Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4h8zM45AecY5eCAoS2TGzLH-NKk.roa
File: 4h8zM45AecY5eCAoS2TGzLH-NKk.roa (raw, json)
Hash identifier: 3gtbAvawEQiaHRqj180owlysmFrqSL+uTap/Svu1rvM=
Subject key identifier: E2:1F:33:33:8E:40:79:C6:39:78:20:28:4B:64:C6:CC:B1:FE:34:A9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FBEF0C70973CB3D2A67750A3DC5A181
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4h8zM45AecY5eCAoS2TGzLH-NKk.roa
Signing time: Tue 06 Feb 2024 18:47:16 +0000
ROA not before: Tue 06 Feb 2024 18:47:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215600
IP address blocks: 2a0f:b241:162::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:be:f0:c7:09:73:cb:3d:2a:67:75:0a:3d:c5:a1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:47:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e21f33338e4079c6397820284b64c6ccb1fe34a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:5d:22:e7:e9:07:82:91:7d:1b:8b:e9:c3:
b7:48:e9:be:fe:e0:57:35:68:c9:17:95:6e:33:4e:
87:17:96:04:e0:90:9f:b6:e9:cf:db:e3:4d:e3:11:
73:59:eb:ba:ac:ac:64:cd:38:63:f8:02:99:2e:32:
39:6b:c6:5d:ea:9f:07:b7:ac:72:f2:79:b7:14:3e:
75:70:6b:0b:50:f6:e5:41:1f:2d:31:ad:06:26:05:
d5:bf:22:0b:0a:cc:50:ab:45:c6:58:55:6b:41:ec:
cf:eb:a2:e0:5b:81:97:67:4e:f8:1d:77:8f:78:c1:
2d:96:2b:82:31:3d:7a:13:2d:70:3d:42:9e:f1:e4:
e2:c0:16:43:8b:00:f1:6b:ea:44:e8:66:08:f1:9c:
a6:36:fd:85:ea:c2:78:68:5a:08:4d:5a:35:1a:a8:
59:af:96:67:f2:26:d9:9c:d1:9f:00:17:f2:e3:59:
ac:a7:b0:7e:c3:ae:30:7b:60:5c:8e:1b:e2:52:25:
9a:52:2a:3e:46:3c:e8:cf:5f:f2:59:0b:52:51:f5:
c7:18:c8:e5:db:d7:00:90:a4:ea:f7:81:72:e4:33:
43:f3:e0:85:bd:38:c0:44:76:30:a1:26:1a:84:bb:
34:bd:2e:e5:1f:83:29:ca:9f:05:90:1b:79:81:52:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1F:33:33:8E:40:79:C6:39:78:20:28:4B:64:C6:CC:B1:FE:34:A9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4h8zM45AecY5eCAoS2TGzLH-NKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:162::/48
Signature Algorithm: sha256WithRSAEncryption
4f:a3:d8:88:c7:0e:92:35:30:99:a4:21:1e:79:62:3d:37:8c:
66:1d:51:7c:00:7a:39:75:c1:5e:a9:65:b9:b8:11:37:3f:23:
af:61:a2:1c:af:39:4f:44:14:ba:df:b9:3c:a9:11:90:3c:fb:
0d:89:1b:05:b6:43:2f:cd:4f:ee:4f:be:cf:18:96:04:db:03:
6e:6b:f9:78:15:2d:eb:a7:91:8e:44:e5:11:8a:c1:90:10:e9:
b3:de:57:99:51:48:44:d3:77:94:87:77:f3:19:98:bc:b6:96:
ed:6a:91:e4:72:b0:f1:28:aa:0a:29:07:51:f1:66:88:bf:6c:
8f:cc:81:03:fb:78:b1:f6:ee:93:07:29:5b:f6:15:20:bb:b9:
dd:6a:12:b7:5f:36:59:ab:a5:0d:77:77:13:28:3f:8e:40:82:
e5:c2:53:b1:fa:30:95:98:fb:0a:27:6e:a0:71:34:3b:5f:3a:
09:d5:b7:fd:0c:22:bb:46:9f:52:f9:a3:ed:f7:50:4e:2f:e0:
e2:68:06:7e:db:e1:d0:34:c1:f2:b4:34:09:4c:85:f3:ba:5a:
cf:86:e3:cc:05:09:5c:c7:74:c1:60:1e:43:9c:eb:35:cf:56:
9e:17:65:0b:4d:0b:3b:c0:87:46:5c:50:a4:66:ae:19:9f:b5:
d1:74:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org