Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/IJyiCl3IW3GdMpFVSAHjA32iWjw.roa
File: IJyiCl3IW3GdMpFVSAHjA32iWjw.roa (raw, json)
Hash identifier: V/0fQ89hiYM+GbUCRGI7rv8Lz4KJ6BjEPUSj4zbAq4s=
Subject key identifier: 20:9C:A2:0A:5D:C8:5B:71:9D:32:91:55:48:01:E3:03:7D:A2:5A:3C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0C37C43B196B29504E45F4489391C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/IJyiCl3IW3GdMpFVSAHjA32iWjw.roa
Signing time: Wed 07 Feb 2024 05:00:56 +0000
ROA not before: Wed 07 Feb 2024 05:00:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216427
IP address blocks: 2a0f:b241:160::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:c3:7c:43:b1:96:b2:95:04:e4:5f:44:89:39:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=209ca20a5dc85b719d3291554801e3037da25a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:0a:a8:a3:a2:ab:0a:23:cb:85:16:74:fe:
bb:25:09:57:1d:8e:89:85:33:bb:eb:c2:cb:ae:b3:
57:07:a4:12:30:91:90:78:27:1c:bf:ec:ae:f7:c3:
1b:e1:82:f5:84:f0:91:9c:6a:8c:63:fa:a0:c6:6d:
7c:85:13:e8:e5:2e:c7:22:37:4d:3e:e4:01:10:59:
cd:3f:dd:4c:e0:bf:03:17:9c:98:5a:e3:d3:f8:49:
00:3a:f2:78:a9:cb:da:47:5c:90:ec:ad:26:62:8f:
78:40:fb:4d:13:8f:2a:1b:a6:76:9c:92:b2:1b:b8:
b8:e1:44:46:00:df:48:a7:cc:63:b8:68:94:94:2f:
1d:78:56:d1:43:14:47:58:6d:c5:1d:ae:e6:f4:39:
cb:44:77:c8:dd:53:b3:25:ef:75:70:9a:0c:ed:5a:
f4:24:bf:a0:55:9a:0f:f6:7a:dd:d8:d6:68:26:55:
5b:22:39:03:41:f6:30:da:35:09:11:5a:50:fd:a1:
7c:e4:5f:0a:23:7d:5b:ff:e5:25:14:10:f3:68:6f:
c4:e9:f5:df:2c:1c:4b:47:84:3d:11:2c:8f:de:a4:
e5:61:98:99:27:13:e7:1c:84:5e:73:97:70:0f:6b:
49:58:d1:23:5d:b1:d6:43:6e:28:48:79:93:6f:a7:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:A2:0A:5D:C8:5B:71:9D:32:91:55:48:01:E3:03:7D:A2:5A:3C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/IJyiCl3IW3GdMpFVSAHjA32iWjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:160::/48
Signature Algorithm: sha256WithRSAEncryption
47:f8:0d:58:3a:34:8a:4a:6b:55:d5:1d:f7:8e:f6:8d:9f:a1:
21:a2:70:9b:6b:7f:31:ec:38:22:06:65:aa:b4:5f:49:9b:59:
20:52:9b:48:33:c0:a8:14:82:64:37:1c:c2:0c:58:71:5d:51:
9c:38:3f:7e:78:bb:7d:7f:4e:54:c7:33:b5:ad:16:29:fe:2a:
53:37:e8:ec:f2:a0:27:26:cd:ac:f1:3a:fb:7c:2e:52:24:3b:
3d:3d:00:4e:77:82:c3:dd:66:51:ac:0c:5d:4b:90:c3:bb:c9:
02:37:ea:bb:ff:02:0e:e1:05:e2:8c:14:45:51:03:95:cb:55:
18:6a:17:2a:0f:c9:31:d1:ae:61:20:e2:61:e0:e4:9b:f2:7b:
d6:5e:8a:89:63:5e:ac:21:44:98:fa:16:4b:a9:71:9c:79:2e:
e5:fc:23:c6:fe:1d:95:07:de:30:1b:1f:74:5b:b1:97:48:53:
8e:62:1a:29:4c:59:1b:45:83:09:0b:77:a8:72:ef:29:0c:ab:
fb:43:cf:8e:92:6d:70:91:8c:49:88:54:b7:79:6a:c9:13:d7:
ad:66:17:01:65:e1:7c:52:d9:b3:27:8c:49:b4:6a:5e:f8:0d:
ce:26:6f:5f:9d:01:75:fe:37:ee:f4:ee:a6:0f:5a:fc:ec:a0:
d2:1d:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org