Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LaE4ksECkLiloJVjPF3r9Qb6RCc.roa
File: LaE4ksECkLiloJVjPF3r9Qb6RCc.roa (raw, json)
Hash identifier: to256MOAPwFkTjQAQXXdvkEYnbRRtqz8UjZnuqRRbwY=
Subject key identifier: 2D:A1:38:92:C1:02:90:B8:A5:A0:95:63:3C:5D:EB:F5:06:FA:44:27
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F078EB011832C26410CD1EDD5AC0EC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LaE4ksECkLiloJVjPF3r9Qb6RCc.roa
Signing time: Wed 07 Feb 2024 05:00:36 +0000
ROA not before: Wed 07 Feb 2024 05:00:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199605
IP address blocks: 2a0f:b241:87::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:78:eb:01:18:32:c2:64:10:cd:1e:dd:5a:c0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2da13892c10290b8a5a095633c5debf506fa4427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:b4:42:61:f3:e3:1a:50:d7:ee:47:ad:52:
5e:a3:15:ca:49:55:5d:06:be:02:06:47:a2:d9:8d:
2b:38:dd:ac:13:9a:2a:f2:1e:ef:b0:19:20:59:fd:
56:56:54:b1:e3:4a:1a:b8:a3:e1:08:60:a7:ee:ef:
97:41:20:17:fc:84:81:e9:f9:c7:c7:a1:1b:19:0b:
27:e7:63:45:0b:44:8f:03:ea:8a:d7:5f:c8:6c:a9:
db:f9:2f:7e:cb:9a:6d:de:80:2c:6e:da:33:86:a3:
61:df:90:51:16:51:fc:20:5c:3e:d2:52:6f:69:c6:
99:1f:e4:10:2b:d2:2f:5b:99:12:67:78:db:3d:60:
c7:b9:e7:9f:a6:0c:05:c2:6c:70:8e:fa:f8:c7:00:
f6:a9:b3:25:e1:ad:b5:3f:3b:63:bc:85:03:ec:75:
6f:85:70:58:8f:1c:25:e5:e0:1c:6d:32:3f:a6:a5:
51:86:6c:9e:4f:22:a4:4b:3e:19:59:56:e9:e8:2b:
0b:31:ca:8f:b4:02:e2:f6:3b:1d:6d:4e:4b:48:91:
9c:13:10:93:5c:6a:05:2e:62:91:f4:9e:26:67:17:
a5:cd:e7:4e:a9:86:24:70:79:b8:43:0a:02:6b:6a:
09:d4:a7:73:5c:16:76:48:fc:b5:6e:5a:b6:8d:f8:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A1:38:92:C1:02:90:B8:A5:A0:95:63:3C:5D:EB:F5:06:FA:44:27
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LaE4ksECkLiloJVjPF3r9Qb6RCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:87::/48
Signature Algorithm: sha256WithRSAEncryption
2a:cd:0c:de:15:ad:89:7d:3c:49:1b:09:20:77:41:fc:c6:a2:
63:19:81:f6:26:a1:20:19:de:b6:35:59:ab:22:d9:68:a0:f7:
f1:6e:00:8d:42:9f:d6:76:1f:dd:15:a9:f4:52:90:a8:99:df:
1f:b4:97:15:b7:d7:19:99:d5:e0:25:19:c2:6c:e6:c1:d7:5d:
91:a7:1e:d0:58:97:71:5e:83:98:9d:22:70:86:5c:47:cb:0e:
b8:28:a3:e3:11:a5:f0:51:67:4c:cf:58:9f:7c:a4:4e:5e:3a:
ae:d6:1d:29:8c:1e:32:f8:d4:d4:1c:3c:22:a9:53:85:56:3f:
b1:c7:97:25:e8:c7:73:90:03:a3:27:60:fd:f2:25:35:87:18:
e5:42:1b:0e:87:d3:47:17:b4:5b:c5:f6:b8:a8:f4:b9:ac:92:
2b:28:13:a6:8d:63:19:c8:20:20:e4:18:87:00:e6:f4:93:b4:
11:d2:c3:f3:a5:99:b2:a8:2f:02:1a:56:80:ae:18:0b:bf:14:
5e:44:95:62:45:01:bd:96:8f:bf:59:4e:ca:27:72:27:94:5f:
3d:17:be:e7:3b:5a:cb:f2:23:cf:a5:5c:dc:85:cf:42:37:98:
b8:ff:f3:7d:22:0c:8f:93:31:11:61:9e:7c:e8:d3:dd:83:5c:
77:29:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org