Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RNpNsRdvdVx_RPpvoK7WcQd85L8.roa
File: RNpNsRdvdVx_RPpvoK7WcQd85L8.roa (raw, json)
Hash identifier: I5li3ZUKxhypXlmXBV6BDM6/49VT44pftQihefOFYqU=
Subject key identifier: 44:DA:4D:B1:17:6F:75:5C:7F:44:FA:6F:A0:AE:D6:71:07:7C:E4:BF
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABC0690104274EB766FE9FF3289863
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RNpNsRdvdVx_RPpvoK7WcQd85L8.roa
Signing time: Tue 06 Feb 2024 18:26:18 +0000
ROA not before: Tue 06 Feb 2024 18:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209806
IP address blocks: 2a0f:b241:f6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:c0:69:01:04:27:4e:b7:66:fe:9f:f3:28:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44da4db1176f755c7f44fa6fa0aed671077ce4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b7:42:59:0c:18:89:80:1a:9f:19:f6:6f:b5:
f9:24:b4:6f:e3:72:40:27:43:b8:02:41:f0:12:24:
69:28:26:6b:c4:c8:1a:87:00:8c:f7:32:48:fb:89:
d8:c3:87:af:45:60:c1:0f:68:3c:8c:a2:04:4a:c3:
57:d5:bb:83:d6:60:bf:ac:44:4d:cd:ac:92:b5:e2:
9a:09:3c:81:2f:2a:c7:fd:18:f8:11:ac:de:87:76:
f8:8b:2f:ea:c3:6e:0d:fd:3f:3c:4d:6f:50:8b:6f:
48:c3:be:b9:6f:08:11:83:1e:0d:0a:17:c8:fb:33:
72:58:d0:2d:1e:fc:22:cc:50:2c:0f:f9:81:9d:77:
aa:62:af:99:bb:b8:58:ce:a8:d7:10:ca:a5:6a:c8:
9c:66:9b:1c:a6:c8:1a:78:86:ff:c2:e3:d2:89:a8:
f9:2c:ef:98:e1:aa:7c:50:4f:d3:a2:86:f1:ba:d0:
28:ba:4a:7a:30:43:83:e3:c2:03:c0:ba:2e:60:7f:
09:79:60:a0:da:a2:cf:b8:a0:26:d3:b6:aa:4d:a5:
9a:ee:1b:eb:9d:75:da:a3:e7:9b:89:2e:a9:bb:ad:
98:bc:e8:17:39:0f:f3:48:f0:b9:23:94:15:ab:59:
a0:d6:f5:39:e5:99:c1:f8:ec:78:f2:f9:04:55:2d:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:4D:B1:17:6F:75:5C:7F:44:FA:6F:A0:AE:D6:71:07:7C:E4:BF
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RNpNsRdvdVx_RPpvoK7WcQd85L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:f6::/48
Signature Algorithm: sha256WithRSAEncryption
87:ad:22:29:02:9d:da:84:f3:f9:30:98:5b:19:ee:94:c4:4a:
da:15:69:32:f6:df:d4:fe:55:3f:15:3d:ac:fa:e0:74:30:19:
1f:29:77:ce:dd:ff:6d:ef:56:90:84:78:19:21:67:7f:10:e7:
d0:85:55:0f:1d:1f:0a:18:d7:bf:44:17:dd:5d:2d:b7:82:6a:
b4:0e:2b:a8:84:4a:3a:21:9c:89:93:b0:4f:a7:c4:59:e7:ee:
96:4e:46:f9:21:ad:a5:25:a5:0d:7a:35:6f:cf:96:91:1a:53:
cb:0c:15:f4:a7:32:a0:34:e6:a7:c9:fb:59:8d:23:57:ce:1f:
b3:78:2b:bc:c8:6d:8b:7c:02:e6:4c:81:4c:98:2f:88:19:d7:
ab:6c:05:45:fa:d3:a5:da:e2:e2:b1:dd:2d:55:e7:23:5d:90:
3b:a9:e4:2d:f9:61:d8:e7:14:a5:1e:f0:55:e4:c1:d5:86:4c:
8c:f9:da:45:e4:82:5c:8a:37:d5:c7:7d:6a:9f:dd:11:b5:ae:
d5:3c:61:28:68:55:f3:5d:a7:26:ed:ff:0c:ec:41:08:e2:0d:
e2:98:b3:54:86:8c:d1:61:2e:b4:f2:87:17:af:4d:7f:12:9b:
07:81:1c:6f:50:43:a1:29:a1:c6:9f:57:fd:a7:35:f0:05:6e:
d6:2f:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org