Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EcaxJMLyBbQr4-euu45_h-TBPhk.roa
File: EcaxJMLyBbQr4-euu45_h-TBPhk.roa (raw, json)
Hash identifier: MgjmaGJMouUlyvpa9Vbk/gcQTzBFXHH2EBYMPgYwWFY=
Subject key identifier: 11:C6:B1:24:C2:F2:05:B4:2B:E3:E7:AE:BB:8E:7F:87:E4:C1:3E:19
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0186E09F65C2C1B90CDD96F5CE8A17EAEC0B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EcaxJMLyBbQr4-euu45_h-TBPhk.roa
Signing time: Tue 14 Mar 2023 14:56:27 +0000
ROA not before: Tue 14 Mar 2023 14:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199519
IP address blocks: 2a12:bec0:210::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:9f:65:c2:c1:b9:0c:dd:96:f5:ce:8a:17:ea:ec:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 14 14:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11c6b124c2f205b42be3e7aebb8e7f87e4c13e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:73:f2:e3:7e:2d:95:79:cf:e3:59:c6:fe:
f2:5e:b7:06:4e:b9:1a:17:12:44:f7:3e:98:bb:c5:
9f:fe:fd:6a:83:c6:74:a6:34:7d:85:4c:a0:8c:39:
52:84:5f:f5:0a:73:9b:6f:c2:b1:8f:24:12:f0:7d:
8b:83:4c:5f:ba:e6:b3:ce:52:9d:28:e4:1e:32:c5:
66:19:90:0c:be:75:4c:e9:ff:f9:ca:08:ab:8c:9c:
2e:41:7f:ff:7d:a0:fa:a8:16:89:c3:1d:c2:74:ed:
bf:e2:0d:f7:75:be:0d:15:e6:70:fd:d5:38:df:67:
8e:57:84:ae:e3:3c:3c:25:3e:a2:b3:67:13:f5:5f:
67:c3:36:b5:da:b9:97:24:c0:24:f8:93:e4:7a:65:
c8:16:3a:d0:02:68:20:ee:0b:37:d5:87:8a:63:01:
59:ac:cd:75:6c:e6:3b:74:c8:15:9c:57:32:9b:63:
eb:86:df:c5:46:d7:b7:b3:bc:9e:09:e6:8d:92:d0:
12:fb:44:aa:6d:75:dc:22:8c:11:58:53:81:cc:e2:
87:70:43:8e:76:a1:09:68:31:e0:d7:70:07:82:de:
13:0e:b6:ed:69:b3:f9:e2:54:df:9a:2a:3e:46:a3:
fd:9a:49:7a:c1:92:0e:fe:cf:6c:c0:36:a3:26:e8:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C6:B1:24:C2:F2:05:B4:2B:E3:E7:AE:BB:8E:7F:87:E4:C1:3E:19
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EcaxJMLyBbQr4-euu45_h-TBPhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:210::/44
Signature Algorithm: sha256WithRSAEncryption
4b:d4:d4:e0:95:e7:7a:38:c5:fb:2c:9e:b0:64:f5:cc:1f:33:
2d:f5:f1:34:74:95:12:8e:62:e6:58:2b:06:ac:d9:02:5e:a9:
43:0d:3d:68:54:42:f7:3b:42:21:72:3f:dc:f7:b5:fc:10:80:
88:bc:45:73:65:c0:e2:2c:49:4e:ed:08:e8:45:11:ed:f3:66:
86:dc:b4:fe:d3:b6:7a:e9:dc:43:f0:6f:06:fd:2f:d0:eb:d1:
04:00:5a:be:2a:79:5c:e8:37:33:14:69:cc:4a:08:b0:04:7c:
e5:cb:71:a8:4c:77:06:dd:05:9a:3c:bc:ac:46:bd:bf:f4:d3:
ad:ff:9d:22:f8:5f:b4:47:0c:94:d8:ca:22:4c:bb:39:69:76:
1f:08:cd:37:1d:24:6b:8b:ea:d9:71:34:78:a0:e7:43:d9:ed:
28:58:ee:bd:01:e8:51:54:c1:b3:3a:fa:11:71:76:9f:88:47:
fd:aa:6e:9f:75:a4:5d:12:3f:0f:bb:64:91:23:43:6d:6b:e0:
35:85:cd:42:ce:20:4f:b8:f7:d3:19:03:d8:fc:e8:a4:0e:92:
8c:af:a8:d5:ed:06:1f:67:ac:c5:43:32:1f:b6:f7:95:48:4a:
cb:f0:79:b3:c4:a6:54:bd:00:d2:2f:d5:39:ae:13:58:82:85:
ce:ec:93:ef
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYbgn2XCwbkM3Zb1zooX6uwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwMzE0MTQ1NjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWM2YjEyNGMyZjIwNWI0MmJlM2U3YWViYjhlN2Y4N2U0YzEzZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocdz8uN+LZV5z+NZxv7yXrcGTrka
FxJE9z6Yu8Wf/v1qg8Z0pjR9hUygjDlShF/1CnObb8KxjyQS8H2Lg0xfuuazzlKd
KOQeMsVmGZAMvnVM6f/5ygirjJwuQX//faD6qBaJwx3CdO2/4g33db4NFeZw/dU4
32eOV4Su4zw8JT6is2cT9V9nwza12rmXJMAk+JPkemXIFjrQAmgg7gs31YeKYwFZ
rM11bOY7dMgVnFcym2Prht/FRte3s7yeCeaNktAS+0SqbXXcIowRWFOBzOKHcEOO
dqEJaDHg13AHgt4TDrbtabP54lTfmio+RqP9mkl6wZIO/s9swDajJuhkSwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBHGsSTC8gW0K+PnrruOf4fkwT4ZMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvRWNheEpNTHlCYlFyNC1ldXU0NV9oLVRCUGhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAIQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBL1NTgled6OMX7LJ6wZPXMHzMt9fE0dJUSjmLm
WCsGrNkCXqlDDT1oVEL3O0Ihcj/c97X8EICIvEVzZcDiLElO7QjoRRHt82aG3LT+
07Z66dxD8G8G/S/Q69EEAFq+Knlc6DczFGnMSgiwBHzly3GoTHcG3QWaPLysRr2/
9NOt/50i+F+0RwyU2MoiTLs5aXYfCM03HSRri+rZcTR4oOdD2e0oWO69AehRVMGz
OvoRcXafiEf9qm6fdaRdEj8Pu2SRI0Nta+A1hc1CziBPuPfTGQPY/OikDpKMr6jV
7QYfZ6zFQzIftveVSErL8HmzxKZUvQDSL9U5rhNYgoXO7JPv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org