Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LdjqC56_Sc-mFQ1Y-QG8xlFhsb8.roa
File: LdjqC56_Sc-mFQ1Y-QG8xlFhsb8.roa (raw, json)
Hash identifier: IWCRR3oMXxjw5Ag799kcBe6yJyiMVHD87kMvnx3RtIw=
Subject key identifier: 2D:D8:EA:0B:9E:BF:49:CF:A6:15:0D:58:F9:01:BC:C6:51:61:B1:BF
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E1F9C59E54BAD24E848552C396CF
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LdjqC56_Sc-mFQ1Y-QG8xlFhsb8.roa
Signing time: Tue 06 Feb 2024 18:24:16 +0000
ROA not before: Tue 06 Feb 2024 18:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200730
IP address blocks: 2a0f:b241:cc::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e1:f9:c5:9e:54:ba:d2:4e:84:85:52:c3:96:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dd8ea0b9ebf49cfa6150d58f901bcc65161b1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:12:38:05:64:25:7d:b0:3a:5e:39:30:85:
88:22:96:ee:cd:0d:7c:ee:22:9a:7e:e9:33:f6:ce:
1d:79:72:3b:d8:b7:c4:7c:24:5c:97:2b:2f:49:1c:
f5:8d:ab:1e:01:0c:b7:79:73:25:b1:67:da:62:1e:
e5:58:bf:db:ac:61:80:ac:ac:46:4d:fe:15:c8:d8:
92:98:d0:ec:2e:4f:b3:4f:76:a9:d2:ea:ab:17:1c:
ad:a1:94:18:48:9b:81:82:a6:4c:4a:7d:5d:59:cd:
0f:dc:00:52:b6:6a:79:1b:58:c4:ba:5f:a2:8c:d8:
1f:b2:67:13:63:19:93:6d:71:98:34:08:5e:68:07:
f1:4b:b3:d2:a1:5c:94:c1:5a:3b:de:b8:df:9e:84:
d1:df:d8:c0:9b:15:91:19:b2:44:93:9f:57:56:91:
dd:59:ac:91:1f:86:48:a0:99:0c:c3:37:97:c8:8f:
75:5a:98:23:b3:7f:e9:5d:aa:51:88:4f:35:54:07:
2b:7f:34:67:fe:59:70:95:49:d5:f3:2c:21:1e:aa:
34:3f:e5:30:d7:4f:71:a2:bb:36:d5:ff:ac:24:a4:
71:79:a6:5b:ff:b9:96:63:fb:97:cc:f6:d8:04:07:
f4:d6:18:f0:be:61:b6:0e:49:f1:0a:15:bc:e7:35:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D8:EA:0B:9E:BF:49:CF:A6:15:0D:58:F9:01:BC:C6:51:61:B1:BF
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/LdjqC56_Sc-mFQ1Y-QG8xlFhsb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:cc::/48
Signature Algorithm: sha256WithRSAEncryption
28:95:a0:dc:fe:e1:57:56:9b:f7:ff:f6:d8:e8:05:6f:b5:2d:
c7:73:59:b8:c2:1f:a2:53:0d:d7:20:22:80:c8:85:e0:3b:04:
df:63:16:eb:0c:de:c3:37:71:ee:46:9b:b7:a2:6e:04:cb:3c:
5c:a5:1e:2d:de:ef:50:c3:58:b9:8b:ae:82:2f:75:6a:5a:60:
92:de:1f:08:22:93:8d:32:1f:ef:af:4c:95:ec:41:6e:84:f5:
5e:0e:96:25:3d:1f:79:9b:d7:b0:20:4d:c8:40:9a:6b:59:cc:
21:5e:6f:08:87:c0:b8:0f:42:35:82:f8:c5:1a:57:f2:a8:f1:
5b:9a:50:99:72:5d:f6:1d:fa:eb:05:53:84:42:2f:3b:66:5a:
bc:35:87:69:a6:44:6e:a4:18:d5:72:9f:f7:21:52:d9:ae:65:
34:62:4b:06:2c:92:c4:a5:a1:f6:21:a0:6e:e2:75:60:da:6e:
4a:95:fa:e5:42:de:a3:56:1d:4f:47:cc:31:5a:e1:36:a0:de:
5d:51:29:72:ef:77:38:9c:2a:86:04:44:a5:94:84:43:1c:73:
e5:df:87:49:a9:35:81:2c:b5:43:37:0b:41:fb:a9:23:6e:94:
08:8d:2c:58:c2:36:2a:d9:8a:38:f9:a7:c3:5e:5e:11:1d:49:
19:40:db:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org