Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eej-c5oXhUHz6CXFj4BLEZiAlX4.roa
File: eej-c5oXhUHz6CXFj4BLEZiAlX4.roa (raw, json)
Hash identifier: ZSGFLSPd12Cjihg/v2TqoPTUR0Jj+A1Ewdji3X5rZZg=
Subject key identifier: 79:E8:FE:73:9A:17:85:41:F3:E8:25:C5:8F:80:4B:11:98:80:95:7E
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01856CC17F9919F1B77D58EEE5CAA7B418C9
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eej-c5oXhUHz6CXFj4BLEZiAlX4.roa
Signing time: Sun 01 Jan 2023 09:54:58 +0000
ROA not before: Sun 01 Jan 2023 09:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213120
IP address blocks: 2a02:2370:1000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:7f:99:19:f1:b7:7d:58:ee:e5:ca:a7:b4:18:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 09:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79e8fe739a178541f3e825c58f804b119880957e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:f4:da:aa:43:5a:59:16:0f:08:b6:6f:b1:
86:a2:2a:db:0c:dd:f5:82:a1:db:1c:d8:27:5b:9c:
82:0a:55:e6:f3:44:f5:62:2d:fd:d2:a3:1c:13:20:
7f:8e:3c:6e:9d:fa:68:bc:69:22:29:38:c8:57:df:
9e:0d:1a:4c:0d:ae:0e:2f:52:bb:bc:a3:db:3a:1c:
07:a2:5a:74:82:67:9e:da:35:20:04:c3:cd:88:aa:
00:6f:55:f4:c2:4d:23:d7:cd:ee:a4:a2:92:fb:5f:
38:44:56:42:fc:7f:60:a5:2a:1d:b3:52:13:c2:54:
cf:31:65:7b:72:fd:ae:e8:8c:24:7c:68:6f:2e:1d:
ac:b3:74:a4:dc:ef:44:2c:bd:10:3d:1e:25:aa:49:
7e:86:09:15:95:e7:12:1a:fc:00:04:71:57:d0:af:
1f:62:28:5c:ce:6f:ae:1d:57:e5:44:a8:1e:56:38:
af:60:f9:1a:f4:f8:78:35:52:84:f0:3e:31:e1:b3:
e5:67:b6:7f:a0:95:3f:95:1f:d8:27:74:bd:56:14:
bb:4c:05:fa:f2:82:f0:50:28:d6:f8:29:5d:10:5f:
27:72:15:f3:76:92:d7:d5:6e:28:cd:30:91:8c:f6:
09:f7:9e:a4:b2:31:c2:1a:bb:31:16:da:9b:0b:ca:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E8:FE:73:9A:17:85:41:F3:E8:25:C5:8F:80:4B:11:98:80:95:7E
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eej-c5oXhUHz6CXFj4BLEZiAlX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2370:1000::/48
Signature Algorithm: sha256WithRSAEncryption
a7:99:c9:8c:2c:82:d6:6e:56:2a:f1:f6:19:06:5a:55:f4:42:
ee:9b:c4:f1:b0:6e:47:ca:80:55:79:ea:85:97:10:d3:1c:e5:
ce:21:d5:8a:b9:11:43:4b:66:ff:40:11:68:38:f3:bc:1a:38:
8b:22:4a:4d:e7:d1:8f:2b:41:1c:a8:18:73:72:9d:be:42:1c:
db:af:e3:8e:bd:a2:35:13:79:20:6c:dd:f3:93:d4:db:44:7b:
f0:3c:ab:eb:e0:ba:db:8c:f6:86:9d:94:cd:b3:3c:6f:65:28:
f9:49:e5:78:f1:b0:c8:06:2e:f8:4a:71:37:82:fd:cd:d2:88:
76:c9:85:23:a2:f5:a0:75:a4:70:da:af:5e:52:72:09:73:bb:
d3:6e:15:0c:40:12:bf:b4:31:d3:01:71:c3:a3:61:d6:39:60:
c7:a8:d9:01:2c:34:e8:4d:4d:76:6e:f1:92:90:bd:2f:fc:5e:
07:97:cb:bc:31:de:27:c1:44:31:5d:8f:05:82:d0:c1:d7:f7:
df:a9:98:00:2c:e1:fb:65:23:b0:36:ea:95:f1:34:80:1f:8c:
b0:68:54:84:76:c2:ac:54:c5:a9:98:0a:1c:c7:4d:99:d3:4e:
94:37:6d:47:ed:41:ad:3c:e8:cd:1e:1e:5f:74:59:0f:3c:59:
c4:18:c4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:39 2024 by rpki-client on console-fra.rpki-client.org