Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/EM2040TX_Z6jdoh3_93TdBnV5vA.roa
File: EM2040TX_Z6jdoh3_93TdBnV5vA.roa (raw, json)
Hash identifier: OGa1SFwH3VYt6jTL6B/fnoW4tfjtXcpSgS93jc6i8sw=
Subject key identifier: 10:CD:B4:E3:44:D7:FD:9E:A3:76:88:77:FF:DD:D3:74:19:D5:E6:F0
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA79C1053F06C672C92069F299F618
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/EM2040TX_Z6jdoh3_93TdBnV5vA.roa
Signing time: Mon 02 Jan 2023 13:45:01 +0000
ROA not before: Mon 02 Jan 2023 13:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207401
IP address blocks: 2a0f:5707:fff4::/48 maxlen: 48
2a0f:5707:fff5::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:79:c1:05:3f:06:c6:72:c9:20:69:f2:99:f6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10cdb4e344d7fd9ea3768877ffddd37419d5e6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d6:fb:9f:a4:bc:5b:92:49:44:c9:32:28:a2:
3f:6f:88:cb:56:65:1c:44:0c:d3:e5:aa:0b:1e:61:
02:92:98:2b:e0:46:a1:aa:16:c2:6e:79:05:d2:7b:
bd:0d:bd:fe:0f:06:09:25:c3:ba:e9:61:d0:17:00:
3f:67:59:e3:97:e2:6c:a7:bc:fd:e5:0d:12:fd:8c:
09:a5:3f:84:37:a0:e9:66:99:ac:86:7e:28:ab:9a:
88:ca:34:19:ac:ba:6a:d7:4f:65:a0:1d:98:84:bc:
c2:d9:0c:dc:15:a5:77:b1:ac:1c:ab:41:13:5a:5b:
6c:8d:3e:d9:51:5f:10:2f:7c:6c:d8:17:85:5d:c7:
a7:d8:30:53:a2:f8:93:b6:36:6c:cb:5b:69:53:43:
e0:26:00:30:1f:ec:2e:bc:ee:14:76:ab:61:d4:bc:
7b:02:83:70:33:30:2b:d6:36:35:2b:48:9e:c2:2f:
48:12:0d:b3:58:37:25:5d:da:2d:ad:bf:59:df:7e:
60:0b:8d:33:4b:45:ed:c4:b6:2f:9b:b5:b5:eb:ce:
d9:12:94:0a:2d:89:cb:92:83:46:85:9a:37:55:9c:
34:1c:1d:09:ab:f2:cb:ca:39:e5:fd:32:56:a6:40:
b9:c2:49:d2:59:a9:ce:cf:5d:72:13:13:46:dd:a8:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CD:B4:E3:44:D7:FD:9E:A3:76:88:77:FF:DD:D3:74:19:D5:E6:F0
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/EM2040TX_Z6jdoh3_93TdBnV5vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:fff4::/47
Signature Algorithm: sha256WithRSAEncryption
bf:86:94:fd:4b:c9:dc:00:4c:03:17:7b:fd:77:f0:1d:4d:96:
f0:f5:34:ca:4d:5b:eb:c6:0b:47:be:e2:6a:db:3c:d7:2d:72:
79:1b:a5:43:19:99:6e:5a:d0:d5:14:c7:ae:e9:03:1c:6e:c1:
53:5f:80:1d:d3:6d:1a:01:36:c5:07:52:9f:86:ce:76:8f:12:
36:f2:69:16:c5:39:03:78:09:58:48:c9:c6:ce:e6:1e:46:3e:
f0:b7:d1:7c:df:af:a6:88:22:33:c0:34:39:12:02:48:96:b5:
9c:83:64:64:6f:a2:92:33:3a:09:d2:86:3f:c4:25:2c:1b:f7:
ba:27:36:fe:00:ac:32:86:01:bc:12:41:70:b1:48:49:7a:44:
ea:75:c0:89:d9:5f:a8:14:35:35:e0:28:cb:84:7e:50:15:e5:
bd:ec:d0:f5:0d:9b:af:c1:d8:de:9a:56:4f:da:20:3e:79:17:
08:1a:64:62:61:90:79:60:b2:1a:83:03:cb:74:b0:46:22:cf:
c1:ed:e6:28:62:23:4e:8a:9c:f9:0b:01:c2:4c:e2:ec:0f:42:
fd:a3:94:62:06:3c:a7:20:97:6e:69:5e:a2:86:05:5a:22:3b:
ef:69:1a:bf:34:d1:de:3c:2b:fe:22:ea:da:ab:e9:c8:e1:6e:
db:80:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org