Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EJDQFlt2zDtEQL2ZxBtTNjRsLdk.roa
File: EJDQFlt2zDtEQL2ZxBtTNjRsLdk.roa (raw, json)
Hash identifier: t8LK9X7UfyytdRREUgZxo8dq4DfSMWjVZbyZ5pE8CLA=
Subject key identifier: 10:90:D0:16:5B:76:CC:3B:44:40:BD:99:C4:1B:53:36:34:6C:2D:D9
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0186BB857764DE1D17EE5D2BF96FBC943260
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EJDQFlt2zDtEQL2ZxBtTNjRsLdk.roa
Signing time: Tue 07 Mar 2023 10:02:11 +0000
ROA not before: Tue 07 Mar 2023 10:02:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199654
IP address blocks: 2a12:bec0:200::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 04 Sep 2023 12:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:85:77:64:de:1d:17:ee:5d:2b:f9:6f:bc:94:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 7 10:02:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1090d0165b76cc3b4440bd99c41b5336346c2dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5c:5b:38:23:5c:01:ee:e7:16:e7:6c:8d:6f:
ad:6d:f7:9b:f5:20:19:13:7e:c3:84:b7:9e:e3:b6:
0a:91:70:0c:b5:8e:aa:d5:46:50:8f:de:3d:a8:1d:
05:b3:39:fe:b8:fe:8d:e8:53:28:86:3f:33:08:59:
92:cb:47:e2:a9:85:2f:3d:a9:5f:17:b6:a3:81:c9:
d2:fb:d3:91:9b:ac:d7:71:10:ed:9a:2f:e6:b4:7b:
71:ca:31:32:93:5b:18:ad:b8:da:1e:bf:0a:e1:4f:
ed:b8:60:f1:32:94:70:0e:93:ee:58:46:0b:37:ae:
d5:cd:e3:e4:e0:84:e8:22:c5:f3:73:2b:ba:db:2b:
cc:d9:ab:2b:2c:f1:b8:79:39:dd:ee:a4:66:f3:13:
c7:79:02:a3:a6:58:e0:fc:91:9f:75:c0:b0:d6:16:
45:b1:ea:55:10:35:8c:7c:15:46:49:91:d2:20:d8:
1d:d5:b6:cc:7d:1f:de:12:6a:af:9b:b8:a6:c1:61:
7e:4e:95:7c:a3:4f:d5:3f:65:c7:bf:13:6a:c0:3e:
f6:cf:81:45:54:09:c7:63:55:d2:c9:45:4e:0d:a6:
33:9d:ed:47:91:64:cb:cc:59:22:4d:d2:8c:bd:c8:
9a:a9:98:59:8e:95:2f:80:5e:57:5a:1b:e3:75:15:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:90:D0:16:5B:76:CC:3B:44:40:BD:99:C4:1B:53:36:34:6C:2D:D9
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EJDQFlt2zDtEQL2ZxBtTNjRsLdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:200::/44
Signature Algorithm: sha256WithRSAEncryption
b7:75:95:a7:95:82:e6:25:b4:91:19:42:85:6a:3e:b2:45:5a:
ec:f8:9f:b0:52:cf:5c:4c:fc:16:fd:2e:75:dd:68:c5:49:ae:
0b:01:ba:b8:a9:34:87:84:a2:ac:8d:d9:62:ee:81:01:8d:2e:
0f:66:97:c5:59:4e:ef:9b:00:84:23:6b:65:d7:48:b6:e7:39:
38:75:38:07:07:65:50:eb:30:fb:e2:83:8e:79:e7:33:0d:56:
df:e3:a9:48:56:c6:85:6c:7f:64:79:36:1a:1c:8e:7f:29:f2:
dd:b0:26:c6:ae:ef:38:d8:ed:67:e1:ee:44:0a:71:46:4b:e1:
07:0f:9a:b2:14:a0:f5:ff:90:51:e1:57:f6:6a:e7:6f:37:0b:
53:b3:22:cb:c4:81:7f:4a:1e:94:2e:aa:99:13:6b:b3:39:ed:
be:02:91:ed:f6:ed:a7:28:c3:a9:6f:88:3b:c5:9f:64:a4:bf:
79:c1:87:d9:95:e8:5b:bc:fc:e1:e0:1a:23:96:f6:75:9d:03:
5e:d4:b7:51:1b:e6:5f:90:8a:12:fd:39:08:df:ce:ca:cc:4a:
b8:67:3c:d7:12:5b:e3:63:c4:e2:09:dd:96:07:83:96:0c:9f:
da:c7:a8:18:ed:70:b3:2a:97:c9:02:6a:4d:85:e0:e8:89:a1:
d8:81:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org