Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Pue0o2M4U3-xg7bmuh6m6LthcQg.roa
File: Pue0o2M4U3-xg7bmuh6m6LthcQg.roa (raw, json)
Hash identifier: oUKTq/RvI2W6mqeY8J9i/Py1YuFS7M7gsrDnFb5Q5ZY=
Subject key identifier: 3E:E7:B4:A3:63:38:53:7F:B1:83:B6:E6:BA:1E:A6:E8:BB:61:71:08
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAD934C62B1795B890BE995086A81D8
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Pue0o2M4U3-xg7bmuh6m6LthcQg.roa
Signing time: Tue 06 Feb 2024 18:28:18 +0000
ROA not before: Tue 06 Feb 2024 18:28:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216242
IP address blocks: 2a0f:b241:10d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ad:93:4c:62:b1:79:5b:89:0b:e9:95:08:6a:81:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:28:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ee7b4a36338537fb183b6e6ba1ea6e8bb617108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:c8:0e:6b:43:f0:71:69:8f:d0:63:02:0e:
bf:77:db:ba:3a:b4:e4:b6:3d:dd:95:94:e1:98:af:
0f:12:f9:52:13:90:16:4a:c4:79:91:38:7e:fe:1b:
5e:6d:f3:61:88:78:1c:34:75:60:a4:38:1f:25:3f:
63:8c:7a:ad:06:81:9a:ba:d3:b8:cc:78:96:ff:f4:
af:0d:64:a9:27:58:82:9e:bd:7f:6c:65:4c:52:80:
51:db:a4:59:13:19:96:cf:ed:a0:55:46:b2:b8:93:
a8:e2:2e:4b:c5:ba:4a:ea:8d:1b:c1:af:9c:96:1e:
4b:37:73:34:e6:29:80:37:3d:3d:db:be:d2:92:0b:
0a:30:71:80:e2:e7:84:e1:ea:63:1f:48:58:19:e7:
88:19:34:c0:fa:06:92:64:ce:19:5b:6c:0e:a4:0d:
f8:00:26:e4:39:3d:09:be:ec:9d:4f:7a:8b:d2:8b:
81:ef:a1:0b:99:b5:a7:cc:0e:c1:a3:19:19:5b:63:
a1:32:b4:7f:a3:33:81:c0:4e:79:2a:83:8b:a7:af:
82:b3:b7:60:75:d2:d8:61:63:b2:46:84:46:a6:76:
af:a3:d3:ac:fc:ea:32:bc:f4:84:f7:57:66:a2:2c:
37:a9:19:49:24:d4:65:15:fb:24:7e:d9:7a:8d:ef:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:B4:A3:63:38:53:7F:B1:83:B6:E6:BA:1E:A6:E8:BB:61:71:08
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Pue0o2M4U3-xg7bmuh6m6LthcQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:10d::/48
Signature Algorithm: sha256WithRSAEncryption
3c:99:a8:29:7b:e1:ab:74:ec:31:f9:b9:e3:d5:5f:b5:21:44:
95:41:6e:a9:0e:6e:b6:5c:b8:44:85:4e:df:8d:33:42:f5:80:
a8:c7:f4:96:4b:9e:62:c6:7b:69:c2:97:77:87:c8:80:8f:05:
44:5f:a5:e8:a2:53:8e:ea:ad:f1:d5:8d:1b:2a:13:7d:8e:05:
2f:42:4c:a5:e2:d5:ea:3a:84:20:79:12:1b:fd:b9:84:9b:3d:
4b:cb:df:da:f6:46:9a:f3:71:1e:04:89:c6:f0:81:5a:68:4b:
cd:3f:d9:23:3b:1e:0d:c0:22:e8:7f:ae:3b:ff:7f:af:6b:24:
e4:38:d2:7c:7d:19:d1:e0:5a:42:a0:d8:b4:2a:76:a0:f8:f5:
18:b3:db:98:90:72:66:8c:8d:54:3b:c0:d6:4f:a9:97:87:77:
a6:5b:89:e9:dc:64:ca:b2:32:a1:de:ec:81:c4:3b:57:53:62:
f7:82:3c:83:17:f4:e1:08:e3:7a:1b:0e:8f:24:25:4b:69:d3:
cb:eb:14:ad:20:d0:07:80:ce:96:17:24:82:9c:67:6d:8e:6b:
1c:70:21:8b:e6:0b:95:0b:c4:3a:e2:90:8d:7b:0e:04:fb:6e:
96:30:78:06:9f:49:d3:96:e1:3c:3a:59:35:16:68:43:54:ae:
92:3b:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org