Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ERnt5xgumUTg7DmfnUJvJrNLIJ0.roa
File: ERnt5xgumUTg7DmfnUJvJrNLIJ0.roa (raw, json)
Hash identifier: DQQFTU+GqETvdRVI+fzeBANCgrHEXlXVE5jNgrQ+oR8=
Subject key identifier: 11:19:ED:E7:18:2E:99:44:E0:EC:39:9F:9D:42:6F:26:B3:4B:20:9D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA6382596983D2D2E1E2BCE215FD7C3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ERnt5xgumUTg7DmfnUJvJrNLIJ0.roa
Signing time: Tue 06 Feb 2024 18:20:16 +0000
ROA not before: Tue 06 Feb 2024 18:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197919
IP address blocks: 2a0f:b241:76::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a6:38:25:96:98:3d:2d:2e:1e:2b:ce:21:5f:d7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1119ede7182e9944e0ec399f9d426f26b34b209d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:1e:cc:99:ad:fe:d4:89:ee:8e:37:e6:4f:
24:27:3f:18:0e:5f:51:d4:03:6e:28:63:fc:d8:85:
09:be:09:aa:f8:d1:b4:e0:1f:2d:cf:fb:c6:b5:48:
3a:88:28:34:25:a5:4f:7e:26:82:fa:63:46:8c:56:
e9:23:34:0b:ab:4a:e2:7b:c0:66:c1:06:e3:f5:49:
8a:ec:f0:8f:04:e9:22:cd:b3:3e:f3:4c:a6:59:67:
12:8b:5f:4d:f6:98:35:13:76:d8:4d:ca:8d:f8:30:
68:68:f0:3f:18:db:f9:c1:a3:cb:6a:dc:a4:1b:01:
04:86:79:33:a7:7e:03:3c:27:93:11:1c:96:5c:6e:
7c:32:b1:dc:e6:94:30:3e:0f:60:88:2a:74:8e:6c:
97:85:0e:72:d4:d9:61:cd:7f:bd:06:ea:62:c1:36:
b5:23:7a:f3:ee:31:27:a3:7b:5d:81:1e:66:e2:73:
7e:b2:7f:92:0e:ce:9f:01:0b:0b:14:e3:85:1d:e1:
5b:41:51:48:d9:0b:b7:ff:b4:90:7b:24:ca:91:15:
1c:42:0d:35:98:99:84:c7:23:1b:87:9a:e4:fa:a2:
19:53:5f:68:82:38:73:09:a7:38:c9:05:d8:c1:a9:
96:ea:e9:40:e6:02:96:7b:52:2e:70:f6:96:62:d6:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:19:ED:E7:18:2E:99:44:E0:EC:39:9F:9D:42:6F:26:B3:4B:20:9D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ERnt5xgumUTg7DmfnUJvJrNLIJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:76::/48
Signature Algorithm: sha256WithRSAEncryption
04:37:63:cd:91:96:29:9f:e5:4b:52:2d:a0:4d:b2:b2:bf:6c:
b7:ca:28:ae:fa:7d:fe:1b:c5:ba:fc:c3:0a:b0:7d:7f:d2:54:
bf:cd:38:3d:92:de:e8:4c:ee:59:47:92:93:74:9f:1e:4a:2e:
03:a9:2b:8e:04:09:a4:92:77:c6:90:46:7a:e7:a9:26:a1:c7:
ab:0b:e7:ea:ec:a1:4a:50:26:42:53:b2:d7:4d:fd:12:62:98:
9b:60:6a:e1:3b:81:26:48:75:84:2e:f3:1c:fb:01:17:f4:51:
48:d8:5a:f2:df:6a:34:cf:0a:1a:96:5c:27:b2:87:a0:a2:dd:
62:d8:1b:ea:35:09:8a:28:37:09:11:53:55:5a:3a:70:0d:6e:
f6:09:00:ae:b1:fd:79:3b:8d:62:32:9a:96:04:0b:ca:3c:fd:
63:b6:16:48:11:85:2c:23:d7:0f:15:d0:aa:a9:48:90:63:1e:
c6:c4:f2:ea:61:be:25:5f:6a:32:63:d5:5d:30:65:72:a7:b1:
e5:0e:f0:6e:7f:ec:2b:71:e7:77:a9:d9:a8:20:9b:12:38:86:
bc:10:dd:33:19:67:a1:4e:c9:f7:1b:08:a6:4b:1c:ab:c9:24:
d0:d4:75:dc:20:d4:6d:14:69:c3:f3:55:46:9a:0d:57:2f:82:
94:0a:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org