Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5EJlVPDEeMgBkjvK4FNeS5jvx24.roa
File: 5EJlVPDEeMgBkjvK4FNeS5jvx24.roa (raw, json)
Hash identifier: o7jp899x5FNOaj05GdbHGzffx2FFmX1+ypO87TtT6bg=
Subject key identifier: E4:42:65:54:F0:C4:78:C8:01:92:3B:CA:E0:53:5E:4B:98:EF:C7:6E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB7A3955E7AC4A0C7773ABBA7BF0F13
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5EJlVPDEeMgBkjvK4FNeS5jvx24.roa
Signing time: Tue 06 Feb 2024 18:39:17 +0000
ROA not before: Tue 06 Feb 2024 18:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211486
IP address blocks: 2a0f:b241:146::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:a3:95:5e:7a:c4:a0:c7:77:3a:bb:a7:bf:0f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4426554f0c478c801923bcae0535e4b98efc76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:0d:6c:ff:20:20:b0:1a:82:b4:23:a7:50:
a7:1b:30:cf:b5:5d:3a:f7:1e:41:70:1f:69:76:ba:
57:37:73:4b:16:ea:3c:25:50:78:f3:b4:06:c1:e3:
44:00:53:22:e8:e8:72:90:b9:b9:b2:57:83:24:51:
dd:2d:90:74:11:8d:72:65:3d:a9:15:8f:6b:10:49:
66:4b:3d:8e:58:aa:ec:6e:88:e4:dc:df:54:ea:4c:
19:e7:cb:04:a5:fe:3a:ef:2c:4c:2d:bd:90:1c:3e:
38:a7:a0:dc:f3:8b:4b:9e:c3:bd:da:92:05:c2:f4:
a0:71:63:a0:ee:0d:eb:71:e6:cc:83:6f:f7:7d:55:
6b:24:ed:85:49:ad:15:89:37:d3:91:5b:49:f7:93:
4a:15:33:6f:24:da:b3:64:67:df:49:4d:5e:b2:de:
98:2a:d9:e8:c3:58:8d:9a:d1:c1:d5:20:c0:b9:0e:
9a:25:15:fd:7f:2b:c7:37:33:64:91:e1:26:fc:cb:
f3:a5:15:49:7d:2c:97:9c:02:98:7a:29:e7:a8:90:
58:27:c5:23:5b:c7:c2:7a:b9:88:b7:24:58:e6:a7:
69:10:4a:18:42:53:01:b8:7e:7f:df:a9:fb:40:00:
a8:76:a3:bd:a0:71:9a:b5:9d:ff:5e:c7:b0:d9:80:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:42:65:54:F0:C4:78:C8:01:92:3B:CA:E0:53:5E:4B:98:EF:C7:6E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5EJlVPDEeMgBkjvK4FNeS5jvx24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:146::/48
Signature Algorithm: sha256WithRSAEncryption
35:a6:49:f3:8b:0f:49:69:2f:e5:fb:7c:bf:d7:a4:99:26:7c:
17:85:80:c3:ee:25:5f:3e:27:0c:96:67:0b:33:26:82:f0:cd:
2f:b7:16:ab:bc:3f:72:63:dd:0a:2d:06:a1:20:78:14:1d:fe:
74:05:b4:7e:3b:b4:9a:04:3d:8d:08:01:91:83:86:69:12:e0:
76:6b:27:e8:ca:e0:28:02:7e:9d:83:f0:4d:a2:93:6d:7d:2b:
5b:61:73:a3:0b:ee:90:0a:d8:5e:a1:41:d4:d6:cc:f1:d3:0a:
5f:52:33:87:c8:74:f7:e7:39:46:98:ad:2c:bf:df:b7:48:c0:
77:62:28:1b:26:ad:d2:93:7e:ec:85:ed:0b:55:aa:6b:b9:c8:
79:ef:33:da:c5:f2:67:8a:ca:7a:18:0b:1e:c0:4b:eb:d6:77:
74:bf:89:0d:50:39:18:12:70:b8:e7:f8:47:de:3f:1c:04:e5:
2f:12:ab:24:b0:fc:29:a5:1c:13:b6:16:39:58:bd:e7:33:b8:
81:94:d7:fc:7c:21:47:92:f2:36:e4:89:b7:bc:31:56:b3:8f:
c0:44:4e:6e:77:e2:54:45:55:5f:ee:66:7f:e2:c7:04:ca:db:
11:77:5d:c9:b2:cd:5c:c6:6c:e5:dd:8e:61:67:46:b3:8a:d2:
3a:53:27:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org