Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/EsipFMQeiG-5etxweJzkhZV0cPU.roa
File: EsipFMQeiG-5etxweJzkhZV0cPU.roa (raw, json)
Hash identifier: F6B2xhke+2nVtrYll1v6oM3j+vMfXiOu0hf/RR8RZsk=
Subject key identifier: 12:C8:A9:14:C4:1E:88:6F:B9:7A:DC:70:78:9C:E4:85:95:74:70:F5
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 018FEEC4371805FEB9BDC58A16FCE6548BBE
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/EsipFMQeiG-5etxweJzkhZV0cPU.roa
Signing time: Thu 06 Jun 2024 18:16:27 +0000
ROA not before: Thu 06 Jun 2024 18:16:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215427
IP address blocks: 2a0e:a780::/29 maxlen: 29
2a10:9600::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:c0c0::/29 maxlen: 29
2a13:c140::/29 maxlen: 29
2a13:d240::/29 maxlen: 29
2a13:d2c0::/29 maxlen: 29
2a13:ddc0::/29 maxlen: 29
2a14:35c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 03 Jul 2024 15:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:c4:37:18:05:fe:b9:bd:c5:8a:16:fc:e6:54:8b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 6 18:16:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12c8a914c41e886fb97adc70789ce485957470f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:39:f5:6d:55:36:33:e0:0a:c7:c9:10:9d:
22:0e:63:e6:5e:a3:5a:bc:41:3d:c5:a5:e4:ac:98:
fa:09:06:7a:ba:2e:43:7d:56:56:55:6e:c4:59:25:
b4:59:a3:ed:d8:bc:0e:3e:74:cd:27:77:79:c3:08:
74:05:85:40:52:70:48:81:64:d4:75:65:43:43:e5:
c5:bb:a9:44:cc:55:70:5f:44:e0:cf:df:be:8d:9d:
9d:30:f9:5d:09:14:d0:91:cf:2b:80:24:0a:a8:d8:
28:4d:f2:b2:c0:77:56:a5:e9:3e:61:3f:07:6b:66:
86:03:f8:8c:80:67:f3:15:20:9e:13:a4:f2:70:3f:
0b:81:54:d8:ab:cc:b2:63:7d:ca:1d:f4:ad:81:ac:
6c:42:14:37:06:5e:71:5c:6c:64:33:17:10:19:4c:
fb:9e:f6:44:88:06:63:71:6e:22:4d:b7:bd:1c:2e:
8b:8c:f7:96:73:7e:03:a7:fa:94:e1:ee:b4:14:9b:
ac:40:01:4b:57:63:d3:00:38:91:01:f9:9b:27:9d:
e6:66:ab:cc:0a:f8:43:49:02:57:9e:76:39:58:f0:
e0:71:4a:04:46:f1:3a:5a:3d:cc:97:8b:1c:f6:47:
5b:05:bd:1f:8f:ef:61:40:f5:1d:0c:23:51:ab:40:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C8:A9:14:C4:1E:88:6F:B9:7A:DC:70:78:9C:E4:85:95:74:70:F5
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/EsipFMQeiG-5etxweJzkhZV0cPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a780::/29
2a10:9600::/29
2a13:b840::/29
2a13:c0c0::/29
2a13:c140::/29
2a13:d240::/29
2a13:d2c0::/29
2a13:ddc0::/29
2a14:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:ce:82:9e:66:21:0d:81:a7:bf:41:2f:96:3b:00:59:80:58:
05:43:f3:a7:d1:c8:34:09:a5:58:df:66:29:f5:86:13:a7:49:
fb:da:10:bf:f8:b4:f3:d0:27:f6:12:ac:dc:2e:32:f4:a1:05:
aa:dc:d9:fb:fe:a9:ad:d0:30:fd:14:73:74:fa:56:f9:7d:b0:
05:65:47:9c:be:8c:0e:92:3c:34:ad:d3:5a:5f:0f:a1:78:7c:
02:cf:b8:93:76:87:cc:d7:5e:b5:da:02:d0:dd:42:79:11:39:
9a:5a:46:53:7f:5e:9e:f2:b9:40:f3:30:ca:a6:36:53:6b:cc:
1e:6f:96:c1:04:a7:af:23:98:0a:b8:be:e5:fa:c1:88:2b:cd:
49:fd:39:92:ff:b9:ab:35:20:ea:89:c4:80:38:3b:28:06:c9:
eb:26:d3:b7:89:4b:d5:f0:f3:45:fc:38:83:2c:52:c7:a7:08:
04:20:63:fc:cf:72:52:31:0a:f7:13:21:03:2b:59:d7:2f:02:
0d:bf:29:28:30:71:e8:2c:54:ea:08:47:fc:bb:83:e9:55:7d:
2d:a2:d7:00:b3:a6:85:3c:6e:1b:e3:58:21:f9:fa:98:99:05:
19:3b:8d:25:2c:3b:36:b2:56:dc:e4:d3:ed:27:ba:ab:ef:bb:
38:c0:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 18:11:53 2024 by rpki-client on console-fra.rpki-client.org