Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-C5kAsMDKeGWW5i64-DFOMH-uuw.roa
File: 1-C5kAsMDKeGWW5i64-DFOMH-uuw.roa (raw, json)
Hash identifier: FrCxJKQpFA7WGpLaC+YyWaD2HlOUQiPgj/nu1/VbWX4=
Subject key identifier: F8:2E:64:02:C3:03:29:E1:96:5B:98:BA:E3:E0:C5:38:C1:FE:BA:EC
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7C633FB9232A8AE0B8D6E0DD42D82C70
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-C5kAsMDKeGWW5i64-DFOMH-uuw.roa
Signing time: Tue 06 Feb 2024 03:08:15 +0000
ROA not before: Tue 06 Feb 2024 03:08:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212149
IP address blocks: 2a0f:b241:1::/48 maxlen: 48
2a0f:b241:b00b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7c:63:3f:b9:23:2a:8a:e0:b8:d6:e0:dd:42:d8:2c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 03:08:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f82e6402c30329e1965b98bae3e0c538c1febaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:92:33:cc:85:1e:da:74:29:82:b6:18:77:
11:34:b1:9f:e1:bf:29:fc:26:af:b9:d7:65:ba:01:
0f:a6:6e:e3:2e:a2:f2:30:67:f1:67:ae:94:19:09:
b0:ab:b9:d1:fd:68:98:9f:16:f5:20:52:3a:7b:a2:
c0:8b:08:86:11:94:c0:45:f4:9b:20:a4:ea:55:0f:
7d:e7:0c:e5:d8:9e:6d:51:d0:5b:0a:89:e9:bf:2b:
74:b6:09:81:54:8c:0e:16:45:57:88:98:2c:18:dd:
c0:33:ee:ae:49:5c:c6:11:38:87:2c:1a:57:a2:69:
96:c2:13:07:fa:c6:d7:56:7e:7d:e8:86:1d:15:2e:
31:9c:cb:d7:fa:a1:75:b2:82:1f:f8:9b:83:ba:08:
11:be:af:80:b8:90:95:84:dd:63:88:b1:32:d1:7f:
ba:5b:d1:78:67:90:0d:0d:12:9c:27:48:69:12:98:
7b:b2:70:db:54:aa:0b:81:5b:9e:ae:51:71:54:1c:
a3:f9:67:01:26:9f:13:d2:c9:01:ab:b9:89:50:55:
e1:1f:35:96:03:22:be:2d:01:ff:ca:90:4f:d9:47:
16:cb:40:0c:c0:64:6c:19:ba:78:6e:57:e7:a4:b1:
ab:cd:95:91:05:fe:87:56:07:3e:bd:bc:27:77:ca:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2E:64:02:C3:03:29:E1:96:5B:98:BA:E3:E0:C5:38:C1:FE:BA:EC
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-C5kAsMDKeGWW5i64-DFOMH-uuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:1::/48
2a0f:b241:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
59:02:22:b7:6a:6f:46:7f:44:b7:04:1a:df:53:15:96:5a:30:
5d:cb:77:d3:75:7c:88:f8:83:dd:4a:66:d8:97:28:5c:27:e0:
2c:cc:4f:80:0d:eb:e2:0b:7b:8d:ff:cb:ba:34:c4:dd:a9:02:
20:57:75:3c:72:08:45:a8:53:b3:76:a9:1a:7f:4a:ee:e0:a3:
4b:8b:f9:75:e1:e5:6e:93:8c:31:f3:0f:ff:f5:0f:92:b3:8a:
75:3a:92:df:75:2f:ab:88:82:1f:f8:49:41:e3:f6:57:31:ad:
7f:ca:69:f5:d6:9a:b6:7a:44:f3:e2:a2:3d:75:f2:e5:d5:b8:
8d:05:6b:e0:19:59:1b:dd:bf:c8:64:16:10:b3:fd:0b:88:26:
03:d3:d9:bc:5b:72:f7:9b:15:2f:c1:f2:8c:d6:05:d9:f9:d4:
86:1d:95:5d:b6:12:82:d6:27:c6:79:71:62:81:7a:0b:26:50:
49:6a:7e:de:3b:4f:b1:4d:53:c4:81:e8:07:18:40:e2:a5:9e:
46:39:5f:52:f7:de:67:02:56:bf:27:3c:c7:51:36:53:40:64:
59:bc:e0:5b:f9:64:73:d0:82:ae:2b:57:8c:d5:8f:4d:d1:30:
96:84:f3:e7:a9:c4:c2:87:00:0d:26:8b:bc:c2:45:16:ec:62:
85:a5:4a:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org