Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/34Qder3v3BPl3Oz4Tm38zhaDrnM.roa
File: 34Qder3v3BPl3Oz4Tm38zhaDrnM.roa (raw, json)
Hash identifier: fLb24MGMxEh9fh9LYMTjXmYboC5s98wGTR1hl7EXBM8=
Subject key identifier: DF:84:1D:7A:BD:EF:DC:13:E5:DC:EC:F8:4E:6D:FC:CE:16:83:AE:73
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F93A43587242CA9B6DFCA1F36514135
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/34Qder3v3BPl3Oz4Tm38zhaDrnM.roa
Signing time: Tue 06 Feb 2024 17:59:58 +0000
ROA not before: Tue 06 Feb 2024 17:59:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44422
IP address blocks: 2a0f:b241:2e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:93:a4:35:87:24:2c:a9:b6:df:ca:1f:36:51:41:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:59:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df841d7abdefdc13e5dcecf84e6dfcce1683ae73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:3e:d4:8e:a2:99:f6:01:87:fa:c9:05:b4:
e6:ff:a2:c8:aa:fc:a3:c3:0e:b8:bd:d3:d7:ad:5d:
8a:41:96:c3:87:a4:3d:85:d8:be:87:46:07:b2:4a:
bc:d8:5f:79:2a:c9:9a:cf:c8:f5:60:85:a3:c4:31:
5b:05:62:75:1f:36:ad:3d:23:8b:57:8d:b1:f8:3d:
ac:c7:c1:88:ca:92:7c:a6:44:f1:83:25:03:99:57:
f5:a2:db:9d:9b:b6:53:54:ef:d4:13:49:33:06:db:
c7:a2:b3:0d:28:ed:e9:77:f0:48:a8:81:09:de:ca:
ff:4c:d3:cc:fe:59:24:61:6a:84:de:14:ec:e1:3b:
01:d8:00:b4:08:68:5a:8e:02:f2:3e:d8:fe:58:b8:
d7:55:60:e8:91:3f:c3:7a:9c:f4:0b:7b:f6:19:19:
b7:22:e3:3c:fd:9e:f8:f7:4a:74:d3:2b:e8:0c:87:
d4:a2:02:c4:30:c9:79:78:63:c5:c1:ba:c6:52:d0:
68:77:ed:8e:89:bf:42:d5:8d:4b:60:12:60:a4:8d:
3f:68:f0:10:b0:62:a4:d8:14:67:76:20:1c:96:61:
a5:5b:f3:be:58:4f:4a:32:55:a9:e8:e3:f2:06:16:
eb:c8:aa:3c:fc:10:e7:c1:2c:a7:2e:41:d1:6a:5e:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:84:1D:7A:BD:EF:DC:13:E5:DC:EC:F8:4E:6D:FC:CE:16:83:AE:73
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/34Qder3v3BPl3Oz4Tm38zhaDrnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:2e::/48
Signature Algorithm: sha256WithRSAEncryption
2c:86:7e:2b:00:1a:c8:ed:35:8d:96:9b:ce:be:50:6d:9b:92:
99:4e:19:dc:85:2a:7b:6d:b8:08:96:6e:36:85:6a:52:8e:ed:
64:95:da:53:4a:85:ea:aa:0f:c6:2a:e2:b3:24:c3:5c:e7:07:
8b:0f:36:7d:ea:bc:f0:f6:0b:15:3d:b4:1f:7e:b5:41:7a:e3:
91:88:23:72:5e:ff:88:52:23:8b:67:e5:d8:ec:bd:ae:f8:7a:
31:b7:ba:57:40:25:73:b3:78:bc:97:0e:e9:71:5b:f4:77:7f:
ef:88:ec:87:0e:fd:25:a6:08:29:e0:4c:08:f0:75:c0:ef:0f:
b3:fc:25:84:59:e4:cd:03:8c:39:f9:57:52:ee:0f:91:34:60:
2f:56:dd:33:17:5a:b4:67:69:5e:fb:68:f3:60:71:84:8a:5d:
80:70:b2:51:97:00:6c:49:a9:ab:a0:99:17:db:a8:14:33:f4:
bb:68:64:f0:55:a9:47:3c:84:ca:02:ea:d3:fe:8b:50:e2:53:
0e:9b:a4:45:50:d3:e9:f7:5a:80:49:14:4d:be:cb:b4:4b:8e:
4b:2f:ae:82:2a:a7:f4:93:e1:05:80:49:00:b5:09:77:bc:56:
66:23:75:38:2a:4b:1e:5c:4f:da:1e:e0:da:45:dc:29:74:80:
f7:bd:a9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org