Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/K_bet80swVvtfYAwiCb1G5_VBAE.roa
File: K_bet80swVvtfYAwiCb1G5_VBAE.roa (raw, json)
Hash identifier: Sr8UR7GFZkIdQjC5Nxw2Oqg58Wol7kLZ1BnMtvDCkhI=
Subject key identifier: 2B:F6:DE:B7:CD:2C:C1:5B:ED:7D:80:30:88:26:F5:1B:9F:D5:04:01
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F08EDDCE5E9B2CFA7F3CFFE1D2F36C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/K_bet80swVvtfYAwiCb1G5_VBAE.roa
Signing time: Wed 07 Feb 2024 05:00:42 +0000
ROA not before: Wed 07 Feb 2024 05:00:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204291
IP address blocks: 2a0f:b241:37::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:8e:dd:ce:5e:9b:2c:fa:7f:3c:ff:e1:d2:f3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bf6deb7cd2cc15bed7d80308826f51b9fd50401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:88:40:8b:42:9f:a9:24:1e:c3:5f:56:81:f2:
c2:f6:7d:30:c0:0e:99:05:b9:9e:ad:e7:f8:a1:66:
a0:87:c4:92:d8:25:25:92:44:d7:e5:81:bf:d5:9e:
a8:47:f8:9d:23:46:27:91:08:3f:3d:62:a4:76:df:
a8:fb:ad:41:3a:8e:60:50:df:93:73:12:67:b8:9f:
bb:bb:3a:3b:5c:5c:88:5f:59:b5:51:8a:2e:d5:86:
9e:80:02:53:30:ce:d9:07:83:24:b8:5c:9d:0e:90:
11:50:f8:37:a3:e0:c1:4a:a4:67:d5:20:56:6b:4e:
e3:3b:9d:a1:bb:20:e8:b4:38:cb:c7:37:23:71:92:
72:d0:4b:93:c8:d6:da:2c:4d:e9:b2:94:fc:ca:75:
7d:c0:f0:8e:e6:70:e8:93:a6:e4:70:ba:8c:a7:b8:
84:f4:f5:46:5d:9e:f5:9e:44:48:c0:f4:b5:04:de:
d1:90:93:ce:b1:d4:b1:e0:da:42:e2:57:6d:93:d8:
e9:11:a5:38:1e:4d:42:fc:9e:fc:b0:2b:e8:52:c1:
b3:4a:e9:c5:b4:78:b5:9b:24:4c:28:fb:c3:6e:0f:
1f:40:08:8e:de:8e:c6:70:e6:47:88:1c:b6:09:89:
a9:33:45:76:6d:70:d8:ed:a2:c3:60:aa:e6:c0:71:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F6:DE:B7:CD:2C:C1:5B:ED:7D:80:30:88:26:F5:1B:9F:D5:04:01
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/K_bet80swVvtfYAwiCb1G5_VBAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:37::/48
Signature Algorithm: sha256WithRSAEncryption
4b:db:0a:d7:55:91:d3:16:3b:00:b2:05:11:86:87:f2:41:14:
18:00:69:43:5d:53:11:10:cc:5a:d0:21:9b:b1:5a:fa:53:92:
64:a2:25:2b:16:3d:0f:4b:09:8a:88:5a:c4:63:21:0a:5d:d6:
ec:fb:63:31:c4:6d:05:74:f0:ad:39:23:9d:6c:43:02:51:a8:
fd:17:29:92:03:d2:2e:78:e7:e4:c6:5f:59:fa:20:1e:f6:f8:
60:94:37:b7:5b:fc:8c:2b:b5:7b:65:71:28:62:6a:ac:87:fe:
e2:9c:99:d5:5b:f9:8b:34:e7:c5:d3:d1:40:ee:84:0f:b4:0e:
f9:b0:d3:b4:df:f8:ed:06:57:9e:0e:7a:31:a3:51:ed:70:3d:
fd:33:44:d0:2d:2c:fd:85:c1:db:0f:29:0e:04:52:8d:3b:19:
e7:51:96:40:01:b0:2a:9b:20:d8:67:71:6d:52:a2:41:99:d5:
be:ab:85:56:6b:81:8c:16:08:a8:73:70:5a:7d:f7:0c:bd:f8:
d3:af:72:b0:9e:34:23:01:0d:7f:68:21:61:44:23:35:41:82:
d1:48:90:cb:b3:1c:8b:07:69:f9:ff:16:03:6c:39:ab:51:44:
ab:8d:1a:4a:88:86:9c:be:00:74:96:0d:a0:b7:52:b1:ac:25:
c3:8c:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org