Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/R81rFZliL1p_6ilLPwIbYOWCyN0.roa
File: R81rFZliL1p_6ilLPwIbYOWCyN0.roa (raw, json)
Hash identifier: bVEsnZt5Ba9s1lCIRbWrM2QExv8sV0ylGHYqtV0xfSo=
Subject key identifier: 47:CD:6B:15:99:62:2F:5A:7F:EA:29:4B:3F:02:1B:60:E5:82:C8:DD
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0B7FB07550050234EFB8277FFAB52
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/R81rFZliL1p_6ilLPwIbYOWCyN0.roa
Signing time: Wed 07 Feb 2024 05:00:53 +0000
ROA not before: Wed 07 Feb 2024 05:00:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215898
IP address blocks: 2a0f:b241:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:b7:fb:07:55:00:50:23:4e:fb:82:77:ff:ab:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47cd6b1599622f5a7fea294b3f021b60e582c8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:41:60:8a:e5:ec:74:93:e7:32:37:ae:aa:
07:8d:2d:4c:0a:ef:c8:7d:12:b6:41:05:b7:a6:7e:
b7:c3:81:f6:30:3a:91:e6:eb:da:84:cb:83:1e:d2:
94:ac:69:f1:25:c3:ee:f1:86:92:d0:94:0e:34:2b:
60:be:46:39:aa:7f:e0:7c:90:a9:ce:c8:1a:ee:bd:
e5:3b:ad:8a:95:77:4c:0a:83:d9:08:fb:50:fa:30:
25:d5:e3:8f:be:86:07:b5:24:b1:41:58:46:98:17:
18:77:03:3f:12:a5:a2:51:da:ac:b4:f1:5a:c7:16:
fb:bd:d6:29:3e:02:f3:25:93:55:6c:12:7d:95:cc:
9e:3a:db:0e:bc:04:7a:f1:15:62:dd:b3:6c:e1:a2:
d6:05:62:47:57:14:39:ea:09:c2:dd:6e:7c:23:65:
d5:c8:94:b4:e8:0e:d8:56:81:6c:e3:78:1f:33:51:
4a:67:9e:2d:5a:ad:33:f1:c3:bc:b1:0a:44:0d:1c:
71:ed:a7:31:b5:e7:f3:de:46:b4:8e:b7:5f:e5:43:
78:2c:ad:28:87:ed:29:25:b3:71:3c:72:f5:f3:9b:
a9:4d:00:53:e6:0e:93:e6:cd:ae:a6:00:fd:bf:75:
35:ca:77:97:9c:94:2b:6e:36:72:7e:d2:33:0d:60:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CD:6B:15:99:62:2F:5A:7F:EA:29:4B:3F:02:1B:60:E5:82:C8:DD
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/R81rFZliL1p_6ilLPwIbYOWCyN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:26::/48
Signature Algorithm: sha256WithRSAEncryption
18:d1:46:f9:1e:80:a3:eb:33:f8:60:a6:44:e5:ae:ce:17:93:
75:82:75:11:99:3a:90:f2:4e:9c:1d:cd:f6:cc:2a:64:06:2d:
ae:52:6a:7a:63:74:9d:e3:44:3b:ac:5e:b8:9e:f2:cd:b8:ab:
89:9d:3c:8e:9e:d7:14:de:22:7c:4f:e4:6b:8d:6a:45:d2:1a:
b7:2a:01:70:cc:ec:1e:72:48:60:5b:62:80:51:0b:f6:4a:1d:
9a:ec:c3:40:a2:cc:20:72:6d:90:d9:cb:09:44:1d:71:1f:3c:
27:ca:0c:1b:96:64:4f:ec:2c:1f:b2:81:6a:55:ef:7a:0d:6d:
6f:a8:f6:59:44:79:c1:89:b8:67:8f:66:87:52:dc:61:b6:8a:
e5:fd:b5:79:fb:1c:4f:3b:4f:8e:56:a9:e0:df:ce:d0:f7:ec:
ea:56:f4:c3:f7:d3:c0:7f:e5:f9:bc:64:8b:9d:e9:fc:c7:30:
45:36:1a:fe:02:17:5e:b7:33:c4:5c:4c:2d:98:7a:51:31:28:
f5:0d:fc:c5:84:d9:64:30:6b:12:8a:c7:ff:2c:4e:38:3a:6f:
9d:6a:4b:89:dc:e3:48:7e:12:d9:5d:76:20:a9:db:17:de:86:
2b:59:fa:96:20:17:68:ab:d4:c2:f5:06:e0:de:aa:d0:5e:e1:
8b:71:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org