Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/B1wexXEf3B8QR30Joama-GDL-7U.roa
File: B1wexXEf3B8QR30Joama-GDL-7U.roa (raw, json)
Hash identifier: SIvoAz+Bbx+GInO8szhNL/3PusXNo3bOO/Vycxwn2Mc=
Subject key identifier: 07:5C:1E:C5:71:1F:DC:1F:10:47:7D:09:A1:A9:9A:F8:60:CB:FB:B5
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB5CCB70A9A2D31E5FE7F3D74CCE920
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/B1wexXEf3B8QR30Joama-GDL-7U.roa
Signing time: Tue 06 Feb 2024 18:37:17 +0000
ROA not before: Tue 06 Feb 2024 18:37:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198276
IP address blocks: 2a0f:b241:12b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b5:cc:b7:0a:9a:2d:31:e5:fe:7f:3d:74:cc:e9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:37:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=075c1ec5711fdc1f10477d09a1a99af860cbfbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:a0:ca:d6:66:e8:3f:a2:dc:dc:ba:cb:12:
75:31:e1:bc:eb:af:4c:d5:d6:6b:75:a6:88:da:e6:
24:7b:f2:cb:fa:6a:d3:b5:12:90:78:82:3a:8e:7e:
73:d2:e7:ff:20:bc:f8:c8:ca:8a:6a:9e:8a:38:cd:
0a:d7:c4:7b:77:1a:43:d7:80:81:8e:a8:2b:23:ba:
8a:15:a0:3c:99:55:c7:aa:c3:c9:17:30:7a:02:d0:
2e:3e:e2:51:02:6a:e5:0e:72:e1:c4:41:ec:0d:54:
e0:19:ae:22:89:af:e0:32:a7:4c:80:8f:ff:9d:b3:
95:d5:04:da:ca:ce:4e:b0:da:5d:63:af:cf:b3:25:
ec:10:c0:9d:3a:b3:b5:0d:3e:ff:89:00:8a:2a:0a:
d4:3f:ac:2a:86:7a:2b:45:45:46:e0:75:18:75:f3:
51:0f:43:5f:e0:92:01:2a:3f:c5:13:fb:66:81:63:
de:08:cc:7c:43:97:f6:49:e2:b1:69:5b:18:df:c9:
be:02:c6:04:33:18:1f:5f:df:10:c4:91:24:76:69:
06:26:b0:a8:d0:68:35:f6:8c:71:a8:65:d6:d4:92:
04:06:75:e8:f2:97:84:2d:5a:ee:f7:b6:b4:3b:9c:
58:11:38:d3:b9:1b:d4:0d:de:81:54:41:40:74:d7:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5C:1E:C5:71:1F:DC:1F:10:47:7D:09:A1:A9:9A:F8:60:CB:FB:B5
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/B1wexXEf3B8QR30Joama-GDL-7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12b::/48
Signature Algorithm: sha256WithRSAEncryption
6b:21:57:84:fa:31:05:d7:3f:bf:d0:70:1d:9b:a3:bf:ad:2e:
de:f6:e0:74:97:b8:d8:a2:1a:78:3f:92:18:89:8a:92:08:f6:
86:8b:e4:12:ec:4f:95:41:7c:66:49:e0:8a:6b:9a:4b:9e:ac:
b0:bc:73:b1:d8:a6:ac:3a:a3:18:76:fe:ed:e8:02:13:96:3a:
67:0b:b1:fc:4f:44:eb:d7:2a:28:d2:d3:85:59:c8:2f:45:6d:
d3:c4:e1:d9:43:d1:35:76:11:be:90:18:53:09:25:3a:7b:53:
32:de:c4:78:d0:22:69:a5:15:56:61:a0:59:d2:61:b7:9e:43:
92:31:5b:04:a3:8a:70:e8:28:e1:5e:7a:a6:3f:8a:0f:6b:ae:
0f:6c:c9:6e:8b:1b:c7:b2:47:64:bf:86:d3:76:27:5e:91:a6:
7a:84:e8:2c:e4:d0:0d:fd:e0:f2:02:a0:10:be:45:be:d4:59:
48:ae:a4:d1:d9:0e:68:73:68:ac:2a:c5:bc:6c:4d:ed:6a:bf:
d9:df:d8:4c:b8:bc:18:98:19:35:02:8b:b3:f4:8f:16:7a:c7:
3d:e8:40:12:d9:ca:ed:fb:ac:ee:c6:7f:9f:9c:5b:d2:bc:55:
ac:c2:32:6d:21:cb:c3:7b:38:8e:14:c3:fe:5b:9f:4c:a6:6b:
86:3f:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org