Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/Emt9UJfxi2TYZOarDUq_6ZU8AT8.roa
File: Emt9UJfxi2TYZOarDUq_6ZU8AT8.roa (raw, json)
Hash identifier: pFtkVlEGd8CiQB0WC1POYT05v6gevklGqzN3RZEqCDs=
Subject key identifier: 12:6B:7D:50:97:F1:8B:64:D8:64:E6:AB:0D:4A:BF:E9:95:3C:01:3F
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01856F0B5BED5FCF4EA4AB84937DE246C63F
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/Emt9UJfxi2TYZOarDUq_6ZU8AT8.roa
Signing time: Sun 01 Jan 2023 20:34:53 +0000
ROA not before: Sun 01 Jan 2023 20:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 129.104.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:5b:ed:5f:cf:4e:a4:ab:84:93:7d:e2:46:c6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jan 1 20:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=126b7d5097f18b64d864e6ab0d4abfe9953c013f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:5c:0a:7f:f6:fd:a2:91:b8:2d:a5:81:2c:
f4:a3:9e:3d:65:dc:ec:1c:cb:75:42:b3:f3:cf:ea:
67:be:21:21:d1:ce:66:7c:ca:71:ff:9c:62:ed:6b:
b1:5f:0b:3d:5b:63:81:32:cf:b1:a4:d2:89:fa:fc:
51:89:6a:b3:79:1a:1b:13:38:7b:3f:82:e4:de:12:
7d:e5:7c:95:19:12:de:0a:49:3c:47:3f:30:eb:9a:
6a:46:03:42:cb:97:33:c4:23:b2:c1:cb:08:ff:ce:
d2:60:29:95:2e:2b:4a:44:62:23:2e:e2:22:70:1c:
cc:93:e2:44:ad:ac:04:cb:f7:6d:66:e7:8c:68:eb:
10:d4:46:68:00:79:32:f3:cd:91:fa:1d:a3:c0:16:
b2:aa:22:5b:9c:63:f4:c4:40:f4:30:58:ab:78:90:
cf:1c:f6:ec:d1:3e:02:89:2f:ad:3f:3b:fa:c8:4d:
6b:ff:55:5b:1a:96:3c:01:3a:15:e6:cd:e7:dc:27:
aa:e6:6f:6e:fb:08:04:6e:6d:0e:68:20:87:62:83:
d1:bf:f7:ed:35:b3:96:8d:f4:f7:e6:cb:03:08:33:
9d:64:5e:1b:2d:c4:f0:ef:3f:f3:3d:a6:ab:88:1b:
c2:a9:5d:99:44:28:52:cb:70:54:86:7e:a9:00:14:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6B:7D:50:97:F1:8B:64:D8:64:E6:AB:0D:4A:BF:E9:95:3C:01:3F
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/Emt9UJfxi2TYZOarDUq_6ZU8AT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:fd:4a:83:82:2b:48:6d:f4:41:44:4c:72:e7:e4:ed:57:54:
d0:94:8e:bc:7c:b0:bc:a1:83:21:26:8f:bc:54:e4:0d:44:99:
4c:4f:f5:34:3c:e6:68:47:ed:e4:9f:8f:dd:77:68:62:1a:be:
e3:6b:f3:6d:7a:95:47:a2:c5:7d:30:02:cc:6c:9e:4c:a9:60:
33:0b:5d:72:e8:5d:80:78:0a:1c:82:0c:9d:97:2b:83:9c:f2:
b8:f9:94:4b:d5:2a:97:cd:47:8b:38:66:32:ac:66:3c:af:7f:
ff:64:41:f7:68:e1:bb:5c:75:19:46:a6:44:18:11:84:46:19:
65:5b:92:66:44:3d:79:a8:59:4a:0e:db:d2:30:dd:5b:83:d6:
33:8e:8a:a7:fd:8c:c0:a6:6f:de:79:4d:fb:fe:ec:18:27:bf:
71:6d:37:03:1f:4d:ab:f0:e8:d0:34:d7:af:f8:40:9c:96:fb:
67:db:d6:17:e1:83:1c:7b:54:29:08:40:69:b7:f1:95:de:7d:
ab:01:13:ab:34:51:5b:55:02:0d:4e:d9:56:e2:8d:bc:fd:43:
bb:99:13:8a:95:3d:53:49:38:56:37:c3:55:fc:df:e3:08:46:
04:24:cd:1b:4e:73:f9:7a:03:11:55:e2:25:d9:c1:44:8e:f8:
4a:6e:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-fra.rpki-client.org