Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/EslISdJMAzkI4z3DbsOHayYbpDY.roa
File: EslISdJMAzkI4z3DbsOHayYbpDY.roa (raw, json)
Hash identifier: KvHbQYD+wblTrMfCe7JceEbcoayQGYvy03PlrVz3m9k=
Subject key identifier: 12:C9:48:49:D2:4C:03:39:08:E3:3D:C3:6E:C3:87:6B:26:1B:A4:36
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0187A40BAE4C3FB8791E52D1043013A6EFBD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/EslISdJMAzkI4z3DbsOHayYbpDY.roa
Signing time: Fri 21 Apr 2023 13:40:41 +0000
ROA not before: Fri 21 Apr 2023 13:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202306
IP address blocks: 2a04:5200:5977::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:0b:ae:4c:3f:b8:79:1e:52:d1:04:30:13:a6:ef:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 21 13:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12c94849d24c033908e33dc36ec3876b261ba436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:0b:ce:ba:f6:1a:96:63:5b:81:54:6e:19:
aa:b7:27:0f:04:64:9b:22:80:d2:53:53:42:cd:67:
74:ad:bb:51:7f:75:b7:99:14:2b:77:76:93:eb:30:
2a:53:5f:58:43:5b:c1:b3:29:c5:6a:fd:b7:a9:e6:
30:fb:34:af:f9:3c:08:58:3d:c1:5f:53:df:7b:67:
b9:d6:8b:ec:31:d5:81:d5:0e:56:90:4e:45:81:18:
80:b9:f1:71:56:93:34:08:51:35:0a:a2:01:42:32:
b0:61:69:d2:b1:c5:19:04:02:c3:4b:e9:f9:2d:94:
c2:97:66:e9:9c:99:ca:0a:70:6d:e9:74:88:49:a0:
37:9f:f5:f4:52:b2:80:3e:3d:65:e3:d9:db:28:61:
a1:0e:c3:95:24:86:86:91:2a:d3:02:ef:44:78:8a:
e9:0b:24:38:ae:ee:08:03:da:0c:44:0d:74:14:93:
da:65:72:05:71:38:26:45:c1:0d:b7:48:09:ce:99:
d2:ca:bf:af:a2:1c:02:c9:d2:10:82:38:ce:6c:17:
ab:1d:82:da:4b:82:ad:58:c0:08:7c:39:bf:74:14:
96:a4:d4:71:b9:c5:e1:1c:6a:8c:23:2e:05:0f:6b:
f4:b6:fc:66:09:13:4a:38:10:af:d8:01:59:79:04:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C9:48:49:D2:4C:03:39:08:E3:3D:C3:6E:C3:87:6B:26:1B:A4:36
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/EslISdJMAzkI4z3DbsOHayYbpDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5200:5977::/48
Signature Algorithm: sha256WithRSAEncryption
43:b7:a0:0c:45:31:ff:d4:79:9a:4c:94:53:af:a7:34:41:1c:
0b:96:70:cf:0d:d6:6b:d9:c5:0b:26:40:bc:0e:dc:89:ca:93:
89:6f:17:88:4f:95:ff:ea:24:84:76:7c:8a:ae:2a:7b:a4:26:
a3:63:6f:58:56:02:df:55:6f:69:d3:45:70:21:83:6c:83:cc:
2d:10:c0:7f:ab:b5:06:2a:93:44:52:19:87:de:97:a5:36:4c:
d6:b2:c6:2f:8a:05:6e:55:39:37:d0:a0:a1:7b:b3:b0:59:89:
17:46:b3:36:f8:90:0d:fa:12:25:d4:ee:b6:ea:4e:c5:c1:21:
da:58:5c:45:a7:5c:dd:45:00:58:b3:a8:9e:b1:8f:6e:de:fb:
50:83:53:f3:35:8e:5d:d3:f6:56:0c:b0:63:d7:7c:41:99:13:
24:f7:ec:e3:c6:92:58:3c:49:88:8b:44:d1:73:ac:58:49:b1:
17:75:12:9c:6e:cd:c7:00:6b:5d:18:7a:79:bb:05:b9:aa:3a:
f7:82:46:f7:d8:88:53:77:c8:f1:32:73:f5:bd:c8:98:30:27:
58:02:0d:63:d9:31:ae:0f:c6:d7:63:88:94:8d:fa:cd:e2:ca:
9a:4b:3e:43:3a:52:bc:cc:28:70:05:d7:6c:a2:83:17:9d:c1:
d7:d1:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org