Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EOn2gl-bIxOE9VH83YCQ56A6OWE.roa
File: EOn2gl-bIxOE9VH83YCQ56A6OWE.roa (raw, json)
Hash identifier: RnqbwdBFbKFXrr8N7Ugjz9SMy/HdHbjSV9LXjJ8oWk4=
Subject key identifier: 10:E9:F6:82:5F:9B:23:13:84:F5:51:FC:DD:80:90:E7:A0:3A:39:61
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0764ED31B6A2FBAE736E5B2D75BE6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EOn2gl-bIxOE9VH83YCQ56A6OWE.roa
Signing time: Wed 07 Feb 2024 05:00:36 +0000
ROA not before: Wed 07 Feb 2024 05:00:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199343
IP address blocks: 2a0f:b241:81::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:76:4e:d3:1b:6a:2f:ba:e7:36:e5:b2:d7:5b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10e9f6825f9b231384f551fcdd8090e7a03a3961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:aa:78:22:09:93:62:15:7d:db:29:d1:e2:
55:57:8f:a4:6a:ab:30:f9:72:51:bb:dc:9d:52:ef:
d9:89:25:51:4b:0b:48:26:2a:d6:3e:fa:a6:ae:34:
2b:69:8f:da:9d:88:44:62:ca:5d:19:ee:e0:61:d8:
ca:86:13:16:1c:53:19:e8:f2:af:41:3f:ed:86:a2:
38:0f:af:a2:fb:83:ab:18:34:3c:ce:3d:1b:77:1b:
9f:5e:0e:1f:67:fd:d0:1c:21:41:e0:80:fe:5d:b9:
b4:a8:50:3c:f0:6d:27:ee:43:67:a8:08:fb:0c:cb:
4c:73:9c:06:45:d5:6d:cd:07:cf:92:3d:57:0d:b6:
02:c3:3c:1c:69:a3:d4:ed:3a:96:75:4f:69:d0:fd:
c3:db:b9:9a:44:41:aa:8c:da:dd:71:fe:05:b5:17:
48:6f:0d:2c:21:fd:8d:51:a8:de:44:25:1e:dc:6d:
6c:ba:ce:e2:2c:c5:a6:75:4b:21:35:1a:e4:b3:cc:
46:8b:88:ae:d6:ee:72:dc:f3:98:ab:e2:a2:1a:31:
fe:07:61:46:f9:1f:66:d6:e0:86:09:5c:3f:dc:23:
17:b8:91:0b:cb:7e:1d:4e:5d:3d:20:86:97:33:cd:
d6:3e:49:4e:fb:6f:6b:26:5b:08:67:c1:0a:ce:57:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E9:F6:82:5F:9B:23:13:84:F5:51:FC:DD:80:90:E7:A0:3A:39:61
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EOn2gl-bIxOE9VH83YCQ56A6OWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:81::/48
Signature Algorithm: sha256WithRSAEncryption
85:de:ee:88:12:01:15:14:fe:4b:35:1b:af:a0:25:3a:92:b1:
5c:86:38:97:64:5c:44:1a:c7:b8:0f:5e:c9:4a:9f:d2:30:62:
ee:b3:a1:72:24:12:58:40:96:ce:f6:41:d8:9f:45:96:2d:9c:
7a:8e:d4:77:68:f9:e6:41:62:10:eb:a0:33:aa:d4:69:4f:e6:
35:34:b6:d5:a5:6a:f1:0f:bc:22:56:69:52:f7:f3:a7:f5:8a:
d6:25:82:29:f3:57:de:e3:90:01:ad:49:95:3f:97:1b:d4:40:
5a:da:f2:f6:ce:b5:85:ce:30:47:a7:b6:73:26:78:3c:e4:dc:
cb:b0:34:e7:2a:90:de:b0:00:cd:64:ca:8a:5a:0e:f0:2a:cf:
c8:5b:ef:1e:44:ef:de:3a:5e:2f:b5:c0:0a:f9:ac:75:77:29:
d9:2b:d7:79:65:9a:d8:4b:1a:53:87:f7:e8:1e:6a:b7:d5:d5:
2f:c2:4b:3e:82:bd:36:06:ca:9a:6a:1c:5f:4e:60:2e:a4:a9:
19:07:78:32:97:db:32:21:0e:ef:de:c6:ed:a6:59:2a:b0:8a:
4d:e9:33:f1:cf:f0:ab:2b:13:0a:5e:4a:e0:1c:1e:08:0a:0a:
ac:98:ce:e9:0f:f9:2f:1b:63:89:74:c5:f8:9e:1a:73:f9:67:
a4:20:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org