Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eemyYMDyY1peqBD-4imcq91_rtY.roa
File: eemyYMDyY1peqBD-4imcq91_rtY.roa (raw, json)
Hash identifier: OlvHKBhTb7pi4fDrmByKOoytUfQNSguBZcLDNTj4i6k=
Subject key identifier: 79:E9:B2:60:C0:F2:63:5A:5E:A8:10:FE:E2:29:9C:AB:DD:7F:AE:D6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7D6E7F132BDD2E25656785C63A930
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eemyYMDyY1peqBD-4imcq91_rtY.roa
Signing time: Mon 02 Jan 2023 05:15:20 +0000
ROA not before: Mon 02 Jan 2023 05:15:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208717
IP address blocks: 2a0e:b107:220::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:d6:e7:f1:32:bd:d2:e2:56:56:78:5c:63:a9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79e9b260c0f2635a5ea810fee2299cabdd7faed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:e7:96:f6:24:53:c4:31:52:90:97:48:ab:
57:97:c3:81:79:bc:54:0e:ae:2a:bd:0b:73:8b:fe:
e4:46:c3:5f:b3:ed:cc:44:4b:b5:0a:17:57:6d:82:
a6:89:c8:56:03:72:8b:cb:64:58:0f:11:ae:e2:8a:
86:33:39:d3:5f:ab:50:e5:85:10:bf:a0:fd:4b:3f:
22:d3:6e:0a:4a:78:b1:db:e2:22:96:33:52:e7:ae:
c5:1e:0d:7c:11:9d:ef:20:97:9f:7f:9d:8e:cf:76:
1f:b7:af:42:7a:6e:99:96:b2:35:52:cf:d2:8c:dc:
dd:c5:1b:85:1c:f0:19:58:0f:9d:ea:8d:be:89:81:
73:73:48:e4:4c:c7:7c:1e:b7:75:4c:be:83:91:27:
57:84:d7:40:ce:8f:31:97:84:dc:40:b2:b5:58:4f:
32:a4:e7:19:2f:fc:cd:4f:a8:54:cb:4d:7d:61:2d:
61:fe:3c:6a:13:29:fe:5d:2a:b2:aa:3d:d4:37:20:
2d:bc:d1:44:4b:30:b7:d9:df:91:d0:24:f6:3d:c2:
9d:4e:33:91:48:83:54:62:5e:76:c8:a9:c6:8a:87:
b9:be:5f:00:be:4a:68:79:d8:da:c3:4d:33:f3:6b:
c1:e7:f9:c8:45:b9:ff:9b:46:44:c2:92:bb:23:43:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E9:B2:60:C0:F2:63:5A:5E:A8:10:FE:E2:29:9C:AB:DD:7F:AE:D6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eemyYMDyY1peqBD-4imcq91_rtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:220::/44
Signature Algorithm: sha256WithRSAEncryption
aa:4b:e8:09:84:b2:49:2b:20:54:be:3a:fb:bf:ec:e5:fe:b7:
3b:87:b9:49:34:40:9b:a6:80:34:27:e0:3f:f7:ba:68:fc:f0:
33:1f:85:c3:8e:ff:6d:16:68:9e:2f:af:e9:e2:17:0e:a4:d1:
e7:c2:36:0a:62:9c:8f:5c:f3:46:81:41:16:eb:0a:c6:60:83:
ee:37:24:ca:42:4c:92:6b:b8:17:8b:b7:6f:60:b4:69:da:34:
a4:fa:f9:8d:9b:8b:76:11:e8:5d:7f:ec:f9:79:b1:0f:ef:49:
42:fc:cc:d4:28:75:ff:4f:a4:c5:e1:06:73:2d:ef:c8:fd:68:
71:6c:40:dd:16:16:e3:68:73:67:5e:eb:9e:23:3b:46:c7:cf:
c1:ca:76:1b:a3:d7:a5:30:3a:60:44:b8:d7:28:c9:ce:2a:d7:
d7:3f:db:df:3c:f5:57:be:49:3d:f4:7e:cb:d4:d8:3e:d1:98:
de:d0:63:f3:93:d9:50:f3:10:10:d4:ef:ca:21:53:a8:7d:35:
8a:f3:82:ec:83:9d:2b:51:ca:3c:a0:2d:f0:3f:77:39:f4:d1:
fe:f7:77:6a:8a:28:d6:b5:2d:85:5e:99:38:63:5f:35:04:c3:
bd:f3:0b:ba:03:2c:67:73:3b:6e:36:b6:5c:e0:d5:84:76:f3:
3f:10:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:08 2024 by rpki-client on console-ams.rpki-client.org