Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2wWkPiuCtQD31IG5lZd84wCxHWo.roa
File: 2wWkPiuCtQD31IG5lZd84wCxHWo.roa (raw, json)
Hash identifier: hcwgzhEGWO0aZuK1KaQ43fGZcShV7viNgQ4kdvexZGM=
Subject key identifier: DB:05:A4:3E:2B:82:B5:00:F7:D4:81:B9:95:97:7C:E3:00:B1:1D:6A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96AD6DF748B45DFD2E3F745A477BA6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2wWkPiuCtQD31IG5lZd84wCxHWo.roa
Signing time: Tue 06 Feb 2024 18:03:17 +0000
ROA not before: Tue 06 Feb 2024 18:03:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215993
IP address blocks: 2a0f:b241:59::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:ad:6d:f7:48:b4:5d:fd:2e:3f:74:5a:47:7b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db05a43e2b82b500f7d481b995977ce300b11d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e2:28:3d:5f:0d:b1:a7:7e:26:a2:1d:4c:5a:
40:62:1e:9f:51:4a:47:cd:19:ab:32:0a:04:b3:08:
89:1e:39:6b:8e:89:66:8c:0f:ac:86:6d:23:5b:82:
ee:40:af:96:2f:0c:1d:f0:1f:34:fb:74:b9:f9:01:
bc:9f:e1:0d:ea:82:55:89:63:14:d9:34:cd:e9:50:
51:84:5a:81:b9:57:bf:52:e0:24:d2:ef:cd:37:6f:
22:ac:ce:ec:96:c1:9a:15:b2:06:07:5d:94:76:84:
1b:ab:c9:4f:fb:9c:43:9a:57:b9:0d:68:78:85:3b:
1e:a6:4d:e9:7f:50:c9:1f:2a:32:0a:d5:16:69:97:
4c:5b:a9:fd:79:13:db:63:00:71:0a:1b:76:76:cc:
d6:42:c4:99:3b:78:a4:0f:78:8a:88:7b:b7:1a:99:
68:19:af:3e:3a:00:2f:6a:03:67:09:57:ae:1f:b5:
68:22:45:da:81:6b:5e:03:97:22:20:ac:f0:75:8d:
ba:af:31:e8:ed:a6:2b:15:fd:04:61:5f:1c:73:ae:
1c:a4:fd:fc:29:3f:9d:19:f6:73:07:fd:1b:b9:fb:
79:da:bf:57:f5:f6:79:0d:c6:17:82:fa:28:92:3d:
45:77:36:1c:2d:46:4c:11:b0:d6:b1:2a:12:cc:98:
6e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:A4:3E:2B:82:B5:00:F7:D4:81:B9:95:97:7C:E3:00:B1:1D:6A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2wWkPiuCtQD31IG5lZd84wCxHWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:59::/48
Signature Algorithm: sha256WithRSAEncryption
45:4e:94:9a:f7:b5:ff:9f:29:20:a8:d6:e5:bb:72:6e:ca:e0:
fb:f6:9d:6d:03:f8:ad:be:42:59:da:6e:30:85:ef:b8:e5:b1:
a6:ce:ba:3f:4b:80:09:8c:38:a5:c1:c4:67:c1:27:4b:b0:25:
7c:38:25:ff:5a:4c:05:cb:f5:7b:05:a7:16:12:da:58:30:92:
45:77:87:87:f1:5a:9c:97:f0:3c:d7:53:0b:0d:1f:e2:5a:a7:
08:9f:45:bc:ad:e4:df:18:7c:a3:20:2d:8e:e7:c3:37:8f:95:
4a:9d:b0:a0:d1:e3:b6:8b:53:af:81:cf:41:71:a1:0f:94:64:
e6:2c:95:e7:66:15:2a:89:57:f0:9a:0c:09:81:3a:e6:5f:22:
2e:08:78:10:6d:3a:7a:7e:6d:1d:a8:36:f0:ea:ab:0a:28:7b:
8c:e1:41:f7:77:9f:f5:61:96:14:9b:3d:7c:90:6a:c9:b4:7e:
c5:40:43:8b:3b:d9:c4:7b:90:3b:33:df:e8:5a:92:5c:c4:17:
91:49:1e:59:b7:86:b1:a9:39:d6:20:57:fc:b4:36:84:a1:fe:
34:41:2a:ce:f3:f7:75:24:e8:4f:b0:b5:d5:48:2e:89:68:fa:
46:6c:8c:30:12:66:d2:e5:52:d1:8c:6f:d3:b0:83:81:15:cb:
ba:d2:c6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org