Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4nw2qqu_QjewD_5s5bx0JS7Qle8.roa
File: 4nw2qqu_QjewD_5s5bx0JS7Qle8.roa (raw, json)
Hash identifier: TL+52q5lf1mT1rtY69yd0eZQXsxe78sUd5d4QfEI+d0=
Subject key identifier: E2:7C:36:AA:AB:BF:42:37:B0:0F:FE:6C:E5:BC:74:25:2E:D0:95:EF
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E09EC118745CC17AEF0126B365EA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4nw2qqu_QjewD_5s5bx0JS7Qle8.roa
Signing time: Tue 06 Feb 2024 18:24:15 +0000
ROA not before: Tue 06 Feb 2024 18:24:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200676
IP address blocks: 2a0f:b241:c7::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e0:9e:c1:18:74:5c:c1:7a:ef:01:26:b3:65:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e27c36aaabbf4237b00ffe6ce5bc74252ed095ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:38:0c:cf:40:0a:9d:bf:93:ec:ae:b8:30:
1c:38:af:b0:71:33:49:dc:f9:b2:ad:e4:f7:08:1a:
94:a3:7c:7c:d9:fe:32:36:c5:a6:73:f8:22:b5:3f:
b0:ff:72:3c:b8:5a:c2:f4:b9:9f:f7:d1:26:fd:18:
57:4f:65:5d:27:e7:93:5c:97:85:9e:b8:94:72:29:
2f:85:86:de:98:e8:e6:91:96:6f:12:86:b9:50:63:
db:44:be:76:28:e0:50:01:03:57:9b:a6:e9:41:ee:
1a:71:e0:75:4c:47:c8:9e:19:b1:29:48:2e:af:88:
c2:df:bf:2b:14:ae:18:c8:d1:b6:d2:88:ac:49:30:
fd:8e:c1:21:bd:2e:c3:f0:49:2f:c8:3d:0f:b3:47:
0a:be:82:5f:d4:bd:83:2e:73:23:e3:a7:d8:14:16:
69:18:c5:66:8b:55:f1:22:65:e8:09:4b:fb:7c:97:
cc:6c:40:e7:5b:be:70:55:05:79:4e:f5:a5:75:37:
bd:54:c4:64:5c:6d:05:a8:4d:60:95:35:93:df:b4:
22:6c:3a:21:4a:e8:94:61:d6:db:3a:5b:a9:51:ed:
d6:ab:fa:31:c3:37:d4:22:d3:98:a6:66:f1:85:26:
df:62:e2:1b:7a:bc:65:0b:6a:a9:ed:47:ca:df:4a:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7C:36:AA:AB:BF:42:37:B0:0F:FE:6C:E5:BC:74:25:2E:D0:95:EF
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4nw2qqu_QjewD_5s5bx0JS7Qle8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:c7::/48
Signature Algorithm: sha256WithRSAEncryption
3e:01:12:53:89:ce:c6:5a:13:1d:3e:e8:19:00:90:9b:3f:ac:
ed:f5:f1:16:4a:8a:b8:e6:c1:e1:fa:29:8a:21:14:8a:fc:11:
73:c9:95:6a:fa:5b:f1:77:1f:d4:0d:e9:8a:ce:27:e3:48:ae:
45:15:75:b7:ba:7b:f4:74:61:66:07:9f:19:a5:e4:74:fb:13:
83:19:45:23:4b:8e:fb:e5:4d:0f:e9:71:e9:b0:1b:65:14:fb:
11:8c:5e:e9:9b:5f:9e:9a:1e:88:30:56:6f:a4:f4:f6:20:78:
ad:24:7e:42:8e:16:cc:7a:df:b7:62:a5:eb:40:da:15:65:01:
62:63:ca:ac:74:fa:bd:ec:cd:4c:07:c6:75:6a:9a:bd:07:da:
12:b9:c1:a9:81:28:90:b7:c1:63:24:38:da:6e:1c:0d:81:39:
1e:c2:8b:2f:e9:53:0a:5d:b5:a6:c6:5c:ba:3f:e2:53:6c:be:
cb:95:5d:93:8f:42:7d:62:25:d7:ac:79:8c:ca:3f:57:ec:39:
21:e0:dc:ae:44:3e:19:a1:c1:60:37:7d:d9:9e:70:ba:16:af:
8b:4f:bb:6f:0a:02:84:4c:b1:89:04:fe:c1:a3:0c:34:70:71:
c7:60:87:71:27:df:ab:e1:0f:e0:1d:32:c7:00:20:7f:5d:94:
6d:ea:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org