Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6Y_WE8YhdbBifO3BpWa6nUHlLFw.roa
File: 6Y_WE8YhdbBifO3BpWa6nUHlLFw.roa (raw, json)
Hash identifier: Orv4pl1V2vc6KgIs3bgPqtAULduJD2lsVZMMMJtn26o=
Subject key identifier: E9:8F:D6:13:C6:21:75:B0:62:7C:ED:C1:A5:66:BA:9D:41:E5:2C:5C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA720CAB09ABC4844A2999882BDC431
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6Y_WE8YhdbBifO3BpWa6nUHlLFw.roa
Signing time: Tue 06 Feb 2024 18:21:15 +0000
ROA not before: Tue 06 Feb 2024 18:21:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198376
IP address blocks: 2a0f:b241:79::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a7:20:ca:b0:9a:bc:48:44:a2:99:98:82:bd:c4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:21:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e98fd613c62175b0627cedc1a566ba9d41e52c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:64:2e:c5:d8:65:b1:74:8a:e0:3f:3e:d0:
1c:dd:31:ab:0c:f5:f0:62:cc:3e:77:11:fc:a9:72:
65:65:1f:86:27:dc:59:42:9d:4c:b5:67:ae:7a:9b:
58:ae:c4:d6:f0:e5:99:e9:46:3d:1d:ab:31:c5:87:
29:25:d0:a0:f3:a6:88:14:c1:ad:33:7b:da:81:4d:
28:e2:ab:58:80:28:34:ff:ea:a3:d0:1c:5d:89:13:
5f:16:4b:ab:35:b3:f1:86:c4:7c:00:8c:38:ce:fe:
5a:c2:83:c2:86:0d:ea:10:b2:c4:ec:3d:c8:69:af:
1a:56:2f:4e:77:a0:0b:bc:ee:43:1d:5a:24:b6:17:
99:13:d6:61:73:e7:73:af:4a:d9:98:85:ef:20:f5:
05:47:fc:3f:34:b1:40:bf:7f:fd:0a:15:7c:8e:5a:
7f:23:f8:d5:6d:39:1d:7b:a9:17:6c:09:d6:e6:20:
20:86:b4:55:47:0e:ea:51:61:6f:d5:94:1b:57:2b:
a1:58:c9:85:b4:5c:c2:aa:2b:04:ea:19:26:8f:82:
63:69:96:31:33:05:2c:f7:4d:ea:14:c4:e7:4c:b5:
e9:61:91:a1:c6:15:5d:7b:6a:6e:93:0b:3a:89:44:
55:19:77:09:78:ca:a2:96:1c:05:59:6a:d9:01:35:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:D6:13:C6:21:75:B0:62:7C:ED:C1:A5:66:BA:9D:41:E5:2C:5C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6Y_WE8YhdbBifO3BpWa6nUHlLFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:79::/48
Signature Algorithm: sha256WithRSAEncryption
04:65:99:3e:67:4e:66:f6:77:67:b2:7d:dc:35:6a:13:5d:d6:
4a:90:e4:1d:35:7b:35:1b:14:09:e4:ce:49:94:40:57:c5:ed:
e4:54:7b:2f:25:05:94:ca:3a:76:c7:e9:b1:da:23:8e:3a:fe:
d6:af:5b:b0:b1:09:38:20:d5:09:44:a3:6c:90:ff:74:e6:db:
04:4a:2a:8b:67:3a:24:25:5d:e3:5f:b5:4e:c6:af:51:cd:95:
4a:ac:1f:04:ea:49:9a:bf:cc:4f:f5:c7:54:8e:df:4e:c8:1a:
20:24:c0:a8:3e:5e:20:1d:b1:15:97:11:22:7b:1c:ff:24:78:
f3:6c:bf:5c:6c:08:93:51:7e:af:44:96:6c:13:d1:73:73:b9:
24:a4:23:8b:5e:ef:1c:b6:b0:fc:44:64:40:22:6d:d9:76:cd:
ee:a2:da:24:af:b9:c0:7b:37:d3:e2:e5:ad:74:60:36:1d:0a:
a3:83:16:6b:01:d6:b0:00:dc:43:2f:4f:20:a9:90:9b:ee:6b:
ab:41:0a:e3:89:6d:57:e9:fa:04:69:4a:91:36:1d:60:a2:c2:
b4:52:74:09:d9:b9:f2:87:fc:c6:f4:ec:56:f0:28:f9:95:89:
98:3f:f7:67:ea:23:a8:09:f1:74:24:3e:40:1b:4b:01:13:a4:
ba:5a:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org