Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CLim37rWqb_NDATHGTYLbwp4gLE.roa
File: CLim37rWqb_NDATHGTYLbwp4gLE.roa (raw, json)
Hash identifier: BycMx+6mkmqhxHGTMXJTqVz8Guorsluw63eoyikwZt8=
Subject key identifier: 08:B8:A6:DF:BA:D6:A9:BF:CD:0C:04:C7:19:36:0B:6F:0A:78:80:B1
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAE7EC1CE71CAD0537372BF4778B07C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CLim37rWqb_NDATHGTYLbwp4gLE.roa
Signing time: Tue 06 Feb 2024 18:29:18 +0000
ROA not before: Tue 06 Feb 2024 18:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60391
IP address blocks: 2a0f:b241:124::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ae:7e:c1:ce:71:ca:d0:53:73:72:bf:47:78:b0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08b8a6dfbad6a9bfcd0c04c719360b6f0a7880b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:37:5d:23:cf:c2:5b:24:4e:bb:a2:5d:05:e5:
4a:c8:78:55:1e:3e:da:15:22:1b:81:6a:1d:c2:d6:
db:49:e1:bb:4b:ac:c2:a5:9c:2d:6a:b3:49:dc:67:
b0:03:25:e8:a4:60:8c:04:37:09:16:1d:57:16:d8:
be:49:79:d1:ad:83:74:a3:e6:ad:95:3c:f9:27:50:
40:53:d9:29:f3:cc:05:fd:e3:87:f7:9c:95:59:d7:
2b:75:09:25:2b:29:da:74:ff:08:d6:1f:e2:d3:0a:
ba:81:c9:2b:2d:01:2b:ac:25:3f:14:e5:25:97:8c:
d1:23:0a:e2:5e:3c:58:96:79:86:53:c8:ee:d0:d3:
d9:85:9c:22:74:47:64:71:de:0c:5b:67:69:b2:9e:
f3:ff:60:5e:5f:c5:62:e8:aa:54:8a:37:c2:e2:7b:
f9:5f:e4:93:42:d0:ed:04:fb:0f:d5:6f:4c:87:02:
af:70:83:78:b1:0d:b3:12:71:7b:de:a1:d4:63:96:
8d:24:2b:30:b9:53:cb:d6:50:cb:48:cd:0f:9c:1c:
09:d3:2e:82:a3:32:87:9f:f2:2b:b2:a0:a5:36:ee:
36:58:72:d8:fe:73:38:3a:29:53:63:81:e1:0e:59:
5b:c0:f8:83:f2:7c:49:8c:87:f4:bf:94:02:92:9a:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:A6:DF:BA:D6:A9:BF:CD:0C:04:C7:19:36:0B:6F:0A:78:80:B1
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CLim37rWqb_NDATHGTYLbwp4gLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:124::/48
Signature Algorithm: sha256WithRSAEncryption
50:f8:8e:03:c4:5c:b7:e7:97:37:c1:b1:e4:d9:9e:c2:3b:3f:
b0:0e:34:8e:f4:3f:1f:02:ac:72:50:0c:48:c5:b0:7a:a3:59:
56:ba:a5:32:a1:59:c4:f3:0c:dc:3b:1d:24:a9:ae:d8:3f:4f:
0c:45:ee:c6:ad:1c:6b:db:33:3d:da:24:16:cd:f8:40:e7:27:
11:15:ab:0e:c0:09:11:e2:1c:1b:02:b5:7a:ca:89:ac:9e:35:
4b:11:8d:ee:74:1e:0b:70:8a:ab:29:c3:53:42:4a:b3:62:0f:
c0:3d:c8:86:d8:ca:6c:32:ab:8f:15:fb:61:3c:1c:ef:42:12:
3e:63:c2:ff:1f:41:4f:f1:d1:3a:c8:58:73:0b:3e:3e:f9:1a:
55:59:6f:3c:86:ec:49:02:a5:a0:d2:04:34:0a:db:55:0b:0f:
06:49:c1:e4:53:73:6f:72:58:68:f2:a5:80:41:de:9c:fb:2b:
b0:8e:7c:e0:d9:63:2d:70:28:82:63:89:af:90:da:59:71:0b:
c0:02:7f:7b:6c:06:51:d4:a6:11:e7:9c:ab:42:f7:65:6d:e3:
70:20:04:24:7d:03:57:9f:55:62:11:9b:c3:a7:d5:ce:ba:1c:
81:fd:cc:a5:c9:23:bd:b5:d1:94:ce:10:45:78:a6:ba:f3:73:
eb:71:00:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org