Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EcV2Os9h6I3udbtLVd-Pdsc4mkQ.roa
File: EcV2Os9h6I3udbtLVd-Pdsc4mkQ.roa (raw, json)
Hash identifier: 7aqhRYvoOrWu2AtzSKm6c5jvTo/l+C1BlaF00fBaPHY=
Subject key identifier: 11:C5:76:3A:CF:61:E8:8D:EE:75:BB:4B:55:DF:8F:76:C7:38:9A:44
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAAD5EAEFDE01F096DE7FF3DA108521
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EcV2Os9h6I3udbtLVd-Pdsc4mkQ.roa
Signing time: Tue 06 Feb 2024 18:25:18 +0000
ROA not before: Tue 06 Feb 2024 18:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203635
IP address blocks: 2a0f:b241:e6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:d5:ea:ef:de:01:f0:96:de:7f:f3:da:10:85:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c5763acf61e88dee75bb4b55df8f76c7389a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:63:4f:50:63:17:9e:b3:0c:5e:82:20:d0:
b4:e6:8c:d8:f8:ca:6b:27:21:8f:8f:70:4c:60:dd:
db:71:36:54:14:36:f3:d4:8a:f5:d0:bc:45:50:ad:
ab:4b:c4:ae:dc:ea:1b:68:a6:6b:44:af:b5:8d:a8:
3a:8a:13:72:b6:00:66:34:cc:b2:33:44:e5:58:fc:
cb:93:33:44:dc:f5:75:4d:cf:ff:bb:44:9d:f8:b0:
99:c1:5e:b2:4c:45:b1:48:0b:8a:4b:c0:68:be:3a:
fa:18:01:93:32:5a:4c:06:6a:01:dc:0f:0a:9c:e3:
4a:5a:fd:59:f1:52:f3:0a:ae:32:b5:9c:43:34:4f:
eb:05:b5:04:bf:34:32:c8:7d:a5:ea:58:c3:00:ae:
66:47:c1:c8:48:92:63:ea:31:83:e7:df:6e:5e:60:
84:dd:99:93:e8:7c:29:72:bc:4c:07:f7:8e:21:45:
63:1e:e3:a8:b7:95:84:74:a3:49:4c:90:16:8e:bb:
a4:7e:a2:b5:9f:6e:6a:9e:e6:5d:43:5e:d3:32:80:
23:ce:a9:3e:00:24:79:37:88:05:97:c5:ee:c7:e1:
8a:66:32:e3:77:6d:03:1f:2d:36:63:f9:66:25:93:
f7:4e:b5:bf:a1:ee:64:56:7c:48:e0:1f:67:43:e9:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:76:3A:CF:61:E8:8D:EE:75:BB:4B:55:DF:8F:76:C7:38:9A:44
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EcV2Os9h6I3udbtLVd-Pdsc4mkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e6::/48
Signature Algorithm: sha256WithRSAEncryption
45:be:30:d1:52:05:58:78:2e:84:a0:b1:ec:58:85:08:90:a0:
48:89:c9:a9:ba:5b:76:c3:db:20:a6:9f:23:3b:d7:5f:1e:bf:
8c:ba:55:32:3d:42:fd:7f:61:3a:78:1e:6a:d0:aa:51:1b:80:
90:96:91:6e:5c:f1:31:4b:73:86:0f:2e:5f:99:88:70:66:92:
f6:0e:e5:e7:51:69:86:4e:cb:2b:88:eb:5e:93:7b:61:18:a9:
9b:08:d0:72:18:71:69:93:25:2f:c7:8b:c7:ae:2a:80:2e:d4:
0f:43:37:0c:d0:04:76:2d:43:ec:4c:0f:c2:39:e8:ac:bc:a1:
01:4b:71:cc:05:55:68:7e:eb:06:70:8c:5a:c1:12:fe:66:47:
ec:00:f1:09:52:74:6a:5a:d5:3e:66:e1:e0:b0:c3:ab:2d:0d:
b1:10:6b:cb:78:06:53:12:5d:0a:d7:d6:b3:3d:52:1f:6a:e5:
5b:a8:67:80:b5:ae:f2:84:d7:8b:60:52:01:70:2e:81:30:92:
e1:29:75:4c:f8:2b:2c:50:8b:5b:1e:50:59:01:7d:e6:b6:6a:
2e:a0:c3:a4:84:d3:92:eb:b8:83:60:43:f5:37:4e:8a:bf:d9:
91:21:fd:17:e6:c9:a8:29:e0:0a:d3:98:00:bb:fa:04:75:4b:
cb:cb:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org