Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eZEiqy7HN7s8EukJo6T9kWUACcs.roa
File: eZEiqy7HN7s8EukJo6T9kWUACcs.roa (raw, json)
Hash identifier: sz/tcqn+gxwvAvjSMYxQaF363hexUYbE9mYAhAhnZGc=
Subject key identifier: 79:91:22:AB:2E:C7:37:BB:3C:12:E9:09:A3:A4:FD:91:65:00:09:CB
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018B8B77A5404B61A9D622DD47AE7004B579
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eZEiqy7HN7s8EukJo6T9kWUACcs.roa
Signing time: Wed 01 Nov 2023 15:19:15 +0000
ROA not before: Wed 01 Nov 2023 15:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216047
IP address blocks: 2a12:bec0:590::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:77:a5:40:4b:61:a9:d6:22:dd:47:ae:70:04:b5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 1 15:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=799122ab2ec737bb3c12e909a3a4fd91650009cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:f0:a4:bd:c5:15:84:71:3a:bd:bd:9b:2d:
e6:b3:cb:ae:53:61:73:49:8e:42:ea:5c:a0:d2:b2:
bf:b6:e1:c1:1e:23:97:dd:9d:1a:51:07:77:4a:6b:
10:02:5c:9d:d5:ed:67:56:f7:a2:59:ef:16:e7:8a:
37:18:9e:8e:eb:2e:bd:86:89:9b:f2:ae:de:55:dd:
1a:bd:22:1d:f3:fc:e1:33:39:c5:f2:1a:4d:8a:46:
db:1a:6c:d0:9a:5b:96:7b:23:d5:3a:62:90:e5:5f:
48:69:01:a0:6a:44:d8:cd:b0:8c:e1:a1:86:9d:6f:
50:9c:ca:e7:44:ba:16:9f:e8:11:19:c7:b1:22:2b:
53:5d:05:e8:41:d1:8a:27:1a:b3:74:13:72:f6:f6:
9f:78:a2:be:01:3d:42:50:8d:e5:cd:68:f3:91:68:
5e:66:24:46:fd:e4:d0:87:60:56:a9:99:a9:04:28:
b6:4d:66:be:38:66:55:f1:44:ad:be:44:30:cd:a4:
74:6b:36:e8:27:8f:29:99:a8:4a:7e:2c:98:2d:c4:
31:8d:39:65:42:66:4e:9b:a7:7c:dd:f0:51:51:e8:
ff:ef:f4:95:d0:0e:bd:4a:79:39:f9:ce:ca:fb:6d:
e4:3a:d8:e5:49:12:7a:ce:1d:6d:a9:45:9a:18:74:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:91:22:AB:2E:C7:37:BB:3C:12:E9:09:A3:A4:FD:91:65:00:09:CB
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eZEiqy7HN7s8EukJo6T9kWUACcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:590::/44
Signature Algorithm: sha256WithRSAEncryption
6f:6d:d4:6e:2d:45:38:ee:85:86:3c:cf:65:53:0d:46:68:83:
b4:0e:ce:d4:0c:c0:f3:51:09:19:ba:f2:d8:3e:f9:83:5d:25:
ca:cc:c0:d4:96:09:af:2a:67:9f:03:89:4e:ce:fb:a0:15:b3:
7a:9b:86:1b:af:81:5f:66:ef:fe:e0:3d:36:5c:ee:83:88:3a:
d9:b6:0e:69:b6:c4:b3:73:c5:94:ac:85:77:7d:f4:eb:83:51:
0b:82:3d:75:49:5a:d8:52:03:51:03:e7:0d:7b:ca:83:a5:d7:
39:a6:d1:39:cd:8f:9f:5e:15:2e:77:82:c1:5b:4e:6b:19:19:
f1:0c:bb:f6:d9:08:65:83:46:5d:7a:88:e7:11:84:d9:74:82:
2c:8e:e4:b4:8f:a6:fb:77:66:ff:e8:ac:15:fc:d9:93:e2:0c:
f7:0a:b8:ec:2e:b7:40:a2:bd:63:a5:9b:ca:1e:cb:b2:a6:63:
ab:d9:e6:51:ee:22:20:8c:90:ef:34:22:b2:18:61:c9:d1:88:
ca:5a:0e:9b:e3:f7:2f:ca:77:cc:c6:34:64:d6:f3:21:d7:06:
f3:df:9f:a1:36:fe:63:2f:b8:47:b0:5d:f0:fa:87:87:1e:78:
77:53:ad:4c:ff:d4:35:ab:2a:01:6d:82:42:1f:a7:a7:13:e4:
4c:a0:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org