Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Myck0N5VbIRp3ZY-jN9Xprpu_30.roa
File: Myck0N5VbIRp3ZY-jN9Xprpu_30.roa (raw, json)
Hash identifier: OfRbeBMNRkh6BDThdLsE/0Wx0GNlxgBN0pKLxoVr6cA=
Subject key identifier: 33:27:24:D0:DE:55:6C:84:69:DD:96:3E:8C:DF:57:A6:BA:6E:FF:7D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E0636717285C1309E470A51C8AFB
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Myck0N5VbIRp3ZY-jN9Xprpu_30.roa
Signing time: Tue 06 Feb 2024 18:24:15 +0000
ROA not before: Tue 06 Feb 2024 18:24:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200671
IP address blocks: 2a0f:b241:c6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e0:63:67:17:28:5c:13:09:e4:70:a5:1c:8a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=332724d0de556c8469dd963e8cdf57a6ba6eff7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:5e:82:eb:93:77:7f:66:25:84:fa:d9:cc:
0d:99:a7:31:43:96:05:9e:14:cc:7a:b6:6f:cb:bc:
8d:a4:c6:a8:61:88:8c:f6:7b:42:a6:5b:5c:06:8d:
ef:fd:90:06:91:af:c4:32:71:64:df:29:ab:75:57:
33:00:0b:7c:97:c2:a0:93:7a:3b:5b:1d:d7:6c:2d:
a4:df:7b:2e:13:10:ac:de:3c:d6:23:50:4d:6c:3c:
05:12:67:77:9d:66:68:7f:35:b8:5c:ce:5d:d9:02:
f4:c3:e8:20:9c:c1:af:a6:14:90:9f:b1:7b:84:e4:
70:ef:28:c4:c6:ba:0d:63:27:e9:55:22:9f:a3:78:
25:5d:bd:99:ee:37:98:3a:43:87:1e:5b:d8:7b:34:
09:53:8d:f6:89:1c:32:35:47:ac:98:4a:67:01:11:
d7:1e:b8:71:95:9e:4d:bf:84:84:e8:1e:d4:88:28:
b5:af:be:b4:87:41:75:39:16:e4:4b:4e:c7:dc:a7:
ee:3c:06:c9:8f:24:27:ac:9f:f3:c3:35:f5:29:f4:
f1:94:12:59:b9:30:05:f2:91:8f:50:a3:a2:e0:ce:
af:f3:6a:9a:90:3c:15:3c:16:f6:fe:ec:26:dd:da:
44:77:9e:b5:91:78:db:ba:af:8d:1d:46:48:03:0e:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:27:24:D0:DE:55:6C:84:69:DD:96:3E:8C:DF:57:A6:BA:6E:FF:7D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Myck0N5VbIRp3ZY-jN9Xprpu_30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:c6::/48
Signature Algorithm: sha256WithRSAEncryption
03:68:a6:cb:73:9b:03:ed:f3:c6:ca:d9:7f:c3:70:9c:b1:d3:
f4:55:e9:bb:14:ab:64:7c:72:6e:ea:6f:5d:a3:b7:e5:5b:f0:
c5:e9:11:67:bc:09:21:f6:fe:41:a4:a7:bd:74:03:54:75:0a:
8c:5e:11:4e:68:47:4a:33:d6:42:20:f1:16:a9:98:d6:a7:48:
b6:31:1b:de:a6:12:e5:e4:7a:84:17:7f:1f:fc:cc:b4:ac:38:
bd:8d:6a:75:fd:7d:0c:f0:fc:5b:cc:cf:92:7e:b8:c3:5d:ab:
0b:20:79:86:75:84:34:60:b9:72:32:a3:f3:46:8d:0e:f0:a1:
92:50:18:05:df:d6:35:65:01:2a:9b:ac:38:1b:14:fb:33:8c:
51:e7:74:97:e1:18:d5:90:21:f1:f2:ec:a2:d0:dd:45:05:94:
3a:36:47:51:23:5c:98:09:b1:f6:83:b4:cf:d3:76:55:e7:2c:
0e:7b:55:e6:66:cf:d0:24:54:46:c2:a2:7c:05:48:83:97:47:
1d:9e:fe:a7:a7:9c:fa:0c:bd:5c:01:d6:d4:17:d8:c0:80:5e:
6b:e3:98:03:8c:45:4a:0b:33:6c:4e:85:0b:d5:86:6a:75:87:
89:82:ba:bf:fc:7a:ed:4d:7a:1f:ca:25:7c:f2:6b:c3:38:75:
8d:25:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org