Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/G9EsaAjCe3Bv9TmiyfRUxk4bNkk.roa
File: G9EsaAjCe3Bv9TmiyfRUxk4bNkk.roa (raw, json)
Hash identifier: WIW2jl5BY5JRSLnRQOjVS1FljGt3EpMv31Um1n9aXcc=
Subject key identifier: 1B:D1:2C:68:08:C2:7B:70:6F:F5:39:A2:C9:F4:54:C6:4E:1B:36:49
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAE78E343AC815EEF535488BDDF5427
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/G9EsaAjCe3Bv9TmiyfRUxk4bNkk.roa
Signing time: Tue 06 Feb 2024 18:29:17 +0000
ROA not before: Tue 06 Feb 2024 18:29:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50104
IP address blocks: 2a0f:b241:11a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ae:78:e3:43:ac:81:5e:ef:53:54:88:bd:df:54:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:29:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bd12c6808c27b706ff539a2c9f454c64e1b3649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e5:7e:f5:ed:1a:c5:c1:9c:17:f4:e9:37:73:
f6:dc:ad:3f:c0:6a:5f:f0:1e:65:56:ea:ac:9f:21:
e8:91:cd:d8:36:56:1b:73:a5:85:76:2b:ae:65:fc:
57:46:b3:f3:27:4f:00:ec:d6:f5:11:82:b7:54:2b:
2d:e0:36:7a:bb:b7:5e:e9:40:de:fc:b4:93:f4:2a:
8e:b0:bf:b1:6b:e4:bf:f1:dc:9c:a0:6f:cb:50:3c:
46:61:f5:72:cd:17:71:26:cd:82:4c:4c:71:6f:85:
a0:91:be:3d:9d:45:ed:f8:bf:bd:67:ec:ec:d1:01:
cc:c4:23:c2:db:d0:fc:b9:a3:d0:2a:84:4a:e6:fb:
00:fb:e7:af:2f:a7:77:8b:c6:e9:0e:ef:9d:fe:d2:
10:80:97:d4:7c:67:19:c4:61:f4:b4:1a:4f:f4:9b:
67:3c:3e:6f:36:bc:1e:88:ce:3c:3e:38:e7:a4:24:
b6:1a:20:f9:b3:12:a9:b1:ee:8e:e9:62:05:d1:37:
29:ce:20:96:cc:52:5a:69:eb:a4:c1:9c:75:2c:80:
61:73:65:9a:a7:bd:2f:22:b3:44:c9:d1:af:90:58:
a6:77:d8:cd:02:7c:df:c9:36:2c:e4:1c:29:d4:6e:
35:69:09:8e:87:08:ac:83:8f:72:66:9a:d6:45:b5:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D1:2C:68:08:C2:7B:70:6F:F5:39:A2:C9:F4:54:C6:4E:1B:36:49
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/G9EsaAjCe3Bv9TmiyfRUxk4bNkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:11a::/48
Signature Algorithm: sha256WithRSAEncryption
54:56:50:f1:cf:0a:fc:6b:28:eb:0c:b0:e9:a4:c9:30:19:3b:
31:3d:2d:ed:8d:2a:68:b7:33:ed:b4:da:7c:16:db:1c:26:9c:
8b:be:70:bf:65:2b:15:4a:c5:8e:7f:26:c4:95:28:50:cd:dd:
a6:24:3b:db:40:6d:96:73:64:ac:19:c6:07:a0:45:b7:35:01:
d1:69:8c:85:b5:7b:07:0f:5b:59:dc:85:97:8b:2a:b6:ad:5d:
05:54:7f:b7:c3:20:45:ca:8d:2e:b5:a2:3d:3a:24:1a:97:91:
b1:4d:c1:20:3d:84:89:3a:d8:d2:c4:bb:f4:33:70:53:84:1a:
93:bf:d5:93:3b:92:6f:e2:ae:cd:5d:2b:6b:f9:9b:bc:4b:c2:
e7:c2:a8:b7:0a:75:94:4d:56:09:9f:3a:ea:c7:47:3b:db:4a:
e6:f2:a8:5c:28:74:3c:ed:61:11:02:49:75:4f:67:0e:9b:3b:
1a:36:67:5b:9c:18:5a:12:bd:eb:3e:4d:f5:c5:d8:3c:03:73:
de:fc:fd:19:e0:cf:96:b4:fd:ab:5b:c7:38:46:01:bd:77:c5:
aa:d1:8b:29:cb:86:e9:ec:a8:31:d0:bf:b9:0d:b9:3c:61:91:
08:6c:5b:9b:8e:01:cb:16:47:44:a8:23:ae:e2:eb:0b:52:72:
bd:2e:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org