Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/17elG-82cQM7ZmVMStErqmnTAIs.roa
File: 17elG-82cQM7ZmVMStErqmnTAIs.roa (raw, json)
Hash identifier: ENXpWQ06Axf9xJXLPTrI2BVoMH6F/5iIYYhD4p2IiGA=
Subject key identifier: D7:B7:A5:1B:EF:36:71:03:3B:66:65:4C:4A:D1:2B:AA:69:D3:00:8B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0BC25C0411514FEFA4E69E270B692
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/17elG-82cQM7ZmVMStErqmnTAIs.roa
Signing time: Wed 07 Feb 2024 05:00:54 +0000
ROA not before: Wed 07 Feb 2024 05:00:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216052
IP address blocks: 2a0f:b241:5b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:bc:25:c0:41:15:14:fe:fa:4e:69:e2:70:b6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7b7a51bef3671033b66654c4ad12baa69d3008b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:bd:d8:8b:ba:10:8d:9c:f0:e9:dd:b6:03:
7b:04:f2:db:5c:6c:6e:5a:ad:5a:d0:cb:8c:2b:ec:
18:0e:fb:d5:b6:db:fe:c6:2d:89:d1:cb:b3:36:06:
f5:aa:5b:eb:10:ab:36:fb:b6:3a:50:ea:3b:76:da:
80:9c:8b:99:ea:7c:5d:55:e9:f7:3a:ab:ec:b6:3f:
2b:16:8f:51:0e:4f:47:3d:2c:f7:a9:9b:96:e4:75:
ff:0f:f0:5f:c4:91:2e:d8:5e:24:b4:bb:f4:dc:fd:
ad:2f:79:36:4f:c8:a9:56:fe:1a:0d:0e:00:4a:37:
00:10:84:0b:a2:e9:94:48:7a:cf:c8:e9:52:ac:e6:
b9:bd:61:5a:17:4c:a6:8a:82:f3:67:3d:5e:4f:75:
17:9e:a5:ec:50:2c:86:16:86:fd:71:43:f8:b4:06:
81:29:01:fe:9b:b8:cb:d8:34:22:39:d5:73:72:2a:
b6:01:09:99:44:0d:3c:e7:0c:9f:9f:f3:3c:fc:51:
78:b8:80:e2:a6:0d:da:90:e2:0d:5c:7e:4e:de:cd:
1e:de:63:0b:df:01:af:10:25:b2:f1:af:5b:88:9a:
fc:31:37:5d:00:9a:c0:76:75:a0:fc:a3:c3:8f:0e:
75:e6:2a:16:7a:eb:0c:e9:84:81:f6:52:f4:33:a6:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B7:A5:1B:EF:36:71:03:3B:66:65:4C:4A:D1:2B:AA:69:D3:00:8B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/17elG-82cQM7ZmVMStErqmnTAIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:5b::/48
Signature Algorithm: sha256WithRSAEncryption
5e:bc:9f:bb:83:10:4c:f7:c3:fb:32:80:d1:ed:11:08:b9:33:
60:c3:06:cf:0a:be:4d:68:e4:e0:d0:e4:5a:23:30:22:3d:b8:
28:9b:5f:81:39:ee:c3:bf:1c:39:b6:92:4d:03:6f:98:89:fc:
5e:d7:7e:a7:ee:75:13:e3:2f:93:77:41:97:a8:64:eb:a0:60:
17:f0:5f:da:41:42:cd:12:dd:6b:63:0d:b2:b8:65:d0:d7:94:
5a:3d:8d:e0:78:e1:f5:11:7e:bc:8d:60:d7:a2:1c:2e:97:68:
d7:9e:82:62:d4:2a:1d:90:a3:54:5e:e0:21:36:cb:08:89:a3:
96:87:e1:b0:0f:46:0b:27:16:b5:3c:8e:e1:a0:23:5e:47:3d:
ef:d6:d0:49:67:c0:1e:6c:43:de:71:3f:a5:9c:06:0d:ca:2f:
73:82:c8:38:29:f7:88:22:42:c5:3a:92:43:76:7f:d2:d0:25:
ec:8a:04:9f:4e:df:b0:1d:ca:6f:a0:e2:81:eb:8f:6e:fc:76:
cb:1c:56:46:d2:75:cf:7d:db:8d:3f:ea:c9:a9:10:0e:be:92:
76:94:1b:0d:7f:28:d0:36:75:3b:d9:44:3c:db:df:fa:3d:8d:
09:12:7f:14:94:13:aa:e8:7b:18:53:9d:3a:11:ed:30:c1:0a:
b6:40:49:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org