Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/eqsL5U19FldNKnHI_oOs8CIJQss.roa
File: eqsL5U19FldNKnHI_oOs8CIJQss.roa (raw, json)
Hash identifier: 2YSe0E+4VAXQ45tGc9XDRfziLbMqVxaV1gsDcftdbdU=
Subject key identifier: 7A:AB:0B:E5:4D:7D:16:57:4D:2A:71:C8:FE:83:AC:F0:22:09:42:CB
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 0186CB256E350F35454A63916DB3000F6F3B
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/eqsL5U19FldNKnHI_oOs8CIJQss.roa
Signing time: Fri 10 Mar 2023 10:51:13 +0000
ROA not before: Fri 10 Mar 2023 10:51:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210152
IP address blocks: 2001:67c:c14::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:25:6e:35:0f:35:45:4a:63:91:6d:b3:00:0f:6f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Mar 10 10:51:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aab0be54d7d16574d2a71c8fe83acf0220942cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:e4:fd:59:8f:a5:9f:63:54:69:ac:5b:6b:
f4:8f:dc:ed:46:96:6c:81:0f:a3:8c:e8:41:1a:f1:
8e:6b:e7:53:94:44:84:f9:0b:69:a1:4c:34:cc:c1:
28:c3:73:09:1b:9d:70:06:9c:81:8d:af:cc:e4:b2:
a0:76:e9:1a:69:47:d7:f0:2f:28:6a:d1:6d:69:85:
e3:31:d7:ba:95:db:5a:d9:50:48:3d:c3:35:62:ba:
b2:ee:7a:b8:ac:5e:ac:e2:68:d5:d9:48:be:98:e9:
d8:94:da:d8:70:1a:30:6c:06:ab:3a:b6:76:44:26:
9f:a4:b0:60:c5:b6:b4:fc:1a:f7:6d:68:b9:55:c6:
07:e2:76:9c:47:f3:9d:52:50:51:3c:69:b8:fd:29:
82:2b:9d:1b:46:e9:ea:d3:01:48:93:fe:4d:9d:94:
87:f3:82:95:c2:47:de:a0:d1:ab:2d:3e:b1:18:0b:
6e:d4:cf:1c:f4:20:75:53:e1:13:17:43:3b:57:d9:
38:63:12:90:59:6d:9c:c1:f5:f4:14:ec:61:2d:6f:
ef:45:8a:ac:72:0f:d4:7f:41:b3:d9:55:b0:51:2d:
cd:af:cf:90:79:68:93:cd:e5:14:87:42:e5:7e:51:
1f:b3:d9:3f:40:be:b7:b5:02:82:cd:88:4f:69:e6:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AB:0B:E5:4D:7D:16:57:4D:2A:71:C8:FE:83:AC:F0:22:09:42:CB
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/eqsL5U19FldNKnHI_oOs8CIJQss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c14::/48
Signature Algorithm: sha256WithRSAEncryption
3f:d3:98:0f:7f:19:dc:a1:5c:89:a2:ea:8e:a8:da:ba:df:9a:
3d:82:55:94:8a:55:7f:e8:21:4d:00:02:2b:c6:8b:6e:2d:de:
dd:18:62:af:07:f6:70:b7:23:c6:b7:c0:91:19:2e:90:aa:98:
ce:91:3e:41:8b:23:c6:8d:03:81:10:a3:b2:16:61:1b:96:da:
b7:5e:ab:05:69:3c:f5:49:e1:15:63:38:3e:52:fd:57:fb:35:
df:26:bf:5d:74:4d:23:2c:ba:8c:e3:00:c6:1d:0a:b4:4b:fd:
7b:62:cf:d9:9b:13:bc:4a:b6:8c:3c:4e:ab:3a:42:18:b8:75:
09:9a:2a:38:89:88:cd:86:20:f9:d2:eb:76:46:7e:8c:c1:2f:
28:6e:44:f8:35:4e:d5:9c:e3:99:d8:9e:86:47:f8:92:9b:50:
df:d3:15:cb:f7:29:c2:c1:68:62:fe:91:1a:cc:b8:9b:8b:8e:
11:f4:7f:01:1b:c5:ac:72:16:17:bf:12:e5:ba:d2:18:4c:cf:
ec:38:fe:4d:6a:6d:36:8d:ad:37:6c:4b:23:3c:7c:86:ff:59:
b9:81:85:8b:65:69:ca:ae:73:95:42:2f:fc:d3:04:95:b7:bb:
3a:a1:8b:7f:42:4d:7f:df:b9:20:1e:4f:70:7b:ad:08:ea:69:
91:96:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:01 2024 by rpki-client on console-fra.rpki-client.org