Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6ipDvEnZZjetu_fAPqlOeqcbExI.roa
File: 6ipDvEnZZjetu_fAPqlOeqcbExI.roa (raw, json)
Hash identifier: SRqb1UqpbnR/+buxuzi5djKxNBnuiMLTD6cUzyJJSPc=
Subject key identifier: EA:2A:43:BC:49:D9:66:37:AD:BB:F7:C0:3E:A9:4E:7A:A7:1B:13:12
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0AC24CA0BEB272793C744221A565C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6ipDvEnZZjetu_fAPqlOeqcbExI.roa
Signing time: Wed 07 Feb 2024 05:00:49 +0000
ROA not before: Wed 07 Feb 2024 05:00:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212149
IP address blocks: 2a0f:b241:1::/48 maxlen: 48
2a0f:b241:b00b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:ac:24:ca:0b:eb:27:27:93:c7:44:22:1a:56:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea2a43bc49d96637adbbf7c03ea94e7aa71b1312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:10:97:ae:46:33:9c:ca:a2:8c:8b:01:52:80:
00:84:15:cf:96:89:34:0e:52:e3:3e:b1:dd:33:4e:
60:69:80:ac:db:77:1c:8a:60:1c:9d:f2:ee:01:d5:
05:94:0c:00:c3:4b:bf:6c:ae:fe:50:2d:9b:13:29:
82:f6:48:73:fe:4f:29:fa:7d:81:09:b7:b0:53:0c:
da:6b:ea:4a:67:d0:8a:8c:59:b4:37:a3:fa:5f:c9:
5a:2d:f6:1d:d6:85:f7:0b:2d:e4:d4:c0:7d:88:41:
f4:cc:3f:88:f8:a9:26:85:70:34:af:1a:4b:42:7a:
49:4b:a2:92:bc:59:bb:6d:1f:c8:a0:73:a8:80:29:
57:64:37:87:e6:b8:9f:3d:3d:da:fe:f4:b2:88:8e:
aa:78:67:c5:81:2e:a8:c1:13:6b:23:11:03:d9:69:
e9:e4:3c:95:bf:26:a8:ff:5f:26:a6:86:f1:46:fc:
62:d4:65:e9:7d:91:dc:ec:df:08:8e:3e:40:9e:8e:
72:89:84:bf:3e:7a:0a:53:02:dc:0b:5e:1a:48:7d:
67:6d:4f:ae:e0:bd:f0:25:0e:90:23:83:d7:b9:b3:
be:07:b0:77:5c:13:d6:95:0c:cf:99:a7:77:74:80:
7d:89:1b:22:aa:11:de:c2:d0:16:7a:de:1e:8a:bf:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2A:43:BC:49:D9:66:37:AD:BB:F7:C0:3E:A9:4E:7A:A7:1B:13:12
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6ipDvEnZZjetu_fAPqlOeqcbExI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:1::/48
2a0f:b241:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
43:fb:ef:3d:6e:55:a2:3c:59:98:bf:4a:94:4e:09:20:bc:6a:
ad:96:51:40:54:df:d6:c8:92:de:c4:7e:55:59:56:7d:66:62:
26:4b:1c:56:31:19:6b:61:fa:2e:55:0d:15:33:5c:0e:07:ed:
98:3d:5c:8a:cf:d0:ef:1c:1d:41:e8:ac:6f:65:f1:55:18:92:
f4:df:82:b8:ac:ff:bc:6c:e2:34:d6:fd:dd:74:51:63:02:a8:
97:58:8d:17:8d:a1:be:25:72:c2:03:bc:4f:2f:0c:0e:0b:67:
1c:3b:57:37:01:e1:bb:45:1f:ad:ae:9a:0b:5d:73:1e:f8:36:
4c:8d:10:34:f3:6d:bb:0b:a9:b9:44:74:9c:fc:95:39:4c:23:
f4:69:1d:3f:ed:6c:c8:25:3c:40:5d:e7:e8:99:64:53:68:d1:
1d:d4:2c:55:5f:e1:f8:f1:05:35:23:aa:bb:d1:9c:c7:66:f4:
45:20:2d:f0:46:a2:c8:ac:f8:13:2f:39:de:6c:df:e3:0c:08:
e7:64:bd:3f:73:94:9e:1c:4f:70:ee:a6:e3:31:74:44:b9:41:
a2:6c:44:28:50:d7:fd:a6:50:2e:57:bc:9d:1e:8f:ad:de:c4:
3e:d4:94:d5:f5:5a:97:49:02:e5:4c:fa:9c:bc:a4:84:7b:ec:
55:b0:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org