Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5yLHCfItPL92Aqzb0FYXC1QQnrk.roa
File: 5yLHCfItPL92Aqzb0FYXC1QQnrk.roa (raw, json)
Hash identifier: znigWItb8XjGC1K44LgUoBIv5TeS9AH4zy3Y/dT2WcE=
Subject key identifier: E7:22:C7:09:F2:2D:3C:BF:76:02:AC:DB:D0:56:17:0B:54:10:9E:B9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6B3E8C127CCB6796B8E6538A9CE44
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5yLHCfItPL92Aqzb0FYXC1QQnrk.roa
Signing time: Tue 06 Feb 2024 18:38:16 +0000
ROA not before: Tue 06 Feb 2024 18:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199682
IP address blocks: 2a0f:b241:12f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:b3:e8:c1:27:cc:b6:79:6b:8e:65:38:a9:ce:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e722c709f22d3cbf7602acdbd056170b54109eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:7f:3b:f8:9d:af:b4:49:24:49:7d:84:35:
b1:cf:05:76:42:44:d8:bb:99:d6:e4:94:a8:58:e9:
1a:27:3c:42:ee:55:7c:d8:c4:d2:ca:36:87:9a:1f:
34:67:39:27:5a:51:20:a4:fe:e7:a2:aa:9f:d5:db:
1e:e3:e7:dc:ba:9e:f0:6c:4f:44:57:42:d3:4a:37:
c8:da:64:34:ae:8a:69:c4:c9:80:7d:14:16:e2:25:
0e:fa:32:59:b8:46:73:9d:2b:65:f4:15:51:71:87:
71:5c:aa:ed:ba:c0:ab:96:5d:48:73:97:63:30:9d:
30:76:66:c6:0c:cb:04:ce:52:a9:8e:8a:0a:4f:c3:
0e:9c:42:67:3e:30:c6:0b:0b:49:51:24:c5:91:7a:
a5:70:64:ee:b7:0c:c0:fb:d8:ad:58:71:52:3e:48:
26:6b:2f:6d:23:4a:6d:f1:b0:dd:5a:d4:5b:68:1c:
c7:f2:91:3f:6f:40:9e:79:82:8a:5b:c9:92:2f:4c:
f4:cb:58:1b:30:26:b7:c8:41:bd:a5:f1:76:ba:5a:
95:5a:2a:7c:ab:1a:e2:93:b0:c0:ba:3c:23:72:9f:
13:9c:57:bd:0d:51:a5:ea:4f:34:72:e7:2d:15:94:
f1:75:6b:b8:be:12:ee:82:a6:ab:36:b3:bf:59:0c:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:C7:09:F2:2D:3C:BF:76:02:AC:DB:D0:56:17:0B:54:10:9E:B9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5yLHCfItPL92Aqzb0FYXC1QQnrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12f::/48
Signature Algorithm: sha256WithRSAEncryption
27:fb:94:6d:60:01:38:f9:53:64:88:67:6c:1b:01:48:5d:3d:
6b:de:0d:f3:f3:14:b3:87:00:66:f4:ce:8b:94:a3:0b:20:ab:
8d:1e:3d:f2:c3:fb:20:2b:fc:bf:02:b7:72:28:24:04:65:a1:
4e:29:ee:6f:6e:1c:05:b8:51:7d:8b:d4:94:51:ca:93:a7:a1:
2b:8b:a5:37:e1:c3:3a:e7:3b:11:93:d4:6f:cd:a3:45:ac:00:
6e:52:8a:c8:7e:d4:b6:c7:06:f9:02:c4:ae:c6:a8:dd:bb:14:
86:cd:52:11:6c:48:97:db:29:5b:83:0d:cd:8f:8d:4e:e4:ec:
56:98:4b:75:66:cf:26:85:90:dc:2c:c6:9a:26:06:0d:57:26:
59:a8:9f:d9:9b:70:69:44:d4:3e:a1:4d:fe:45:88:d4:86:50:
53:23:bd:de:9b:4d:7c:30:17:55:85:4a:50:44:c2:7f:6e:6d:
e3:9b:d3:07:16:25:e1:6e:c1:a0:34:dd:e3:83:20:0f:5c:1f:
4d:e4:b1:09:9f:a9:1d:1f:11:74:e7:fa:b2:60:d5:07:87:b7:
7f:fd:54:e5:3a:d6:c2:29:3f:91:22:a8:af:12:74:78:51:bf:
43:e3:97:3e:0b:6d:ad:d8:c2:a1:b6:9b:ac:a0:24:5a:b9:14:
cf:69:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org