Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/JIJrrJcW16JBuO-wTitOZaZJpp8.roa
File: JIJrrJcW16JBuO-wTitOZaZJpp8.roa (raw, json)
Hash identifier: cSBlTVtuXfpKsBW/pc1O+TvS7rnKLj9yB4xXnDE98HU=
Subject key identifier: 24:82:6B:AC:97:16:D7:A2:41:B8:EF:B0:4E:2B:4E:65:A6:49:A6:9F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F95C291107BC570EE816CF03C9DCA60
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/JIJrrJcW16JBuO-wTitOZaZJpp8.roa
Signing time: Tue 06 Feb 2024 18:02:17 +0000
ROA not before: Tue 06 Feb 2024 18:02:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212242
IP address blocks: 2a0f:b241:4a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:95:c2:91:10:7b:c5:70:ee:81:6c:f0:3c:9d:ca:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:02:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24826bac9716d7a241b8efb04e2b4e65a649a69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:fd:af:3d:40:fa:30:7d:85:1e:44:cc:fd:
93:5c:56:07:77:3a:07:6b:02:4d:db:58:60:de:e7:
28:53:96:d1:af:ae:14:82:8c:d5:d0:57:ed:2e:2a:
c1:fa:e9:e3:a3:e6:6c:54:4d:c0:7e:a7:5f:52:a4:
d9:a1:96:53:ef:82:ac:55:12:48:48:d6:63:e0:d3:
3a:82:94:d8:6b:cd:b9:1c:34:e2:1b:77:19:69:0a:
16:22:6f:6d:67:70:e9:e2:1d:b2:4d:f5:b5:3b:7a:
ed:12:e4:1c:7e:17:82:36:69:b4:cd:8a:21:24:2b:
87:7a:2c:7a:35:3f:77:f9:d1:b0:d1:44:93:0d:75:
4a:71:fb:2b:9b:f7:da:9e:6d:14:60:25:45:81:29:
75:ee:e6:10:53:51:cc:6f:3e:ee:6d:60:78:64:6e:
53:e3:8c:67:88:26:31:71:b0:6a:d1:d5:fd:e7:39:
72:fa:15:90:72:c6:01:0d:f9:ae:e9:50:13:ad:1e:
0e:09:32:cf:ea:d6:e3:bb:7f:b1:9e:f3:3d:da:97:
34:25:04:f0:6f:a5:3e:61:5a:bc:6a:1c:68:f7:bd:
0a:75:06:d6:5e:00:91:52:df:73:d3:40:ea:8a:5f:
ab:3d:b7:e3:e1:11:33:03:93:48:13:a3:51:4f:13:
b1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:82:6B:AC:97:16:D7:A2:41:B8:EF:B0:4E:2B:4E:65:A6:49:A6:9F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/JIJrrJcW16JBuO-wTitOZaZJpp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:4a::/48
Signature Algorithm: sha256WithRSAEncryption
7c:91:0f:9e:35:2a:7b:11:6c:fa:83:bb:4b:ec:83:16:fc:d7:
ef:36:19:4b:6b:8f:17:33:25:8f:d6:c4:e2:be:81:34:fb:da:
b5:a3:07:ed:c8:48:76:3d:a0:82:3a:fa:6d:a9:0f:9d:d7:a0:
6c:7d:c8:f8:17:f5:ef:e0:6e:98:bf:1c:4d:25:eb:d9:34:d4:
2e:42:33:80:8c:e8:61:91:f3:92:32:40:f1:db:c4:b7:f9:f5:
d1:24:d7:ba:f6:63:8a:3c:1b:2b:c1:34:5c:94:e2:c3:6b:c1:
27:29:ff:c9:de:60:7c:68:8f:e2:30:0f:41:7b:74:2b:2c:49:
ac:35:4f:c5:e7:10:55:c2:ea:83:8c:69:28:e8:c3:1c:d9:13:
bc:a7:47:2c:6e:11:5a:12:a6:ef:c0:af:44:87:d1:85:4b:30:
8c:6a:44:47:7a:25:a8:5c:8a:ae:d7:73:65:5b:ad:22:5a:84:
4d:5b:26:d5:40:5e:31:38:d7:c7:3f:35:c3:e1:42:a4:02:b7:
01:df:10:2d:07:83:bc:d3:6b:0c:a2:11:4c:0b:fc:bb:42:48:
8e:b9:04:75:90:33:41:71:f1:20:46:4a:7c:e6:2e:6b:3d:d7:
06:0e:63:ba:9e:65:28:bc:b8:bd:30:15:ac:fa:39:07:bf:e5:
85:dd:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org