Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ejb-ERsAkzY3Q2Vy7VhvfCWOTQk.roa
File: ejb-ERsAkzY3Q2Vy7VhvfCWOTQk.roa (raw, json)
Hash identifier: 82f/0iM3JOYjobhEZ7GDgKd6uC/hFDpTE6CFkuoZg4E=
Subject key identifier: 7A:36:FE:11:1B:00:93:36:37:43:65:72:ED:58:6F:7C:25:8E:4D:09
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019229FC3D482BC2D5B5AFB081E9EE5BECE3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ejb-ERsAkzY3Q2Vy7VhvfCWOTQk.roa
Signing time: Wed 25 Sep 2024 16:20:49 +0000
ROA not before: Wed 25 Sep 2024 16:20:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:de01:d8::/45 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Oct 2024 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:fc:3d:48:2b:c2:d5:b5:af:b0:81:e9:ee:5b:ec:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 25 16:20:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a36fe111b00933637436572ed586f7c258e4d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:90:5d:25:f2:f3:1c:9d:e4:c2:fd:72:78:
e6:29:52:46:4f:3b:9d:9d:42:9c:35:5a:c0:c2:e7:
53:65:94:1a:40:ce:a3:95:96:27:db:8f:27:77:15:
76:3d:2a:6d:83:10:be:7e:a1:01:6c:ba:e7:78:fd:
67:ef:f1:d0:c7:b0:4f:63:9b:a2:83:df:fa:54:45:
a0:0d:ca:be:b1:69:d6:0d:a1:c8:4f:3d:c9:43:e6:
e4:9a:98:cd:9a:c5:a2:40:45:9c:1f:9c:f5:b7:01:
48:43:ba:9a:89:6a:b8:90:01:3a:10:e4:c6:60:2b:
88:9c:e7:7e:78:16:29:10:a5:fb:1f:93:f8:09:c8:
40:a3:22:c4:8c:1a:ed:97:7a:e0:80:c8:da:80:86:
1b:2e:3c:62:c5:a4:81:2a:7c:aa:4e:64:53:96:05:
bb:d2:53:cb:67:c6:14:29:bb:e2:70:56:20:fa:98:
47:ca:db:80:2c:4c:f4:71:bb:4b:6f:49:6e:17:80:
c3:9b:c0:5e:a2:cf:74:f7:fd:96:d9:0e:ab:b3:15:
f0:c3:ac:c6:32:86:f6:3b:c8:ab:98:8d:d2:38:81:
40:38:c1:fc:50:d4:42:45:ca:6d:c3:59:85:9e:45:
54:c3:89:2b:72:a9:32:b9:c8:eb:07:87:32:c4:c9:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:36:FE:11:1B:00:93:36:37:43:65:72:ED:58:6F:7C:25:8E:4D:09
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ejb-ERsAkzY3Q2Vy7VhvfCWOTQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:d8::/45
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
be:e0:01:bf:71:da:04:52:bb:70:47:97:7d:32:e0:32:59:b9:
36:0e:ee:b2:7b:b1:76:67:ee:5e:09:66:1d:26:21:0a:c5:46:
9f:4a:e3:b6:1d:4b:e2:5e:66:2b:1d:46:95:2a:93:7e:16:a6:
14:83:a5:d9:ae:d9:cb:cc:2e:5a:4d:32:bb:2a:6e:6e:de:f8:
a2:3e:63:00:e6:b8:ae:84:41:8e:bd:e5:d7:c0:3e:cd:f5:01:
80:e2:81:98:39:ac:95:3a:b8:4f:8a:2b:a4:c4:b6:2a:d7:c9:
08:57:45:b8:a3:4c:dc:a8:45:ce:40:8d:25:25:7b:74:ce:b5:
fa:d1:a6:4f:d0:66:20:c7:1c:8f:5c:42:02:f1:aa:55:0f:3c:
32:a4:21:b5:71:d8:aa:c5:78:72:77:51:40:bf:59:24:0e:0a:
e6:3f:a9:6b:d7:bf:4c:f4:97:e8:7b:34:12:a7:d6:00:2a:c5:
74:72:f2:e2:77:09:e5:87:dc:3e:d8:ef:2b:24:27:99:48:7b:
b3:4e:f5:c6:ed:5e:04:32:47:a6:be:bd:96:9f:b6:48:f6:47:
87:a5:63:09:f9:0e:68:34:e6:52:9e:20:c7:d4:8d:c3:3b:24:
aa:42:cf:7e:c9:41:de:d7:9b:99:71:07:5d:b3:34:3a:23:3d:
c2:b5:4f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 17:19:21 2024 by rpki-client on console-fra.rpki-client.org