Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/eqLa87wUiBQD-FeW4qV_S5bqw0c.roa
File: eqLa87wUiBQD-FeW4qV_S5bqw0c.roa (raw, json)
Hash identifier: ncwH9f7Cj5Ulo2RdW7aJn0cZIYS35U7V31/M1GhV3pQ=
Subject key identifier: 7A:A2:DA:F3:BC:14:88:14:03:F8:57:96:E2:A5:7F:4B:96:EA:C3:47
Certificate issuer: /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial: 018572837973FD5CA79C7B914BE7B2C3FB0E
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/eqLa87wUiBQD-FeW4qV_S5bqw0c.roa
Signing time: Mon 02 Jan 2023 12:44:57 +0000
ROA not before: Mon 02 Jan 2023 12:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208830
IP address blocks: 2a0e:7580::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 31 May 2023 09:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:79:73:fd:5c:a7:9c:7b:91:4b:e7:b2:c3:fb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Validity
Not Before: Jan 2 12:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aa2daf3bc14881403f85796e2a57f4b96eac347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:27:bc:b2:c5:4e:0f:31:8b:d4:63:37:e6:
e4:a3:2b:a0:22:84:7f:07:db:99:70:89:6a:cf:3b:
c4:17:26:b8:56:0c:8d:66:40:af:c5:06:4c:0c:5d:
46:8f:dc:53:ca:66:89:d1:ad:46:cb:64:df:3c:4c:
0e:ce:88:9f:4d:08:e1:d4:5c:fe:4a:5e:2a:23:3a:
53:5e:ad:a2:79:dc:4b:7e:88:3c:8a:ca:00:91:04:
8b:ad:fc:9a:59:ae:db:c6:81:a4:7a:e2:a9:44:b0:
14:77:01:cf:1e:67:e7:cb:d5:44:2a:5c:7a:49:bb:
9c:f7:44:12:a2:ba:99:20:00:71:36:4d:2a:ea:0a:
97:66:c5:16:00:79:e9:2c:a6:d0:c1:48:45:72:23:
58:e3:48:e1:fa:7a:7c:d9:de:b6:0c:ad:76:7b:56:
c5:c0:b9:76:3b:17:90:fe:6c:34:24:33:0e:e6:09:
b0:07:f1:dd:5f:a7:8b:9f:23:8f:2e:02:53:b5:1a:
fb:08:f2:9b:13:ef:44:6e:8d:40:ce:f5:0f:da:38:
d5:63:f6:60:c6:37:bd:2d:2b:ac:40:4f:03:9b:23:
34:de:37:c4:13:95:d6:1e:23:5c:a9:9e:ca:68:ba:
d6:13:1a:88:4f:a1:25:8d:c9:7f:f0:0f:db:51:62:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A2:DA:F3:BC:14:88:14:03:F8:57:96:E2:A5:7F:4B:96:EA:C3:47
X509v3 Authority Key Identifier:
keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/eqLa87wUiBQD-FeW4qV_S5bqw0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7580::/29
Signature Algorithm: sha256WithRSAEncryption
08:01:e8:93:4c:98:9b:40:61:97:65:b4:8c:48:d6:c6:88:5c:
29:5a:7f:2d:5b:df:1d:db:3b:29:1e:d5:5f:03:33:b2:7b:62:
f4:4f:87:96:b3:39:d2:a9:db:96:93:21:f4:43:05:68:4d:40:
40:5e:a9:9f:ea:30:86:45:a1:d0:12:17:8b:d1:bb:fc:b8:8d:
e5:86:e6:a6:84:00:ab:b8:f7:97:f4:a9:f6:11:f3:fd:a9:86:
f6:34:72:bb:bb:a0:43:57:9e:61:a9:4d:41:e0:c4:e3:31:2f:
7e:24:c3:a6:69:8b:34:5f:f9:a8:53:d0:f1:a1:1b:8e:6a:33:
ad:4d:f3:33:1b:53:6d:3d:81:52:0a:6b:dc:94:62:3a:5b:fa:
c8:64:01:f1:33:8d:c0:65:e1:f2:cb:77:01:15:09:5c:b3:ad:
05:fa:56:f8:73:03:0f:2d:cc:3e:d7:be:02:e8:53:df:1b:d9:
67:5f:1f:5c:16:30:8f:d4:7a:a4:57:81:26:cb:49:cd:d2:ca:
3a:2c:79:16:74:24:d3:ba:c5:23:59:99:6d:06:82:9c:ab:4d:
06:50:28:ee:f6:ac:18:1e:27:33:30:1f:0a:35:2a:2a:42:89:
95:c7:81:4f:c9:7f:c7:b7:e0:82:66:fe:ca:56:46:76:dc:67:
bf:3b:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:26 2024 by rpki-client on console-fra.rpki-client.org