Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0YAEFkZOldJmqSAHBI5V-Bt_g8Q.roa
File: 0YAEFkZOldJmqSAHBI5V-Bt_g8Q.roa (raw, json)
Hash identifier: dfb3zrbSZQtjE1N7zWGROkN1YgecB/VeLlsp2xeapNo=
Subject key identifier: D1:80:04:16:46:4E:95:D2:66:A9:20:07:04:8E:55:F8:1B:7F:83:C4
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABB94E470EDE81BB3CAE844003113F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0YAEFkZOldJmqSAHBI5V-Bt_g8Q.roa
Signing time: Tue 06 Feb 2024 18:26:16 +0000
ROA not before: Tue 06 Feb 2024 18:26:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205531
IP address blocks: 2a0f:b241:ed::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:b9:4e:47:0e:de:81:bb:3c:ae:84:40:03:11:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1800416464e95d266a92007048e55f81b7f83c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:54:e9:f2:f6:b6:fe:16:10:55:fb:60:4f:
4c:36:1d:2b:6f:5a:44:b5:06:2d:56:ca:1a:c9:d5:
20:fa:62:99:cd:d3:b3:f0:7a:60:aa:fa:4d:ad:c8:
d2:fc:38:9b:18:a3:0b:a9:fa:17:8f:0c:20:84:18:
89:e5:81:74:5e:9a:4c:e6:f3:d0:73:d4:ff:11:fe:
d4:63:62:ca:fc:88:bc:b7:4d:76:ba:77:92:bf:51:
b0:96:ab:81:5a:a5:d5:a3:45:92:47:64:58:72:cb:
93:ed:df:87:5d:ca:9f:8f:dd:cb:bf:97:ad:b7:f8:
13:28:e3:96:a1:9d:8e:f3:c5:74:dd:93:06:c3:2a:
a9:66:bc:f4:7d:2c:96:c3:5c:6b:71:12:55:0a:9e:
fa:d0:b9:6f:5d:f5:9d:3b:90:80:d7:55:54:ea:a0:
53:dd:0f:62:47:d5:6b:86:bd:39:ce:6e:92:24:ff:
b7:56:6d:79:1f:af:cc:a0:fa:19:c8:e9:05:34:c7:
5b:4f:28:e2:3a:a6:fc:eb:8d:e9:ea:8a:16:21:4b:
da:26:c2:b2:62:19:13:34:e0:04:c4:1b:1f:24:5c:
d1:ff:1b:0f:c6:46:3f:41:5c:e9:04:8d:28:c7:da:
7b:0f:1a:9d:5d:3e:ab:fd:be:17:7b:f2:13:09:55:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:04:16:46:4E:95:D2:66:A9:20:07:04:8E:55:F8:1B:7F:83:C4
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0YAEFkZOldJmqSAHBI5V-Bt_g8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:ed::/48
Signature Algorithm: sha256WithRSAEncryption
20:4c:13:34:c9:cb:ca:f5:6a:92:b8:95:88:7f:7d:cb:62:43:
d6:d8:d4:1c:5e:55:d7:28:e8:5e:05:e6:be:12:f9:6c:00:e4:
9f:41:63:13:cf:f9:24:64:76:02:ee:62:fa:df:99:16:4d:c7:
12:c8:c5:6b:0d:26:66:a4:60:b5:18:8e:57:5b:1e:ce:9f:88:
87:78:3e:03:03:d0:96:4b:91:04:0e:8e:18:36:6d:87:30:62:
03:ca:3a:1c:c7:92:5d:97:c1:ce:0d:b4:cc:1a:0c:cd:bc:ac:
2e:6c:9f:d3:14:27:49:5a:57:5d:9c:1d:ef:e9:cf:a5:5d:ed:
56:b7:90:9e:f5:ed:ba:ab:27:11:1a:6a:d5:93:1e:e7:9c:1d:
f0:87:44:98:9e:f3:82:20:e5:b0:c0:c1:8e:47:75:07:51:9c:
f3:75:e0:aa:80:3d:ef:96:67:3d:47:58:e9:e3:d7:8f:2d:f0:
7f:d7:ae:26:01:20:33:79:a9:b6:18:f6:6c:82:6a:eb:27:94:
50:31:ee:87:55:e2:e5:42:07:bc:b9:e9:85:60:93:51:ca:76:
a5:ed:b4:cd:03:ac:95:63:85:27:22:f8:01:72:5e:58:f7:69:
2c:59:e2:cc:fa:14:35:f9:53:11:aa:b0:06:93:51:e6:c2:ac:
76:e3:4f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org