Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/EaFkb2uwqwW2p50tsVQ5qBLKxgk.roa
File: EaFkb2uwqwW2p50tsVQ5qBLKxgk.roa (raw, json)
Hash identifier: q3ILn7SD1rzFeK1gFW+NgRniB6zl/bFbDpmOIPZNNB8=
Subject key identifier: 11:A1:64:6F:6B:B0:AB:05:B6:A7:9D:2D:B1:54:39:A8:12:CA:C6:09
Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial: 01856CCACAF47521397581C8A7E6DDDD7211
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/EaFkb2uwqwW2p50tsVQ5qBLKxgk.roa
Signing time: Sun 01 Jan 2023 10:05:07 +0000
ROA not before: Sun 01 Jan 2023 10:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204680
IP address blocks: 2a00:139b:ffff::/48 maxlen: 48
2a00:139b::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ca:f4:75:21:39:75:81:c8:a7:e6:dd:dd:72:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
Validity
Not Before: Jan 1 10:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a1646f6bb0ab05b6a79d2db15439a812cac609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:bc:24:5d:4c:ba:55:80:ae:b2:3c:e1:26:
ef:70:99:7e:c1:46:7f:5d:4f:3f:0d:5d:a4:86:79:
61:33:68:6d:3b:92:18:66:b7:60:72:75:61:5f:8a:
98:a8:b6:49:81:0e:81:8b:0d:b3:35:c5:b3:7c:33:
ba:56:b9:7b:4b:5e:7f:d9:da:1a:9e:73:0c:46:a4:
b6:e2:d4:65:ee:40:49:00:15:3c:91:3e:43:81:4f:
02:12:80:05:5a:8f:d1:ad:25:bd:d9:5b:bc:8a:d6:
3b:6d:0a:2e:b4:48:ab:34:e8:19:3c:4d:9e:56:05:
96:71:61:f8:cb:a5:03:98:5a:12:9d:6c:da:ad:bc:
9f:12:6b:84:72:5a:39:cc:ee:ce:87:1d:cb:6f:50:
01:60:e5:7b:5c:b2:ce:26:28:5d:ee:48:a7:55:f6:
e7:7d:6e:c5:41:a4:66:e2:6a:cb:62:06:06:64:8f:
ae:61:fd:ac:99:58:28:88:b7:97:19:7b:1d:c9:04:
dc:12:3a:3a:f0:6a:5a:ea:ee:e1:7d:2f:6f:d4:28:
24:cd:6f:dd:99:4a:e1:6e:47:d9:fa:dc:4b:dd:5e:
8b:98:7c:d6:a0:85:b4:17:a0:ca:14:14:56:bb:77:
06:7d:69:ae:69:c1:00:b7:53:70:f8:5c:dc:82:eb:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A1:64:6F:6B:B0:AB:05:B6:A7:9D:2D:B1:54:39:A8:12:CA:C6:09
X509v3 Authority Key Identifier:
keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/EaFkb2uwqwW2p50tsVQ5qBLKxgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:139b::/32
Signature Algorithm: sha256WithRSAEncryption
3b:bd:ee:1b:2a:b3:0e:16:4f:dd:20:43:e5:f4:e7:57:66:63:
d8:9c:27:b8:02:2a:ae:36:0e:81:57:b5:cc:bb:41:62:af:c9:
eb:19:61:12:af:67:82:a7:8d:3c:7c:24:61:85:9e:5a:04:5f:
1c:1c:7b:1f:4b:07:91:d6:20:61:15:38:ee:2e:c3:e7:ce:1e:
fc:ce:c4:f6:f6:05:11:4b:bd:37:22:32:6a:b7:b8:c5:59:6d:
74:8f:84:c1:c0:79:d3:11:8e:46:2d:b6:6d:44:c4:f5:24:78:
f3:4e:2a:19:29:3f:3d:fd:0e:71:0d:0f:61:c9:09:a3:78:12:
8c:d4:a3:f2:cb:2c:f4:d3:2f:f0:28:3f:89:a3:99:e1:d5:d0:
c8:92:bc:09:e2:e4:34:53:f2:ad:7d:46:50:87:ee:01:ba:9c:
41:38:0d:df:75:58:05:64:f2:81:48:32:32:75:df:aa:d8:b9:
fe:0f:20:45:7a:9f:72:d8:5b:f6:25:87:af:68:ac:04:74:11:
b9:3c:ba:87:4d:1d:08:b6:24:99:22:40:7f:66:49:6e:1f:bb:
2d:a8:14:6d:c6:72:e2:6a:83:22:32:09:c1:86:9a:f3:ac:07:
c7:14:56:8d:d6:20:0d:4a:c4:ec:0d:44:90:48:ee:31:19:f1:
46:3b:ac:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:53 2024 by rpki-client on console-fra.rpki-client.org