Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/eUqeNY_QQcsBwYYzLrX5K8Su7ls.roa
File: eUqeNY_QQcsBwYYzLrX5K8Su7ls.roa (raw, json)
Hash identifier: 5qsR5W4KYYniHKYPCvaXd7dI9JN2ealZPtqUb89wRWg=
Subject key identifier: 79:4A:9E:35:8F:D0:41:CB:01:C1:86:33:2E:B5:F9:2B:C4:AE:EE:5B
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 018571278F22839E1BDD876851DB90045B92
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/eUqeNY_QQcsBwYYzLrX5K8Su7ls.roa
Signing time: Mon 02 Jan 2023 06:24:55 +0000
ROA not before: Mon 02 Jan 2023 06:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 2a10:1fc0:7::/48 maxlen: 48
2a10:1fc0:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 Mar 2023 16:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:8f:22:83:9e:1b:dd:87:68:51:db:90:04:5b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Jan 2 06:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=794a9e358fd041cb01c186332eb5f92bc4aeee5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:fd:c8:92:a4:4b:d9:75:e1:62:c0:0a:35:
a7:13:3a:9e:27:c8:b8:f5:c2:2a:45:75:2f:47:92:
3b:a8:4a:71:37:7f:a2:c2:4d:1f:29:f4:73:ac:7a:
5c:db:bc:65:98:2c:93:5d:a9:c8:46:0e:b4:dd:9a:
95:a0:c7:4e:d1:6e:fd:0d:e5:ec:67:1d:b9:bc:e7:
c8:29:5e:6e:4e:d6:8b:77:48:67:79:c1:fb:c8:c1:
81:4b:98:25:81:93:af:8e:70:43:0f:e1:d6:02:89:
55:b3:69:92:8d:aa:b7:2b:c5:ce:b2:81:d4:9a:f1:
c9:fe:d2:93:ce:c9:5a:24:bf:52:90:cb:75:05:c3:
c8:b1:ce:1b:21:c2:cb:cc:43:40:3c:da:e7:34:7b:
96:9a:4d:08:dc:b5:bb:4e:d3:1e:35:79:46:a5:66:
1b:83:79:f1:9d:f7:13:77:a8:71:34:6d:7d:6d:9c:
00:3f:a7:a3:20:17:79:e1:9a:aa:ac:55:07:84:7d:
c7:30:f5:66:f9:4b:ab:97:46:c8:2a:ac:86:1a:52:
9a:68:a6:66:68:f9:fa:e1:87:01:fc:95:fd:e6:2f:
fd:df:2e:f1:6a:ad:55:22:49:27:0d:50:66:81:87:
d1:63:2c:94:00:99:1a:3b:23:98:a1:69:8a:6e:3d:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:9E:35:8F:D0:41:CB:01:C1:86:33:2E:B5:F9:2B:C4:AE:EE:5B
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/eUqeNY_QQcsBwYYzLrX5K8Su7ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:1fc0:7::/48
2a10:1fc0:a::/48
Signature Algorithm: sha256WithRSAEncryption
05:39:81:13:45:f0:64:06:1b:19:14:ae:72:e7:3f:74:ae:21:
4d:51:de:56:5f:e0:9b:99:28:c6:92:bc:62:a8:af:38:fd:67:
fc:14:f5:0d:2a:ca:df:98:5e:2f:36:65:c6:16:91:11:4a:02:
ad:d6:b7:04:f5:a2:79:03:2b:2f:fb:79:85:0c:a7:55:9e:ee:
31:21:18:f7:10:43:c3:48:81:7b:b3:b4:35:f3:a0:08:23:9d:
e3:0f:4d:99:a1:f7:48:d4:13:77:e7:f3:02:be:1e:f3:28:21:
d6:7e:64:72:dc:c2:8f:e2:78:df:a2:b4:64:a6:35:c3:21:56:
7f:10:24:9c:fd:6f:84:37:98:c9:93:72:7f:ef:15:2e:98:48:
f2:47:9d:c9:f2:dd:e6:61:d6:be:62:8f:65:69:09:d2:e6:fe:
31:90:15:de:1b:08:f2:e2:fa:7e:ea:6d:8d:0d:31:53:ae:26:
c6:52:f1:61:15:11:04:d9:9f:b7:64:f2:57:d3:ec:8f:1a:1e:
0c:94:3e:15:b5:3e:fe:d3:b7:18:1a:12:e6:ca:12:4e:91:aa:
b3:8a:32:2e:c9:dc:49:76:72:1d:b4:2a:38:2c:f2:f2:1c:ca:
e0:58:96:41:ba:53:fb:e9:a6:af:2f:77:bc:85:0d:40:9e:94:
85:32:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:13 2024 by rpki-client on console-ams.rpki-client.org