Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6jy4X5LRkXUl-iLGl5FoH0kcq1U.roa
File: 6jy4X5LRkXUl-iLGl5FoH0kcq1U.roa (raw, json)
Hash identifier: 3c6DCZypmljydJS6V6iG0PUXL+v/7CVu+lqMQS/AKbo=
Subject key identifier: EA:3C:B8:5F:92:D1:91:75:25:FA:22:C6:97:91:68:1F:49:1C:AB:55
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB5CE37E9FBCBE806733AA327B0CE57
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6jy4X5LRkXUl-iLGl5FoH0kcq1U.roa
Signing time: Tue 06 Feb 2024 18:37:17 +0000
ROA not before: Tue 06 Feb 2024 18:37:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199109
IP address blocks: 2a0f:b241:12b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b5:ce:37:e9:fb:cb:e8:06:73:3a:a3:27:b0:ce:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:37:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea3cb85f92d1917525fa22c69791681f491cab55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:d7:f0:6c:db:85:a2:82:33:b8:d7:5e:08:
94:37:70:34:13:ca:38:d7:bd:fd:00:3b:ab:49:98:
8b:89:7c:c7:51:ca:00:45:59:92:da:bc:b4:72:a4:
09:fe:1b:5b:12:92:a7:5d:af:b7:aa:20:23:d8:5e:
c4:d7:c2:32:8b:45:51:e8:56:43:de:dc:f6:0e:08:
75:d8:0b:03:08:69:40:91:60:12:f9:57:a1:7f:a3:
eb:20:fb:09:9d:a3:c1:6a:cc:fc:e4:0f:3d:fb:a5:
78:7a:ce:78:a9:91:f1:56:d1:f8:e5:70:6f:33:91:
23:8f:09:29:90:15:bd:2d:61:05:1a:b9:82:ea:e0:
a5:05:72:9a:04:4a:16:f4:e3:ae:ee:af:d9:ec:14:
a7:69:5b:eb:52:9e:65:9c:f8:73:09:1f:45:b4:e0:
71:70:1d:9c:45:f2:87:9c:66:18:cc:d8:d5:d2:e9:
3f:70:8b:87:24:ac:4d:f6:4e:16:1f:8a:ea:f6:ac:
cd:ae:d6:34:ba:ec:1d:07:78:d2:90:c2:70:16:37:
39:c2:c7:17:59:e7:f8:22:ce:ea:ea:75:4c:69:e1:
25:bf:55:be:43:32:78:50:79:a7:4b:64:92:87:d8:
cd:2e:09:b3:4b:9d:41:81:c1:f0:34:03:b1:50:53:
66:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:B8:5F:92:D1:91:75:25:FA:22:C6:97:91:68:1F:49:1C:AB:55
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6jy4X5LRkXUl-iLGl5FoH0kcq1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12b::/48
Signature Algorithm: sha256WithRSAEncryption
48:06:a4:2a:c7:46:95:3c:50:b0:b7:22:e5:59:2f:b4:2a:4f:
ff:82:8a:66:a6:5f:f4:c0:f2:72:33:51:ea:42:01:92:fb:11:
6f:06:ab:80:74:8f:aa:1c:3a:c5:4d:d8:1a:77:53:5b:a6:48:
f6:b6:dc:91:9f:20:25:73:c2:cf:1a:b1:c9:06:10:29:62:45:
53:87:7b:3a:af:df:d7:5f:b3:56:8a:bd:07:df:49:e5:78:16:
ff:93:8a:df:ce:02:84:3f:da:3c:ed:b4:b8:7a:d4:2f:14:76:
19:2c:d1:a4:2c:db:e7:2b:52:02:50:70:2c:19:d5:c9:5b:cf:
5e:a6:67:12:ae:10:a8:6c:4a:db:10:0e:6b:73:8c:59:57:0a:
29:a4:f1:88:b0:80:c1:36:dc:d2:74:b3:b3:1e:f3:3e:d8:b2:
11:7d:00:17:9b:25:e8:d1:46:e6:5f:ab:35:c0:aa:f8:cc:5b:
87:b8:4a:03:3b:65:dc:f2:18:7d:77:62:e0:6e:e3:16:f4:7f:
3a:5c:4a:55:73:0a:4d:fd:bd:77:d3:3c:ce:fb:d7:4d:ab:86:
93:4c:14:cd:b1:67:0a:27:d2:2a:e6:7b:ff:2c:99:17:f0:e6:
c3:b5:57:a0:ef:30:fc:75:a5:9b:4e:61:fc:fe:93:78:26:9a:
0a:0e:e6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org