Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/U5zOgNqQIo6CnRJfk4CovcEprcQ.roa
File: U5zOgNqQIo6CnRJfk4CovcEprcQ.roa (raw, json)
Hash identifier: ck6z8JG/I8J/Z9Xak8PxSUK6QFW/FSlmKh1shogJaPU=
Subject key identifier: 53:9C:CE:80:DA:90:22:8E:82:9D:12:5F:93:80:A8:BD:C1:29:AD:C4
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F05C498DAEFF87CC2F357F96BA9D9D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/U5zOgNqQIo6CnRJfk4CovcEprcQ.roa
Signing time: Wed 07 Feb 2024 05:00:29 +0000
ROA not before: Wed 07 Feb 2024 05:00:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44817
IP address blocks: 2a0f:b241:63::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:5c:49:8d:ae:ff:87:cc:2f:35:7f:96:ba:9d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=539cce80da90228e829d125f9380a8bdc129adc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8b:44:34:5e:20:02:5a:21:69:dc:b3:3a:02:
1b:9e:6f:3d:a2:e2:8f:d2:65:5c:8d:5f:50:08:99:
71:0d:74:eb:7a:32:24:e8:d4:02:4d:91:b7:30:21:
91:a5:ad:97:94:f8:b6:92:e9:d1:07:7b:08:96:bf:
8f:3a:90:e6:f8:96:30:a2:0e:4b:a9:9a:39:6d:dc:
1c:bf:43:d5:70:c5:a5:c4:fa:ba:a4:d2:37:ff:3e:
14:e2:02:5b:2d:95:97:67:a3:e8:3e:9b:c4:f6:e4:
21:70:a4:0f:16:2d:62:ed:d0:0e:a8:10:3c:f2:eb:
f3:16:de:77:ae:b0:b3:76:64:64:78:22:69:6d:b1:
66:bd:d0:92:2e:ab:22:b1:08:fe:f8:29:69:d1:0c:
41:ea:1c:99:b1:09:d0:96:2a:46:61:81:46:53:65:
3e:a5:26:7b:77:e2:fc:82:bc:15:e8:73:b7:44:b1:
5c:33:2f:e5:00:d5:55:30:1e:af:d0:f6:33:76:74:
13:19:7a:90:4e:3d:88:58:9a:ef:75:f5:e6:c2:cd:
eb:d4:b4:5b:06:76:22:db:2b:11:4d:a6:73:eb:be:
4d:a4:4d:74:a8:ca:e7:fb:ab:ce:ca:17:a8:6d:c3:
05:b3:54:5b:4a:03:9b:e5:57:d0:6e:62:dd:da:46:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9C:CE:80:DA:90:22:8E:82:9D:12:5F:93:80:A8:BD:C1:29:AD:C4
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/U5zOgNqQIo6CnRJfk4CovcEprcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:63::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b7:b7:84:b2:50:e7:2e:f8:26:60:f0:29:86:4d:07:3c:be:
93:a8:59:89:28:44:a4:86:1b:ff:08:42:ca:15:03:42:d0:75:
99:87:43:e0:34:a8:e7:df:e3:f6:fb:e5:fd:08:9e:1a:b4:a4:
60:de:9f:02:ab:f6:42:15:77:c6:88:19:0e:7e:5f:57:59:5e:
b1:22:f2:e6:0d:a3:34:0e:22:7f:3a:48:6f:42:32:69:d7:ff:
59:c3:13:be:d6:5f:31:9f:fe:1a:20:48:6c:00:a3:c2:1a:e0:
8a:09:f8:11:0a:27:c3:8c:28:9b:28:a8:67:82:81:40:6f:bc:
63:84:f6:df:1f:ab:60:53:f9:14:31:af:f1:35:ac:fe:d5:68:
50:3f:54:70:5f:99:95:3f:00:7f:8f:88:ff:de:33:b0:13:43:
ba:9c:a7:99:bc:09:bc:4f:db:f6:17:13:2b:c5:b8:46:ca:45:
f6:ae:37:d6:7d:83:20:d1:9d:cc:88:0d:e0:96:26:31:60:2f:
d9:cc:53:bf:d2:ea:75:dd:48:7c:bc:1a:1a:92:8f:9d:f0:19:
a9:53:ec:a2:37:83:4e:e8:bb:75:72:b1:84:94:5d:5d:51:95:
8e:20:a5:9b:7c:f8:bc:46:1b:bf:8a:43:56:f0:65:e4:52:fd:
31:ea:61:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org