
f0:3c:33:dc:81:d8:55:bc:c3:ad:20:01:e9:40:48:
d8:92:44:7e:5f:f6:eb:54:b6:3f:a7:6d:7e:ed:6e:
b6:69:7d:31:3c:02:22:d3:be:98:73:21:01:60:3f:
98:e9:8d:72:ca:eb:0c:e6:be:78:2a:ac:82:e3:25:
18:29:52:4c:5d:d4:70:da:1e:62:3b:a5:12:47:6a:
46:d4:ef:ba:d3:be:f7:d3:9a:3f:4d:c3:5d:e2:0d:
08:e9:9d:02:2d:15:13:c1:8f:a9:11:17:e4:2a:3c:
c1:3f:11:d9:ec:74:ef:fb:cc:3c:40:61:ce:19:ba:
37:38:40:9a:77:98:d6:9e:6e:f4:a1:7a:76:5b:b3:
1e:3f:64:d4:95:f7:7a:53:a1:65:30:b4:44:c2:98:
31:11:54:7f:36:db:ab:bf:07:ad:66:ce:c4:82:8e:
02:2d:cc:81:09:60:bb:96:f8:62:15:af:a9:59:ed:
80:f3:ff:83:0c:1b:b9:26:98:a2:f9:13:6a:2e:d0:
b2:93:29:d7:e9:b1:7f:2e:f1:45:c9:74:a9:a6:9f:
34:d6:72:7d:34:b5:c2:0b:68:1c:2b:88:18:16:65:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:D7:A8:77:36:08:D0:D0:41:A6:72:61:94:8F:30:93:63:84:93
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EBnXqHc2CNDQQaZyYZSPMJNjhJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:620::/44
Signature Algorithm: sha256WithRSAEncryption
a4:16:85:15:10:e8:3d:9d:4d:48:8b:9f:9a:65:4a:b4:16:35:
f7:73:00:e0:06:8c:f7:f0:81:2c:31:d9:d1:f6:53:2d:4c:db:
f2:b1:d4:1b:c4:5e:00:79:cc:74:4d:0c:2f:e2:e2:4f:6f:db:
9a:be:1a:1a:ab:15:32:39:a9:9d:28:5d:12:93:f0:de:f7:36:
ac:f4:8e:28:18:ed:f7:5c:0c:2d:ba:7c:07:db:38:9a:9b:57:
81:18:41:3d:6f:96:1e:92:34:cb:20:79:3a:d4:23:b2:6b:06:
62:ce:59:ae:3c:35:3d:66:1f:c4:80:51:1d:b3:6f:38:4f:1d:
30:41:e4:75:ec:13:43:25:1c:3d:3e:6d:6f:c8:63:34:2f:c3:
00:81:90:85:89:40:c4:0d:7c:68:79:57:e9:55:58:92:21:4f:
3e:8c:c0:b2:b4:00:0c:79:15:af:4f:97:35:ab:7e:2e:dd:8a:
24:d6:39:d4:74:af:ba:aa:8d:7e:2b:4d:54:85:1f:1f:fb:6a:
16:9e:b2:ab:d7:ff:5c:4e:bd:96:44:8a:f3:70:5b:d4:f0:0b:
0b:9e:c4:37:a8:15:9b:bf:d4:50:96:c9:4e:82:d8:bd:0f:29:
f9:3f:8a:5f:21:74:cf:b0:93:ec:6f:d9:ca:b6:cd:e9:38:cb:
8b:4b:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org