Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/l_EBoHC3r2fxGbbJd-NqJP278xg.roa
File: l_EBoHC3r2fxGbbJd-NqJP278xg.roa (raw, json)
Hash identifier: rMOShmiNB2aSJP5qhKAjTX0IZAS0uvclX2KkKCUUnNk=
Subject key identifier: 97:F1:01:A0:70:B7:AF:67:F1:19:B6:C9:77:E3:6A:24:FD:BB:F3:18
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01917A37A06A54E17C55D7FFF532E6FD3CEF
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/l_EBoHC3r2fxGbbJd-NqJP278xg.roa
Signing time: Thu 22 Aug 2024 13:12:31 +0000
ROA not before: Thu 22 Aug 2024 13:12:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 2a0f:3380::/32 maxlen: 32
2a0f:3381::/32 maxlen: 32
2a0f:3382::/32 maxlen: 32
2a0f:3383::/32 maxlen: 32
2a0f:3384::/32 maxlen: 32
2a0f:3385::/32 maxlen: 32
2a0f:3386::/32 maxlen: 32
2a0f:3387::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 05 Nov 2024 11:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:37:a0:6a:54:e1:7c:55:d7:ff:f5:32:e6:fd:3c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 22 13:12:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97f101a070b7af67f119b6c977e36a24fdbbf318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:e2:8a:22:24:08:d9:95:77:a3:ff:2d:38:
79:21:62:bc:5c:0e:b4:28:a6:2c:b6:43:a6:4c:1e:
4f:99:e0:f1:aa:7d:73:3a:e8:4b:7f:e9:d7:46:e7:
fb:1e:42:5e:05:a4:e4:ca:9a:f4:c5:1c:35:9a:10:
6f:b9:ba:e4:dc:47:31:2f:6f:78:23:37:22:06:12:
66:db:ec:07:57:19:d9:cd:11:40:ee:ef:40:bf:47:
ab:01:51:a4:db:e1:89:4f:a3:51:3b:8b:d0:74:09:
7a:2f:25:51:5f:9a:54:a2:fa:69:a5:0b:5a:9a:87:
9f:60:51:30:99:a0:60:cf:2e:7e:74:d2:b2:e8:58:
ca:f3:ab:6e:f7:b3:5c:c7:b1:59:2c:03:74:b3:c4:
23:5a:64:ce:32:da:3f:98:3b:37:89:c3:92:d3:26:
7e:e2:bc:2c:26:81:28:cc:a2:27:f9:21:e7:d3:39:
12:98:43:0e:cc:5f:c1:fe:74:3f:70:64:a9:b2:f5:
f5:f0:fe:2e:dc:3b:c3:80:ac:59:a4:27:9d:fa:8e:
30:ab:76:fa:c7:c5:50:a4:a9:54:34:17:37:7f:6f:
c5:11:8e:14:74:1c:5d:cd:50:cc:f1:60:69:91:14:
6f:24:d9:8d:4c:25:e6:51:e7:5d:0e:56:42:0b:08:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:01:A0:70:B7:AF:67:F1:19:B6:C9:77:E3:6A:24:FD:BB:F3:18
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/l_EBoHC3r2fxGbbJd-NqJP278xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3380::/29
Signature Algorithm: sha256WithRSAEncryption
24:d4:af:03:31:61:6a:94:3d:ca:6d:59:35:d9:5f:7b:bb:39:
12:c8:1b:7b:7d:8a:ea:d8:75:6c:53:ba:41:b5:9f:19:89:8b:
a0:08:24:53:6d:6c:40:11:89:ec:c0:03:91:50:bc:10:db:2a:
1e:f1:a2:0f:34:ee:46:6a:a1:af:91:39:6a:c6:8f:91:b4:64:
5a:c2:06:16:87:6a:39:c6:7e:d4:be:28:4a:75:c3:ad:98:54:
6c:87:c4:b2:2d:3f:b2:44:6e:9e:46:c6:da:10:66:33:4d:9f:
c7:f4:d9:48:1f:ce:ff:bb:9f:70:4f:1f:4a:71:6c:67:a0:9f:
05:34:f9:9b:15:e0:2c:7a:f0:61:42:1d:8c:67:0b:0b:32:0a:
ef:09:9b:17:da:74:2a:27:2c:2c:80:08:2d:ab:31:4a:dd:bc:
d4:d1:60:fc:bd:92:c9:a1:37:7c:c4:73:aa:05:4e:ec:19:33:
ad:9b:b2:51:7c:0c:56:08:74:8c:04:6c:bb:91:d0:d6:e1:0c:
37:1b:6b:d1:f4:2b:3b:74:ba:8c:be:2a:ce:8b:17:36:16:23:
22:e2:24:e2:f7:c0:20:96:38:89:e0:6e:93:ce:7c:29:11:ac:
f6:36:05:1d:e6:47:5e:4d:48:2c:31:95:f5:85:68:97:a6:a1:
9f:ca:cd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:11 2024 by rpki-client on console-ams.rpki-client.org