Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0EkJXfhoyPnA6aVJKaRu2BYKyEA.roa
File: 0EkJXfhoyPnA6aVJKaRu2BYKyEA.roa (raw, json)
Hash identifier: K06/qK9SczqcEdTyT+xw8yUjTyETydM53nxGb/+YcQM=
Subject key identifier: D0:49:09:5D:F8:68:C8:F9:C0:E9:A5:49:29:A4:6E:D8:16:0A:C8:40
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0185707994B5D1FB14878CA62224A27C3F32
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0EkJXfhoyPnA6aVJKaRu2BYKyEA.roa
Signing time: Mon 02 Jan 2023 03:14:54 +0000
ROA not before: Mon 02 Jan 2023 03:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206125
IP address blocks: 2a12:bec0:8f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 May 2023 17:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:94:b5:d1:fb:14:87:8c:a6:22:24:a2:7c:3f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 2 03:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d049095df868c8f9c0e9a54929a46ed8160ac840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:74:56:5f:21:dc:b7:8b:b1:07:c5:97:7c:
6a:1d:6d:3e:15:d3:1f:d0:87:81:c1:9c:b1:de:ba:
8a:3c:0a:5b:67:76:b9:e4:0e:98:c5:04:ca:18:9b:
09:e8:38:65:2c:cd:66:e7:6c:8d:54:8f:5d:a0:04:
ee:74:63:c5:e0:c2:2f:ba:7b:be:65:93:74:5a:5f:
44:ba:0f:71:6a:ee:a7:42:6a:52:61:c5:43:7a:7f:
d7:a6:9d:a6:e7:8a:c3:d0:8a:24:d0:a3:c9:48:d8:
29:59:cf:d5:1c:fb:57:e5:fa:95:53:14:cf:c1:2c:
6b:85:10:aa:c5:94:fb:d2:4d:f2:70:74:04:ab:fe:
e2:c4:9e:66:2a:52:2f:78:d7:25:79:f5:2d:41:82:
1e:7f:0e:82:74:eb:7a:31:c9:1d:ff:cc:14:82:1b:
10:24:6b:73:48:ed:01:a8:b2:ba:26:9c:c3:f8:99:
79:d6:04:7d:bb:bf:d8:ec:71:44:d9:8b:06:2e:80:
a1:60:26:e5:66:22:de:b6:0c:ca:64:d6:44:e2:42:
39:86:a9:8b:3e:1b:8f:3b:0e:0d:56:82:c5:46:c3:
aa:cc:33:e4:ab:5d:0a:98:ae:06:f8:9e:ea:f5:99:
b8:0f:ce:89:7c:90:19:cd:fd:b0:7b:35:78:ab:79:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:09:5D:F8:68:C8:F9:C0:E9:A5:49:29:A4:6E:D8:16:0A:C8:40
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0EkJXfhoyPnA6aVJKaRu2BYKyEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:8f::/48
Signature Algorithm: sha256WithRSAEncryption
28:5a:03:ce:00:90:93:86:a6:ec:8d:b5:0f:79:55:ff:16:45:
8b:81:0b:fe:85:6c:a0:45:1a:18:9d:62:f4:a2:59:a2:7c:d9:
9d:89:ca:a3:a8:64:0e:32:5e:aa:a4:19:4b:07:24:bc:3b:08:
0b:75:93:df:b4:44:ab:9e:f4:a4:64:78:fc:0e:19:b4:13:64:
48:23:60:f5:e0:4d:b2:5e:50:a3:f5:57:7f:ed:7e:7b:71:d2:
70:91:ba:c7:f4:3a:77:af:54:ba:a2:51:c3:fb:20:c0:93:04:
f2:40:2e:e9:f7:70:26:29:b2:36:49:e8:43:1b:a3:aa:2b:6c:
7b:03:ac:bd:00:8b:a6:e9:a2:ae:7c:dc:d0:51:29:c5:3d:f4:
d9:9a:dd:10:15:2e:e3:06:36:95:0b:37:f9:ff:34:80:79:bb:
28:4d:a3:78:1f:25:4d:48:61:30:33:97:d3:76:ce:ee:26:fe:
14:5a:ed:36:de:2d:1e:7f:f9:f7:bd:dd:7b:43:20:d2:6c:c3:
1a:9d:b7:be:18:98:09:54:0c:0d:5e:39:1a:de:65:1f:5f:77:
9e:fb:31:b3:22:11:77:47:5f:06:db:c5:f9:55:4b:e8:f1:fd:
b7:6f:d4:ce:9b:62:58:0f:b5:ba:4c:c5:f0:66:9f:20:7d:c9:
e6:58:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org