Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EbMJuy2TRKYetsS_trhagq6djok.roa
File: EbMJuy2TRKYetsS_trhagq6djok.roa (raw, json)
Hash identifier: HE70y5bUieDvvSQ0aAa5fSDOdFvdo+yE44FUmlb0yTg=
Subject key identifier: 11:B3:09:BB:2D:93:44:A6:1E:B6:C4:BF:B6:B8:5A:82:AE:9D:8E:89
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0187DCCCD12ADE5EE8BE7FA08FD1F21390F5
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EbMJuy2TRKYetsS_trhagq6djok.roa
Signing time: Tue 02 May 2023 14:10:23 +0000
ROA not before: Tue 02 May 2023 14:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208328
IP address blocks: 2a12:bec0:fc0::/42 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:cc:d1:2a:de:5e:e8:be:7f:a0:8f:d1:f2:13:90:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 2 14:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11b309bb2d9344a61eb6c4bfb6b85a82ae9d8e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:8e:51:1c:08:ae:60:d1:09:58:aa:ea:82:
0e:91:4e:02:07:49:91:83:1a:bd:8d:91:e3:83:68:
1a:b7:4f:f5:e1:1a:93:ab:cd:fb:ff:79:ae:69:1e:
63:54:82:f7:28:ed:55:c0:62:16:4b:0a:92:c1:52:
e8:53:b9:4a:5d:a9:78:24:fd:73:b5:09:26:e1:0c:
14:c8:46:26:71:f5:db:34:32:50:5b:28:b5:dc:89:
d9:8a:b7:79:85:d5:f9:af:b8:21:f0:fb:d2:7d:e9:
e5:38:80:3b:a7:fd:43:ac:5a:aa:3e:c1:0e:55:85:
6d:93:1d:16:5a:7b:18:f9:e7:83:98:f2:43:7d:37:
81:30:97:a8:03:d2:26:b5:73:08:89:67:a5:9e:88:
a4:c9:82:1c:21:39:96:35:c1:77:46:29:de:5a:27:
98:0b:21:e7:22:94:0b:38:8f:36:d9:fe:86:3b:15:
9a:16:6a:9f:54:93:8c:2f:33:15:a2:9f:aa:d2:06:
64:d4:bb:45:c9:cb:71:78:48:74:09:2c:d1:46:38:
78:4c:02:ac:da:5c:8e:b7:be:8a:6a:5e:f1:12:32:
fb:59:d2:7a:29:67:a4:99:de:e5:6e:09:43:2e:aa:
26:d3:0c:55:7e:05:e2:a9:5b:fe:3f:0b:42:35:8d:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B3:09:BB:2D:93:44:A6:1E:B6:C4:BF:B6:B8:5A:82:AE:9D:8E:89
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EbMJuy2TRKYetsS_trhagq6djok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:fc0::/42
Signature Algorithm: sha256WithRSAEncryption
b5:a0:f2:a7:99:4e:6e:09:75:74:c8:db:a6:e9:6a:c5:42:5d:
e4:6b:d5:a8:02:df:c1:37:80:6c:61:07:0f:f3:67:a5:cf:d0:
9f:33:c4:8a:ff:f8:27:2d:bb:87:8c:c5:71:0e:ac:3f:e2:cd:
d3:1d:62:91:e5:9a:d9:ee:12:e7:6e:a3:8a:ef:b0:92:a7:0b:
fc:37:9d:33:ed:b4:44:75:c7:14:0e:0b:95:a7:43:dc:16:fb:
8a:ea:ea:06:e7:3d:ea:32:25:8e:9e:5b:f4:64:f6:11:c1:7f:
d2:46:43:e5:a9:25:b6:6d:8a:23:a6:dc:65:2e:d6:8c:e7:22:
e5:f2:9c:1e:0c:68:3e:25:08:06:f0:4a:b7:0a:cf:68:d3:48:
36:3c:44:83:a4:a7:40:c9:4c:0d:4f:e3:1f:af:86:9f:02:aa:
61:8f:c0:f9:0b:2b:0c:35:d7:00:f9:d1:f9:ad:6c:99:91:c0:
39:0b:72:3d:62:e2:f1:dd:29:96:a2:17:f9:bb:87:70:c4:14:
67:2b:e1:d0:21:b7:28:04:45:ab:b5:a5:1f:c6:20:a5:33:4b:
30:76:0e:f9:20:5c:61:d7:a9:9c:0a:a2:e5:eb:b6:50:7a:24:
7e:d4:a5:f3:95:d3:39:96:04:11:8e:04:e2:23:f9:f3:7a:96:
ef:2b:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org