Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6u2C_D1ObvvTRLoqvswmxuVsmdg.roa
File: 6u2C_D1ObvvTRLoqvswmxuVsmdg.roa (raw, json)
Hash identifier: Xe/wehh9FCJCjrUR0J3cu0H1qJzY8qJ0gTD+1T2O2UU=
Subject key identifier: EA:ED:82:FC:3D:4E:6E:FB:D3:44:BA:2A:BE:CC:26:C6:E5:6C:99:D8
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAACC9E001DC51E4AE3BC628A0ACCF7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6u2C_D1ObvvTRLoqvswmxuVsmdg.roa
Signing time: Tue 06 Feb 2024 18:25:16 +0000
ROA not before: Tue 06 Feb 2024 18:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200969
IP address blocks: 2a0f:b241:db::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:cc:9e:00:1d:c5:1e:4a:e3:bc:62:8a:0a:cc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaed82fc3d4e6efbd344ba2abecc26c6e56c99d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:4d:16:94:bd:db:e7:03:c0:ba:d5:7c:d5:
f2:14:f2:97:dd:be:7c:dd:a5:4d:b2:98:d6:8a:36:
73:86:2f:ef:8f:0d:15:ef:51:7e:c5:31:69:38:47:
bb:1d:18:62:98:67:80:e1:f1:7f:9a:34:6f:1c:d3:
dc:16:7e:83:26:af:b9:80:83:65:f9:1a:bd:76:0f:
e4:65:93:05:2d:4b:32:ce:70:53:9c:2d:aa:ab:71:
ed:be:bd:b4:f1:7d:35:b7:55:5d:83:d5:9a:e8:70:
17:d2:ed:5b:eb:57:4b:b1:dc:3a:a8:68:24:37:87:
5b:9f:65:58:f9:5c:19:31:fb:d4:aa:6e:ef:d8:b0:
d1:2e:50:e8:bb:35:7d:1e:db:c1:87:b3:2d:85:ea:
39:2a:22:d9:79:52:15:9e:61:9e:6b:b9:59:17:6d:
f1:24:10:6c:c5:05:c3:10:05:21:5c:7b:ab:97:a1:
4e:d7:d3:a9:f7:aa:04:2f:eb:00:a0:63:30:38:fe:
e0:4a:65:df:8e:ea:21:c7:4c:f7:68:48:98:c0:08:
a1:93:93:7b:ff:e9:6a:a3:3b:f7:51:e4:bc:2b:27:
18:46:0b:16:73:27:80:87:1e:d5:9c:c2:f7:9d:aa:
57:2a:dc:62:f0:9a:3c:91:73:89:52:03:8b:a8:6e:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:ED:82:FC:3D:4E:6E:FB:D3:44:BA:2A:BE:CC:26:C6:E5:6C:99:D8
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6u2C_D1ObvvTRLoqvswmxuVsmdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:db::/48
Signature Algorithm: sha256WithRSAEncryption
89:1b:73:da:6d:41:05:b4:da:f9:2f:f7:39:03:20:39:bc:0e:
1e:96:c6:2c:30:7e:c4:6c:64:90:d0:a2:9e:33:88:b6:bf:36:
58:72:09:b1:0c:36:0a:fb:08:fe:d1:66:b0:b2:02:3b:03:e6:
67:a5:33:ae:1f:40:2c:ae:19:8f:16:18:da:7e:74:dd:08:b5:
eb:dc:02:60:4e:6b:d5:77:09:2c:8d:47:56:86:3f:f8:e9:bc:
00:d1:da:34:d0:14:4c:71:76:c9:ef:83:43:69:18:76:ca:62:
43:79:02:6b:93:c8:94:b5:82:c7:34:7c:38:d0:37:8f:8c:f0:
72:c2:af:01:0c:fc:cd:51:77:fa:c7:ba:cb:51:cd:46:92:91:
a0:1a:e9:17:f2:6b:eb:aa:90:a9:3f:52:d4:7e:9a:e2:aa:d9:
49:66:78:c5:0c:02:78:91:07:aa:b1:3c:a8:bc:60:8f:ca:30:
56:c3:80:52:8d:bf:58:2d:45:61:d1:ce:a6:7e:a0:bc:55:e5:
11:0c:73:cc:f4:9b:3d:e4:d1:b9:3d:7f:de:a4:3a:51:e2:9c:
eb:d7:03:f1:19:cc:9b:fc:48:b1:15:9a:71:12:4f:d6:30:6c:
47:06:f5:d7:ef:50:49:8d:84:13:46:50:4a:8f:15:e7:ac:e5:
b2:8b:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org