Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/P9h4u-AN2-wKcmA6CPr2bI6KvOc.roa
File: P9h4u-AN2-wKcmA6CPr2bI6KvOc.roa (raw, json)
Hash identifier: hwRVtirTnuQW9wzPUMHb0O5q/Fdm5lzvVDcvsLoeV+Q=
Subject key identifier: 3F:D8:78:BB:E0:0D:DB:EC:0A:72:60:3A:08:FA:F6:6C:8E:8A:BC:E7
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8D7CC56945FC39BC4E5D8BE8A16830
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/P9h4u-AN2-wKcmA6CPr2bI6KvOc.roa
Signing time: Tue 06 Feb 2024 17:53:15 +0000
ROA not before: Tue 06 Feb 2024 17:53:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203040
IP address blocks: 2a0f:b241:1c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8d:7c:c5:69:45:fc:39:bc:4e:5d:8b:e8:a1:68:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:53:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fd878bbe00ddbec0a72603a08faf66c8e8abce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:56:57:45:09:ae:66:18:8d:0b:20:f7:46:
0d:a7:34:3a:73:67:52:21:e6:4c:01:35:ed:5b:46:
8b:65:4e:8c:fe:77:f9:4c:d8:0d:90:54:1c:c5:cd:
aa:4c:2b:62:53:06:d1:b6:3d:e4:e4:81:6f:d4:77:
6a:f3:77:4d:69:57:7c:61:79:38:3a:80:56:72:1d:
46:e1:26:f5:73:93:d1:89:55:33:aa:ed:a9:9c:11:
4f:28:cb:d8:66:0f:c0:eb:1a:9a:9f:58:bc:d3:c0:
0e:72:4f:ba:08:7c:c0:e5:ca:9b:09:3d:a4:db:1e:
92:fb:28:1d:de:41:b9:c5:07:32:4f:d9:72:b0:84:
3a:92:81:2d:09:52:d7:70:63:c0:81:a2:87:2a:2d:
e1:86:6e:e8:1a:67:b4:1a:a2:01:7d:50:87:a6:06:
72:88:ff:4b:1a:3c:42:6d:65:0b:2b:d1:ac:6a:2e:
ab:8f:c5:46:70:10:28:2e:a1:0a:6f:76:58:01:ba:
7f:4c:b9:76:7c:2d:c0:61:e7:86:a9:25:b2:57:0a:
11:fa:db:85:02:b0:60:e3:e2:24:da:26:9c:f2:37:
1f:22:08:39:bf:92:e5:8d:0c:2b:49:34:59:3d:fd:
49:84:c5:6f:23:6a:d5:80:f2:b5:84:9b:12:30:19:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:78:BB:E0:0D:DB:EC:0A:72:60:3A:08:FA:F6:6C:8E:8A:BC:E7
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/P9h4u-AN2-wKcmA6CPr2bI6KvOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:1c::/48
Signature Algorithm: sha256WithRSAEncryption
89:8e:9d:5f:4f:6d:12:eb:fe:9e:8d:f4:79:8a:d2:4a:59:68:
50:b9:f5:e6:ea:f3:42:36:f5:b6:1a:62:1f:a6:6d:57:3d:9f:
05:d8:a3:41:15:ab:26:ae:35:85:0d:93:7c:3c:dc:1a:df:a9:
a1:96:46:5f:1b:38:4b:0d:34:78:f1:67:02:d9:ec:d5:ff:b5:
4c:72:18:1a:cc:60:e0:77:96:28:ea:0c:13:ef:64:24:e0:39:
86:71:78:0f:db:d6:14:15:8d:e1:92:87:b6:90:04:72:9b:5a:
fb:50:96:f6:95:40:af:83:a9:ec:ac:12:1c:8b:28:da:4b:b6:
fe:12:7d:e9:7b:e0:e1:5d:07:d1:bf:ed:b3:e3:66:f0:b2:84:
ed:f0:09:1d:d9:8a:35:d4:c1:4c:39:b0:a6:a8:c4:94:33:27:
64:0f:58:d3:c4:30:7e:21:e6:75:41:9c:a6:fe:3d:22:7d:73:
b9:10:ed:74:b6:4d:d2:b8:8b:ba:29:ce:df:b6:7e:db:e0:84:
25:87:dd:f8:94:cd:a8:5d:37:22:6f:5c:74:a1:ed:34:3d:dc:
b1:48:05:7e:da:92:82:1f:27:95:f5:25:d6:87:db:3e:02:82:
1c:7e:e3:f7:b0:2a:5d:b1:61:e8:9d:0f:49:db:bf:26:2a:54:
4e:3e:24:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org