Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Euk6BWYn01eMfrwesxCC3fAMwIg.roa
File: Euk6BWYn01eMfrwesxCC3fAMwIg.roa (raw, json)
Hash identifier: y6Qp6QmTZ5qdrH4vOs7OFIzXzp+U4860LVhy0tmmy6I=
Subject key identifier: 12:E9:3A:05:66:27:D3:57:8C:7E:BC:1E:B3:10:82:DD:F0:0C:C0:88
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0187BEB31E4B4B301D9841BDCCD2CFC20EFC
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Euk6BWYn01eMfrwesxCC3fAMwIg.roa
Signing time: Wed 26 Apr 2023 17:53:42 +0000
ROA not before: Wed 26 Apr 2023 17:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208328
IP address blocks: 2a12:bec0:310::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 May 2023 14:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:b3:1e:4b:4b:30:1d:98:41:bd:cc:d2:cf:c2:0e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 26 17:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12e93a056627d3578c7ebc1eb31082ddf00cc088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:6d:aa:cd:9c:f5:26:c8:30:ed:66:f0:9d:
70:0f:64:af:30:63:cb:6f:76:14:52:2a:6a:3c:c1:
e7:16:88:cc:94:9d:00:14:13:fa:b6:52:8a:e5:54:
cc:77:36:c6:89:79:e3:db:26:42:1a:df:b8:6f:41:
12:01:3d:6e:77:26:6b:0c:dc:c6:ba:af:2e:7f:ee:
3a:b8:e8:61:2a:76:f5:55:f1:43:fd:f6:74:c2:61:
45:ab:f7:6a:b8:53:f1:85:26:a3:d6:be:68:e1:a9:
c9:65:b9:48:96:4f:58:18:0b:b0:aa:06:8c:00:6d:
02:0d:6a:c3:c9:57:21:25:42:d8:9e:31:65:59:f7:
20:6c:3e:45:68:4d:98:80:fb:ae:e1:ff:24:9d:a4:
a2:15:be:dd:93:b7:57:cc:b1:e6:c9:00:d1:13:4e:
ba:d2:db:93:eb:b7:b8:a2:cd:a3:b7:f2:4a:63:a5:
6e:ef:d2:46:6c:43:90:b9:e4:67:a4:83:80:91:b8:
44:59:58:1d:42:fe:ec:e8:0a:25:90:19:76:8f:84:
fc:aa:a8:3d:71:c0:97:e2:12:6c:46:90:db:ab:4b:
56:aa:47:06:fe:7f:92:1f:ca:49:a4:fc:97:2c:bd:
3e:4a:d9:e4:58:85:f3:8d:9c:e5:53:1b:4d:95:ed:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E9:3A:05:66:27:D3:57:8C:7E:BC:1E:B3:10:82:DD:F0:0C:C0:88
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Euk6BWYn01eMfrwesxCC3fAMwIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:310::/44
Signature Algorithm: sha256WithRSAEncryption
42:f1:ba:6e:43:26:81:1a:97:a6:c2:4b:85:96:c3:e8:51:f7:
19:a9:9c:b2:87:12:21:73:c2:94:71:af:15:af:22:5d:24:20:
71:83:40:21:ea:b2:51:1a:4a:36:5a:1e:bc:a9:e7:86:5d:56:
8c:3b:8f:d9:ae:88:7b:c8:50:d1:3e:7c:27:3d:aa:c5:8f:8c:
fb:44:73:72:16:a9:49:7c:00:70:0d:b9:af:3a:6f:36:c7:2e:
83:ca:f4:90:40:f6:c9:be:df:22:85:d6:7b:62:32:4e:cc:bc:
48:d6:a9:cd:cf:c6:c3:97:4a:60:c5:dd:37:41:77:ab:3f:96:
b9:81:8d:79:26:d7:ad:b9:28:20:e4:b5:b9:1c:f2:e5:ba:78:
19:f2:58:fa:30:7e:15:5f:76:49:7c:79:9f:be:24:bc:63:ba:
ca:3c:55:d6:25:5c:b8:ed:2a:69:21:dc:7d:5a:f7:59:76:89:
13:f4:d8:7c:9d:ad:79:a5:f7:e8:f7:3e:91:7b:51:86:ab:62:
12:87:30:ee:c2:f9:eb:e8:c9:c0:10:7e:56:be:9b:8c:14:0b:
18:b5:5e:ef:75:ea:21:e5:c2:69:f8:89:12:eb:77:16:f8:b5:
65:b8:e4:15:c6:a4:2b:04:1f:87:ad:29:32:02:da:28:b9:ce:
f7:3a:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org