Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/C62C8BmRbXH62qq2IoL_Pvjb5pk.roa
File: C62C8BmRbXH62qq2IoL_Pvjb5pk.roa (raw, json)
Hash identifier: CrFtqeHgcMZhQn3Njhm6aZ/aItv00UvHUyFhQtb+r80=
Subject key identifier: 0B:AD:82:F0:19:91:6D:71:FA:DA:AA:B6:22:82:FF:3E:F8:DB:E6:99
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB79F503D33C821E83463D6A15B126F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/C62C8BmRbXH62qq2IoL_Pvjb5pk.roa
Signing time: Tue 06 Feb 2024 18:39:16 +0000
ROA not before: Tue 06 Feb 2024 18:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209833
IP address blocks: 2a0f:b241:13f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:9f:50:3d:33:c8:21:e8:34:63:d6:a1:5b:12:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bad82f019916d71fadaaab62282ff3ef8dbe699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:a3:dc:db:11:b8:a0:f1:04:4e:9c:e8:cd:
fd:ee:8c:da:4a:7d:cf:49:ce:b1:f2:c2:14:4e:cf:
77:83:5b:ec:04:77:89:43:27:fc:bd:4c:4d:6d:9e:
e8:5c:d7:55:24:79:40:f6:3e:3a:53:13:26:8f:39:
eb:52:eb:4e:49:29:dd:44:d9:87:de:ba:39:f6:76:
e0:f3:b0:a6:a3:db:94:52:3a:0f:33:ed:e6:61:78:
af:e3:e9:28:00:93:db:09:2b:d5:6a:6b:4d:bd:8d:
ca:e4:17:2e:8c:c1:bb:dc:72:16:c4:3d:e1:b4:12:
93:c3:5e:eb:59:f3:8e:55:3b:71:e9:e8:85:6f:7a:
d9:c4:c8:80:87:70:71:96:fd:0b:25:77:0a:f1:42:
90:30:90:f5:63:5e:98:4d:2e:9c:6b:22:f7:fb:c3:
06:11:2a:89:fd:22:cf:a3:32:10:7c:a8:e6:b3:fc:
29:ba:9d:58:70:9d:f7:32:d6:68:5b:7e:83:18:a4:
4a:b5:a7:d0:4e:94:f4:35:b8:05:57:99:e3:90:81:
b8:66:cf:9a:f5:06:5b:dd:20:6f:84:ed:d6:4c:c1:
2c:e6:b2:52:9a:5a:ea:1b:92:16:e9:36:83:fd:12:
75:7f:ca:09:81:d1:8a:68:d7:16:58:57:1b:f2:ff:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:82:F0:19:91:6D:71:FA:DA:AA:B6:22:82:FF:3E:F8:DB:E6:99
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/C62C8BmRbXH62qq2IoL_Pvjb5pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:13f::/48
Signature Algorithm: sha256WithRSAEncryption
43:16:65:79:62:ba:56:af:4b:c9:d9:08:ec:a7:64:6c:a5:65:
0d:d3:8f:5c:69:41:c7:b8:b7:46:fe:88:19:67:10:17:41:a4:
39:ba:f5:fc:63:da:2d:49:5c:5e:15:6b:8c:70:7c:59:5a:d5:
e9:d0:f7:d7:f1:39:3b:c9:1a:6f:3b:81:86:3e:2b:88:c2:3c:
e2:98:49:7f:57:51:cc:8d:2b:b8:5b:db:0d:f6:ea:48:a0:a6:
93:38:6d:fc:df:c5:5c:86:26:69:b6:a0:40:66:5d:6e:c5:3f:
2d:a4:bd:ed:7a:f4:84:59:93:bf:ce:40:94:9c:ce:83:1d:aa:
14:6a:d8:f3:84:d9:0c:13:05:cf:3c:4d:cd:4d:19:7f:25:80:
5a:36:dc:b4:69:28:4b:77:54:b0:e9:bc:8c:7f:15:44:b8:18:
b3:b0:6e:da:d8:c3:51:de:95:0c:41:08:84:2e:a1:ef:53:10:
ff:1e:e3:c4:d9:60:4a:a0:2a:ee:43:26:55:e6:b0:ea:30:b6:
b6:20:79:3e:b9:24:9e:2b:4f:97:89:81:24:fc:2e:66:b3:6e:
78:57:d0:4b:23:90:b3:74:55:32:0b:b2:d5:1c:76:44:89:53:
e4:4f:63:b1:fe:cf:42:17:36:42:e4:0b:d6:90:3a:0d:be:9e:
33:86:32:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org