Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/EA-hfyg7k2d7pzYIARE73CHRoTw.roa
File: EA-hfyg7k2d7pzYIARE73CHRoTw.roa (raw, json)
Hash identifier: 4Yp/A31t1DYx2/DT4LYfMu8WvbOkCscRhzGlMiTXFvw=
Subject key identifier: 10:0F:A1:7F:28:3B:93:67:7B:A7:36:08:01:11:3B:DC:21:D1:A1:3C
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 0188DA1C3C4DF7646001B572A2D2DAE208A3
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/EA-hfyg7k2d7pzYIARE73CHRoTw.roa
Signing time: Tue 20 Jun 2023 18:41:03 +0000
ROA not before: Tue 20 Jun 2023 18:41:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 2a13:5681::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:da:1c:3c:4d:f7:64:60:01:b5:72:a2:d2:da:e2:08:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Jun 20 18:41:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=100fa17f283b93677ba7360801113bdc21d1a13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:b0:2e:79:09:e6:47:92:de:ed:30:af:32:
78:ae:ab:c1:19:21:c2:77:a5:7d:3b:ca:3a:cf:cc:
c6:54:97:65:31:7e:e6:7f:b0:bf:98:3c:3e:8e:97:
8d:dc:01:16:16:8a:b5:2a:f1:92:90:1b:b0:ca:e0:
d6:57:76:1b:a2:5e:71:12:de:7b:92:51:90:55:93:
73:10:64:ae:90:7a:ad:98:78:b3:e3:87:ab:66:67:
14:6c:1e:ff:b1:f0:3d:a5:e8:c8:59:a6:96:5e:af:
64:1e:f3:45:07:12:cc:00:1d:bd:d3:64:41:d3:b2:
7a:3a:50:b7:13:bd:51:19:3f:b6:2c:02:de:23:cb:
2c:f3:8b:c5:19:6e:23:92:34:fd:fc:fd:43:62:c9:
d2:3c:c4:94:14:4f:80:1e:82:17:42:1b:3f:48:3f:
f0:89:a6:cb:6e:6f:c2:b6:56:10:fc:b3:1a:8c:7b:
00:36:29:9a:fb:b0:d3:3a:bc:c0:28:b5:23:83:08:
54:01:e5:f1:d2:fd:10:75:78:1e:bf:a6:3b:f0:d8:
2d:fe:30:ca:53:55:35:fd:ec:1b:26:fc:75:08:14:
e8:28:6b:eb:63:b1:c6:fe:a9:93:2e:57:ef:7a:f3:
f2:d5:7c:b2:e6:14:9e:3a:87:19:41:a8:84:d7:bb:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0F:A1:7F:28:3B:93:67:7B:A7:36:08:01:11:3B:DC:21:D1:A1:3C
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/EA-hfyg7k2d7pzYIARE73CHRoTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5681::/40
Signature Algorithm: sha256WithRSAEncryption
7e:ee:aa:b7:8a:92:39:70:6f:60:d2:6b:12:af:bf:47:68:4c:
02:9f:16:f9:4a:aa:e1:6c:fd:d6:11:2e:1b:79:61:da:b4:a9:
f9:c6:43:49:a9:f1:fc:51:e7:f4:99:cc:f2:a0:21:de:98:28:
f4:5a:b2:a6:29:dd:d3:c5:c1:95:13:98:ab:15:17:c4:a6:dd:
a3:88:6f:4e:fe:10:60:36:74:12:41:aa:6b:05:17:81:86:65:
49:32:9e:0d:c1:96:20:ac:a6:3c:ed:43:24:6c:23:e0:ae:f5:
f7:ab:b4:9b:39:83:d5:70:81:9b:9f:86:dc:99:ae:14:14:70:
d2:37:e1:9e:8c:9b:cf:08:a6:b5:7c:a5:93:f5:33:ca:17:fc:
d5:7c:4a:35:81:31:25:09:66:9b:81:77:98:0e:39:bc:18:99:
98:3b:34:a0:0b:54:a1:6d:a8:5e:86:94:6b:90:01:21:7c:c6:
37:ac:53:2c:18:e6:a1:b1:eb:ee:47:19:fa:7d:fa:73:c9:4a:
6c:d5:e0:d8:b1:e6:31:71:16:3f:3a:04:e8:aa:72:a4:b0:de:
1c:99:f9:8c:28:56:e7:85:0b:1b:2b:0c:97:91:60:5b:19:7a:
00:ba:be:d4:ee:2d:3d:e4:6f:0a:f6:15:94:a2:e8:be:e0:05:
fc:43:9e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:18 2024 by rpki-client on console-fra.rpki-client.org