Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5wfcEnjk3eHLJL7xa-d3tH3gg-0.roa
File: 5wfcEnjk3eHLJL7xa-d3tH3gg-0.roa (raw, json)
Hash identifier: /Gr5l71W2AEKG9tP27kKByqchccPcWU62WQGWYQrW6E=
Subject key identifier: E7:07:DC:12:78:E4:DD:E1:CB:24:BE:F1:6B:E7:77:B4:7D:E0:83:ED
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAAD4D7DA9596ED364B455FEEDCD8C4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5wfcEnjk3eHLJL7xa-d3tH3gg-0.roa
Signing time: Tue 06 Feb 2024 18:25:18 +0000
ROA not before: Tue 06 Feb 2024 18:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203539
IP address blocks: 2a0f:b241:e5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:d4:d7:da:95:96:ed:36:4b:45:5f:ee:dc:d8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e707dc1278e4dde1cb24bef16be777b47de083ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:18:0b:d7:ee:40:81:ed:a4:63:0a:91:f0:
9b:d1:00:7d:cd:b5:5b:7b:dd:2a:e9:7c:8e:96:b1:
af:a8:32:fb:4c:28:20:c9:10:d6:e4:74:3e:ab:f4:
2c:ed:6c:6f:6d:18:d2:c1:c7:19:d1:32:72:d4:90:
30:3f:2c:8e:1d:c1:20:3b:6d:f7:20:08:4b:4b:b2:
06:6a:31:ac:61:e4:d9:5c:ef:f0:a4:4f:78:99:e3:
81:76:00:91:48:df:f6:2f:eb:c8:e9:06:5f:00:84:
ea:8b:81:36:41:e8:21:c8:ad:fb:52:41:20:a1:28:
78:84:75:eb:8a:0f:c5:19:48:d5:85:21:8b:d5:38:
2e:ca:27:85:0d:dc:f7:72:bb:34:64:4d:ec:63:f9:
8d:20:e7:77:52:11:93:76:4c:50:b6:60:40:11:06:
4b:cf:0c:8a:51:01:52:7a:7d:7f:2f:18:8c:bd:a3:
0d:58:af:de:ec:3b:db:82:d9:0a:e6:54:a0:0b:cc:
81:1f:74:7f:67:cb:01:18:64:dd:1e:f6:03:9a:a5:
e8:c6:be:e9:ce:7c:27:2e:47:2d:89:1a:77:23:df:
34:29:57:52:fb:35:b3:24:27:67:a7:10:d2:8e:24:
bd:e3:cb:bc:df:af:f0:55:99:0b:85:f2:e5:60:04:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:07:DC:12:78:E4:DD:E1:CB:24:BE:F1:6B:E7:77:B4:7D:E0:83:ED
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5wfcEnjk3eHLJL7xa-d3tH3gg-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e5::/48
Signature Algorithm: sha256WithRSAEncryption
3f:f4:91:9e:01:32:78:be:90:3a:f7:b2:99:4a:a2:7e:ad:09:
ab:d8:9c:8f:3b:08:78:1c:aa:13:9e:17:75:c7:64:6a:1f:9e:
a0:e8:9c:fd:16:55:f7:41:d5:9a:9c:93:b8:b6:d6:65:ef:ab:
9a:58:51:34:9c:23:e1:b0:b0:d5:1b:f2:f1:bc:2d:96:7c:44:
0d:fb:5a:e1:ef:0d:48:d9:fd:7a:13:22:f6:62:7e:94:09:04:
19:98:43:45:80:d8:9b:ab:83:67:98:e8:92:fb:34:96:73:6e:
22:a7:69:66:0b:df:2f:db:24:80:97:92:ac:07:f8:3d:2f:5d:
7c:39:7c:61:35:ba:94:2e:4c:5d:0d:f0:d3:1e:08:ee:37:1a:
72:73:c6:52:03:ff:50:55:c7:5a:97:15:c3:b5:b3:1a:d5:b3:
14:5d:4a:30:b2:ba:ec:28:63:f6:ac:56:75:e2:3f:a5:35:00:
78:64:04:18:06:c6:2c:16:25:26:81:57:9b:51:12:81:cf:71:
18:8d:12:56:d2:2e:c2:e2:72:e5:af:bb:54:15:2a:08:49:ae:
0a:79:ac:0c:ad:6c:0a:9a:bf:1c:5b:75:a7:b2:9a:36:d2:16:
a6:32:85:a7:5c:79:3d:16:47:6c:75:23:6d:00:76:ed:a1:2c:
00:2c:d8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org