Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4Tk_3vl_Te5T--u0gWwubPDzIQY.roa
File: 4Tk_3vl_Te5T--u0gWwubPDzIQY.roa (raw, json)
Hash identifier: BDQ+7LIiRCfLxbgvTxAC6HfRrPauLz4CXu0a/uSqnrE=
Subject key identifier: E1:39:3F:DE:F9:7F:4D:EE:53:FB:EB:B4:81:6C:2E:6C:F0:F3:21:06
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABBC436B38EB5C657725CE96F5008A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4Tk_3vl_Te5T--u0gWwubPDzIQY.roa
Signing time: Tue 06 Feb 2024 18:26:17 +0000
ROA not before: Tue 06 Feb 2024 18:26:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207466
IP address blocks: 2a0f:b241:f2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:bc:43:6b:38:eb:5c:65:77:25:ce:96:f5:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1393fdef97f4dee53fbebb4816c2e6cf0f32106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:7c:3e:66:40:bc:b8:e6:c6:4d:68:81:10:
a7:d9:c5:86:d1:4e:f0:b4:40:84:99:e7:54:b7:86:
3e:1c:87:5d:1b:41:45:80:25:17:47:fe:54:3a:96:
7e:a9:f0:42:a6:6f:38:bd:61:f2:5e:ce:6d:b9:52:
2f:61:f4:a8:e1:b3:e8:85:1a:b8:81:4f:db:59:e6:
b8:2f:18:c7:ca:83:4e:cd:6c:b5:b4:e7:87:55:24:
ca:47:46:28:55:18:2e:32:8f:a8:9f:90:c0:4a:8f:
dd:be:39:5a:62:4a:88:b1:46:f8:5f:6b:d6:66:1a:
92:a1:b8:23:39:3d:d4:0a:45:12:8b:86:5f:aa:3c:
92:53:76:41:55:7e:c4:1d:b7:04:9a:96:8e:45:71:
7e:30:94:87:57:d0:6c:5d:80:1f:1d:7a:aa:22:fc:
8a:2d:14:4e:19:cb:17:88:47:4c:45:9f:e9:d2:c8:
46:47:44:79:83:56:c3:ee:6e:b8:66:50:90:9b:b3:
4f:69:6c:a1:1e:50:f4:eb:9e:40:ed:55:85:07:40:
d0:40:78:b8:fd:65:40:5e:f6:2e:15:d2:76:a5:1e:
a9:93:49:d9:3c:c0:16:a1:7a:2e:82:16:28:00:d9:
1f:1f:02:92:94:ea:ba:36:80:0e:49:0e:4a:af:4d:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:39:3F:DE:F9:7F:4D:EE:53:FB:EB:B4:81:6C:2E:6C:F0:F3:21:06
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4Tk_3vl_Te5T--u0gWwubPDzIQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:f2::/48
Signature Algorithm: sha256WithRSAEncryption
02:82:55:4f:b9:c9:f6:00:cf:e8:d3:46:fa:42:36:b5:ee:af:
61:81:9f:21:21:17:e8:21:6d:0d:04:1e:76:ab:e8:33:db:8c:
28:3b:af:79:85:ab:da:f8:1f:76:39:ec:fc:76:3c:38:b4:a5:
c5:69:e2:19:aa:d4:cf:2b:56:f6:9f:42:33:84:91:b4:b6:85:
c9:4c:52:ea:28:16:87:6d:44:3d:15:3d:65:15:be:b0:95:66:
56:f2:1a:98:e3:92:ab:01:75:90:07:1c:3a:6c:7b:92:dd:c1:
28:26:c6:e6:93:e2:a8:f0:e5:1e:4c:81:38:e9:2d:fd:04:e3:
49:0d:ae:81:3c:68:26:b4:38:01:b2:a7:ba:d5:75:c7:61:81:
95:3c:8a:f9:af:7b:4d:88:07:cd:97:44:10:df:75:de:3c:99:
5b:47:a1:b0:af:96:f9:2a:c6:c7:47:b4:91:bd:87:05:5b:d7:
24:e4:e5:b0:a3:9b:b2:b7:05:b0:11:2c:2b:94:a2:2b:77:ee:
13:c2:3f:30:6b:82:64:7d:79:3a:7e:a8:b4:89:0b:83:a1:61:
32:a5:3e:49:ab:40:80:c9:ab:cc:aa:34:af:e2:68:0c:b8:bc:
77:fb:9a:ec:77:5c:87:b1:25:5f:a2:9f:b4:59:e2:50:be:41:
40:8f:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org