Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2giVW4_l9p8aNBeoUlpjEYYxmn8.roa
File: 2giVW4_l9p8aNBeoUlpjEYYxmn8.roa (raw, json)
Hash identifier: i1u4DcQ8VtVpkhQxRbwcOvAKdLpr83TLu1nkD+NIYAE=
Subject key identifier: DA:08:95:5B:8F:E5:F6:9F:1A:34:17:A8:52:5A:63:11:86:31:9A:7F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAD9397344719E6174DE420BA28FF03
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2giVW4_l9p8aNBeoUlpjEYYxmn8.roa
Signing time: Tue 06 Feb 2024 18:28:18 +0000
ROA not before: Tue 06 Feb 2024 18:28:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216429
IP address blocks: 2a0f:b241:10d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ad:93:97:34:47:19:e6:17:4d:e4:20:ba:28:ff:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:28:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da08955b8fe5f69f1a3417a8525a631186319a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:0e:9c:cf:42:a8:f2:cb:e3:7f:5d:58:8c:
97:65:f6:a7:0c:d6:01:92:ed:d6:dc:37:02:52:b6:
cc:07:80:ae:d0:72:2b:82:07:93:8f:c1:a9:03:79:
7f:cb:de:8b:cc:08:44:82:40:ce:b5:d2:23:92:41:
be:13:fb:1c:aa:94:72:db:51:01:dc:78:d0:98:91:
25:c3:13:1d:cd:63:8a:69:a1:94:7c:47:fa:db:59:
ae:a1:66:e2:81:6e:00:c6:bf:a2:ee:50:c2:d7:e0:
ba:a4:8a:45:63:53:35:7f:82:9b:53:9c:66:b1:a7:
5b:68:e6:7d:06:7b:47:3b:ce:61:96:e8:d2:d5:6a:
49:89:a1:d5:8b:26:4c:d8:3f:d7:e8:9e:43:84:5d:
75:72:36:c0:79:00:36:d8:52:70:07:69:95:79:21:
2c:27:c7:d1:62:ae:55:eb:94:04:66:9f:32:5d:29:
5e:60:36:b6:c9:24:b8:65:d6:3d:dc:b9:a9:a8:bb:
6a:23:fb:55:af:79:6f:99:37:3b:f3:76:ff:03:34:
aa:69:93:7d:e0:69:a7:80:45:e5:f9:14:8c:7d:cf:
82:81:e4:24:cb:93:3a:27:02:0f:2d:31:5b:a5:47:
6d:32:5f:ac:11:17:3f:3f:1d:32:e3:ef:2d:51:51:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:08:95:5B:8F:E5:F6:9F:1A:34:17:A8:52:5A:63:11:86:31:9A:7F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2giVW4_l9p8aNBeoUlpjEYYxmn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:10d::/48
Signature Algorithm: sha256WithRSAEncryption
77:76:c0:ae:b6:fd:4b:02:ad:83:bc:cb:7e:8e:c5:4b:1b:dd:
56:3a:ad:26:2a:1b:fe:76:0c:9d:55:cb:4d:3b:b5:31:4f:70:
bf:a1:c0:67:ad:1e:1b:e9:b8:9d:9c:b5:c6:dd:e4:78:31:9d:
d1:78:b2:b7:79:ab:6f:cd:0e:07:5c:a5:0c:52:d7:99:ae:80:
7f:6b:37:14:94:b4:f3:db:55:d1:70:06:d9:69:8c:fd:80:73:
74:6d:e7:83:1d:ff:86:2f:2d:f6:51:a7:a5:75:0d:b1:b6:c5:
c4:26:d2:65:75:f7:ba:e8:ca:6b:4e:b5:79:8d:00:c1:e5:40:
b7:b1:dd:3e:8e:f8:2d:0c:dc:b8:3a:9c:c7:c6:2a:15:06:e0:
8e:28:9b:c0:81:cd:96:eb:52:93:dc:26:0d:88:ff:c3:00:7c:
60:a9:1c:6c:01:96:32:15:cb:f1:de:52:80:9d:49:52:d0:09:
8d:8d:71:bf:77:b9:23:58:b4:28:f6:d1:c9:71:29:35:89:e5:
55:27:56:e7:a5:81:d0:b4:86:1a:35:96:ef:ab:c0:af:ed:8c:
3f:59:2b:2d:1b:c6:5c:3f:e6:79:d8:71:4d:d9:3a:0c:2c:de:
8d:af:0d:06:bf:ac:c2:16:75:85:03:59:9b:e4:68:ec:84:e5:
66:3f:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org