Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RuN6QOvKI5N9N49pS27UQAvAN8g.roa
File: RuN6QOvKI5N9N49pS27UQAvAN8g.roa (raw, json)
Hash identifier: k04sGibZaqv0EUVF9s/CmPguQAcLNmp5MEuKNzMVpfM=
Subject key identifier: 46:E3:7A:40:EB:CA:23:93:7D:37:8F:69:4B:6E:D4:40:0B:C0:37:C8
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F074C0D1D7D1E51D7BB04C3D9BFF32
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RuN6QOvKI5N9N49pS27UQAvAN8g.roa
Signing time: Wed 07 Feb 2024 05:00:35 +0000
ROA not before: Wed 07 Feb 2024 05:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198989
IP address blocks: 2a0f:b241:18::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:74:c0:d1:d7:d1:e5:1d:7b:b0:4c:3d:9b:ff:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46e37a40ebca23937d378f694b6ed4400bc037c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:4a:25:82:82:f7:7e:47:67:bb:c0:50:32:
56:6b:84:f4:b2:f5:42:56:8d:7d:66:91:dc:9e:c0:
93:b8:bd:34:5e:95:67:fb:e5:88:f9:84:b4:61:6e:
32:d1:17:07:31:21:ec:9c:96:cf:91:47:53:d4:2b:
99:7a:81:a8:b3:0e:08:b0:d2:dc:e7:15:52:ea:0c:
ec:2c:db:6a:5e:b5:ad:72:60:eb:28:af:46:5b:a9:
7d:06:5c:c6:5c:fb:01:a5:4d:b6:0b:11:87:59:a0:
38:9a:23:ad:43:ed:a2:86:cb:85:d9:8f:7b:a9:5f:
48:72:cf:6f:90:83:a3:a6:4d:b3:a0:5c:89:f2:04:
28:fb:a2:0f:51:b3:01:e2:b8:38:9d:15:28:60:35:
93:2b:63:fc:4b:db:4b:e4:e8:83:8c:f9:f8:d6:3e:
49:37:8a:d8:06:b0:38:c3:b1:44:07:5e:38:9d:97:
c7:f2:ae:93:96:64:e3:96:0a:57:22:61:67:88:5b:
b2:eb:b7:32:1e:3d:4f:e2:8d:c8:cf:81:98:73:c1:
9a:dc:20:8d:26:2d:23:cb:52:ec:04:c2:5e:5c:ad:
06:0f:08:3a:bb:8d:07:01:42:8c:ab:d4:82:7e:58:
14:d8:38:df:f7:31:a5:5b:b1:13:87:a8:89:a8:7d:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:7A:40:EB:CA:23:93:7D:37:8F:69:4B:6E:D4:40:0B:C0:37:C8
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RuN6QOvKI5N9N49pS27UQAvAN8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:18::/48
Signature Algorithm: sha256WithRSAEncryption
8c:4a:98:66:c9:c3:43:de:bf:6c:7d:6d:a1:a7:21:a9:65:dd:
ee:0f:c6:83:15:5e:70:c0:bc:1b:70:de:de:44:df:05:93:d8:
ea:29:86:c7:3e:5b:8b:be:1a:be:59:ef:7f:28:05:cd:45:75:
4c:c2:73:39:2c:71:b7:7f:21:a6:44:98:f9:c1:1e:82:5b:23:
5b:ba:65:68:c0:61:1b:91:86:07:fe:4c:77:cd:24:7b:d5:6c:
f4:59:fe:79:2b:37:50:65:e2:d9:97:54:77:65:d2:ea:63:14:
71:9b:21:61:d8:44:5b:0d:e7:e0:c0:c8:4b:cb:00:f8:1d:fa:
49:3e:8f:3d:90:90:48:cb:af:31:3b:b0:c6:6a:34:db:60:9c:
53:ba:7b:3f:81:f1:91:a2:b6:25:67:9f:99:ff:65:5e:0a:fa:
3f:0d:23:dd:90:f6:be:61:4f:d9:4d:44:94:40:34:f7:11:51:
f1:b9:f3:8c:cc:27:37:71:dd:0e:76:9f:48:96:0f:75:b1:07:
c9:52:bb:63:f1:9d:94:5b:d9:10:79:ad:45:76:d5:96:55:a0:
41:35:d2:17:65:b2:fe:4c:4d:8a:d3:20:8c:d8:94:52:fa:6e:
de:42:58:a3:cc:77:fa:81:15:1a:f2:63:1b:d1:fa:a2:f7:a4:
bf:65:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org