Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SCoRiQIRUjw-_IZWlwG-Wyi3Nzs.roa
File: SCoRiQIRUjw-_IZWlwG-Wyi3Nzs.roa (raw, json)
Hash identifier: rMDYLanv0OkJH8HeALq/a4YSFB1l63JLJZezgY97SGw=
Subject key identifier: 48:2A:11:89:02:11:52:3C:3E:FC:86:56:97:01:BE:5B:28:B7:37:3B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F93A4EE7832D238271291B730EB9F18
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SCoRiQIRUjw-_IZWlwG-Wyi3Nzs.roa
Signing time: Tue 06 Feb 2024 17:59:58 +0000
ROA not before: Tue 06 Feb 2024 17:59:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51254
IP address blocks: 2a0f:b241:2f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:93:a4:ee:78:32:d2:38:27:12:91:b7:30:eb:9f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:59:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=482a11890211523c3efc86569701be5b28b7373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:9d:70:ba:d3:bb:55:2e:be:a9:d7:ea:9a:
aa:1f:cb:55:4d:aa:5e:1e:cb:fd:78:6a:ec:8c:c5:
40:bd:35:68:f7:c6:a7:9e:57:03:0c:7d:79:b2:05:
3c:a5:10:95:5c:4e:7d:0a:e4:24:b7:93:6a:a1:dd:
b8:29:fa:1a:d2:7e:fb:a0:00:da:d7:07:9c:bf:02:
57:89:88:6b:76:9f:de:63:f4:de:33:bd:c8:d0:79:
b4:37:35:44:19:b0:11:3f:e0:e7:c2:9d:4f:cd:3d:
11:5c:08:99:e2:24:6c:60:ea:61:69:12:15:17:1d:
3c:2c:9e:09:1a:37:b5:f2:9a:dc:95:60:6a:96:77:
75:4b:5a:f4:fe:c2:00:91:5a:72:72:d0:20:b7:9f:
fd:b5:22:42:37:4a:69:b6:d2:ef:6d:c0:c8:b7:64:
4d:c4:d1:df:5e:c4:5b:74:9b:7c:b8:3c:a7:9a:00:
e5:a3:22:ff:a4:93:91:b3:24:49:ed:04:9c:d6:b7:
95:6b:46:cc:7d:e9:97:b2:93:e8:51:ce:10:10:1c:
21:9f:dc:a9:63:8c:d9:6e:9f:44:15:18:00:7d:ea:
bb:39:1b:88:41:dc:b2:8a:a2:28:f0:a6:16:61:55:
89:9f:e2:f4:96:e9:b6:b1:04:11:cc:83:d7:8a:18:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:11:89:02:11:52:3C:3E:FC:86:56:97:01:BE:5B:28:B7:37:3B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SCoRiQIRUjw-_IZWlwG-Wyi3Nzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:2f::/48
Signature Algorithm: sha256WithRSAEncryption
25:b9:6e:db:3c:2a:f3:ef:e4:24:0b:7e:e2:0b:59:ae:d6:7e:
1f:66:3b:14:dc:74:05:a2:c3:80:93:bf:43:27:a8:11:45:ab:
02:dc:09:22:80:62:a1:11:7c:34:27:93:64:15:19:da:82:e1:
57:2b:97:e9:23:f5:ba:5a:47:99:92:1e:ee:cf:16:4a:37:ba:
59:70:80:32:74:b5:9c:e0:90:ac:37:14:91:36:f1:f2:30:90:
95:1e:13:5d:49:27:4f:a0:27:55:34:bb:2e:38:77:4c:42:3b:
e8:f7:fe:3a:a1:1a:6c:df:53:0b:e4:93:d3:80:df:91:73:42:
34:a9:c8:5b:7a:06:86:b4:8f:e5:da:f5:0f:cb:68:98:76:96:
b0:b1:1c:51:f9:ad:b9:10:0d:e5:e3:92:8b:0e:2e:3e:01:57:
f4:be:e9:00:ae:93:d7:44:b6:c3:28:53:05:e7:6b:91:37:a3:
71:c8:0a:42:49:f4:37:d3:8d:17:28:f3:35:7c:62:df:82:94:
2b:bc:a3:d8:fd:02:b3:d0:23:ba:23:86:65:af:b6:18:d1:cd:
44:f1:6b:6d:04:f9:c7:3a:58:cc:aa:36:2e:47:9c:ad:e4:95:
9e:5d:7d:78:71:b5:60:2a:bf:38:b9:95:8e:88:fd:34:8a:d4:
d1:ad:e0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org