Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EXjjGT79WMv-0glHXY21QdyOrvs.roa
File: EXjjGT79WMv-0glHXY21QdyOrvs.roa (raw, json)
Hash identifier: U2eDVtAssQCLXvEZvvrhLtPVziMKfudo5/M2WWDW0bA=
Subject key identifier: 11:78:E3:19:3E:FD:58:CB:FE:D2:09:47:5D:8D:B5:41:DC:8E:AE:FB
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA80C0764AFF79F232D8EB5DB44FD1D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EXjjGT79WMv-0glHXY21QdyOrvs.roa
Signing time: Tue 06 Feb 2024 18:22:15 +0000
ROA not before: Tue 06 Feb 2024 18:22:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199651
IP address blocks: 2a0f:b241:89::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:0c:07:64:af:f7:9f:23:2d:8e:b5:db:44:fd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1178e3193efd58cbfed209475d8db541dc8eaefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:78:34:2a:78:12:90:56:0f:3e:08:3e:52:96:
5d:f8:70:d7:43:8f:b8:42:8a:2c:d9:84:43:e2:a3:
ff:51:9b:b3:22:aa:1e:7b:cc:5b:13:d8:c0:35:3a:
d1:6c:36:d4:78:ce:e5:a1:58:99:96:a7:d1:dd:a5:
39:68:f2:70:c0:28:c7:64:db:ef:c8:d1:81:35:97:
e3:c7:d6:74:9a:06:46:0b:e8:3d:d7:d6:81:09:73:
91:4a:12:1f:cd:45:64:59:99:e7:3a:b1:87:99:b1:
44:1b:e8:18:97:a5:45:5d:5a:5c:2e:6e:d0:d7:14:
d4:fc:4d:6a:cb:90:61:2c:25:80:9e:6f:51:8d:20:
f3:5e:74:0a:da:d9:5c:03:eb:3e:23:9c:fd:43:f7:
88:02:bb:7a:a1:ab:f3:39:e0:af:a4:b9:eb:38:6f:
af:fa:2a:cc:b0:e2:53:2b:94:28:4e:f9:57:ee:c4:
46:3d:37:ef:71:aa:eb:15:9e:82:d7:bd:65:e1:90:
72:aa:fd:b4:ba:57:12:bc:85:d5:1b:c5:cf:18:25:
c5:94:88:a1:ff:15:ca:69:2e:c2:94:37:15:ab:c6:
db:59:c0:06:08:d4:b8:fe:c1:1a:a0:cd:02:76:ed:
fa:a5:3d:71:8d:fe:31:03:cc:45:b0:07:c4:8f:5b:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:78:E3:19:3E:FD:58:CB:FE:D2:09:47:5D:8D:B5:41:DC:8E:AE:FB
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EXjjGT79WMv-0glHXY21QdyOrvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:89::/48
Signature Algorithm: sha256WithRSAEncryption
1b:e2:d0:be:21:25:3c:21:94:a1:82:37:35:82:f3:43:0f:3d:
32:52:18:0d:03:3b:55:ac:b5:0c:da:97:61:3b:10:f6:d0:8e:
53:40:ff:ec:7a:52:f3:35:aa:07:6b:05:83:e2:cf:70:4b:6b:
f2:17:7c:6a:38:17:4e:2a:93:3c:6b:ba:01:c3:d4:56:6e:25:
bc:24:37:4c:5c:71:96:5d:08:b6:4c:e1:35:51:66:6b:77:d6:
be:4f:bf:c4:4e:5a:ca:38:77:34:16:c4:ba:0e:05:4f:79:2e:
27:46:6e:5e:e9:b0:c3:5f:4e:63:d5:16:14:42:8e:00:75:d8:
23:91:70:6c:17:fb:9d:17:0b:5a:e5:ea:90:11:f9:05:0b:ad:
f8:af:aa:01:1f:ba:bb:5a:ee:f5:93:9b:67:46:df:b6:da:4c:
1a:b0:ad:be:ab:9f:04:9b:63:6b:49:e7:af:68:96:8b:1f:d4:
06:13:cd:f5:ce:8a:aa:76:8b:e1:bb:11:98:db:c8:ac:6d:87:
6d:d1:c5:eb:c2:ef:7e:19:49:38:91:bc:70:8c:5c:f4:6d:8f:
05:fb:d4:5c:6a:72:1e:7a:3e:88:85:f3:7d:79:b5:8c:4d:b1:
f0:ae:14:c3:38:2e:0b:86:4e:21:27:b7:61:31:4d:ea:a9:1c:
4e:20:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org