Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/39nLqDLDNjXXZkBabK5synRUwpk.roa
File: 39nLqDLDNjXXZkBabK5synRUwpk.roa (raw, json)
Hash identifier: kmYct6fNZWYK6UXA0A3GwyDmAM5YY3/1GZ6nrYFh1Vk=
Subject key identifier: DF:D9:CB:A8:32:C3:36:35:D7:66:40:5A:6C:AE:6C:CA:74:54:C2:99
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F071B4677C0995E2913C2CE6EE4FC8
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/39nLqDLDNjXXZkBabK5synRUwpk.roa
Signing time: Wed 07 Feb 2024 05:00:35 +0000
ROA not before: Wed 07 Feb 2024 05:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198342
IP address blocks: 2a0f:b241:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:71:b4:67:7c:09:95:e2:91:3c:2c:e6:ee:4f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfd9cba832c33635d766405a6cae6cca7454c299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3c:92:05:21:6d:a9:00:38:54:bb:80:b3:6a:
fb:72:c4:30:04:64:21:b0:62:43:26:ac:2f:4b:8d:
38:18:ba:65:cd:7d:53:0d:06:d3:33:8a:26:11:ec:
f2:1c:32:96:f1:2a:6f:16:5a:5d:04:17:bc:34:bc:
42:92:f3:39:87:fb:7d:5a:b8:c2:82:02:be:7d:e2:
cd:80:16:8a:8b:5e:1e:ce:9b:e4:48:5d:5f:4e:25:
4e:83:38:65:e6:9d:c3:aa:fc:61:a1:66:61:10:cd:
37:8d:5e:ca:40:18:b0:49:93:d3:64:92:f3:51:e2:
15:d9:e3:89:b4:f3:81:5d:78:30:68:74:7c:43:c1:
2a:40:ae:4b:c7:99:26:71:bd:b8:78:70:d9:91:d0:
2e:d5:e8:71:67:6c:67:b4:55:6c:a9:79:a4:e6:2a:
71:93:8d:61:2f:36:25:85:c2:e2:b5:f3:25:58:42:
fd:ca:5c:64:e4:05:52:71:ff:3d:5e:e6:d6:ad:f3:
b4:8a:0d:06:fa:bc:bf:9c:86:d1:49:70:c8:97:8c:
ba:a7:4e:d9:90:28:10:0d:1e:77:55:58:03:71:ea:
12:8f:56:2c:9d:ab:ec:12:44:b8:90:68:3d:6d:b0:
4e:5f:97:8a:e9:74:55:b5:56:54:37:82:81:7e:28:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:CB:A8:32:C3:36:35:D7:66:40:5A:6C:AE:6C:CA:74:54:C2:99
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/39nLqDLDNjXXZkBabK5synRUwpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:6::/48
Signature Algorithm: sha256WithRSAEncryption
61:06:fc:92:4b:1c:d9:25:3d:52:80:a3:23:47:e6:99:d5:75:
2d:04:f6:41:62:62:e3:8d:61:9d:b3:11:ad:48:53:4b:dd:31:
bf:65:0a:38:91:01:a0:93:13:ee:f5:b1:58:9f:f1:00:e3:12:
75:d8:3c:59:6f:5e:22:7a:f7:62:02:b5:4b:0b:9d:5b:20:65:
96:6d:80:97:14:c8:66:9b:a7:61:a2:3d:91:8d:c5:03:0b:3d:
0b:66:b8:a2:60:2d:09:ec:76:f6:87:d8:c5:dd:b1:e6:13:d3:
13:44:0a:d1:1b:41:e1:75:29:91:45:79:7d:a8:5b:a5:d3:1b:
db:38:f8:89:3a:11:3f:b5:c7:ee:34:84:28:db:18:69:b0:a0:
6a:02:5a:4a:95:cb:cd:8e:af:ac:ec:bb:6c:d9:ff:c5:58:93:
a0:3f:e7:14:1a:f5:6a:50:0a:4c:74:54:3c:a4:b8:ee:26:98:
da:05:c2:48:94:07:1f:90:2a:f6:c7:72:c8:d0:1b:5d:71:02:
00:ed:cf:2a:42:a3:5b:70:91:0d:8e:42:f5:29:58:c1:d2:bc:
c9:19:45:17:57:21:c0:f3:e7:a7:8c:47:63:b8:cb:b1:d1:a4:
54:1f:09:80:df:4f:57:92:dd:8a:f4:50:c0:e4:11:0e:65:0d:
d3:a1:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org