Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Uzo8iPHCM1dJvvFGQ-VTk8SycgM.roa
File: Uzo8iPHCM1dJvvFGQ-VTk8SycgM.roa (raw, json)
Hash identifier: CVcEYXRZ/5SbqX/zNhPuBHOj5zJ2mx+81/EKDU6nnNg=
Subject key identifier: 53:3A:3C:88:F1:C2:33:57:49:BE:F1:46:43:E5:53:93:C4:B2:72:03
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAAD60E7A8385DDA4B62F319EC48B94
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Uzo8iPHCM1dJvvFGQ-VTk8SycgM.roa
Signing time: Tue 06 Feb 2024 18:25:18 +0000
ROA not before: Tue 06 Feb 2024 18:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203686
IP address blocks: 2a0f:b241:e6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:d6:0e:7a:83:85:dd:a4:b6:2f:31:9e:c4:8b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=533a3c88f1c2335749bef14643e55393c4b27203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:bc:35:51:43:c3:7b:bc:b8:9e:8b:77:76:
76:3f:81:43:60:10:43:23:32:4f:fa:8b:06:7a:07:
f1:40:8f:8c:90:8c:12:fd:c2:3a:55:54:77:48:20:
12:14:36:8e:04:c9:b2:c6:ae:3b:ca:61:bc:76:7d:
c4:b7:1e:20:47:50:a1:81:03:32:95:d4:9d:82:68:
6a:e9:29:1e:2f:9c:5f:4a:4f:c1:a0:7c:1e:01:90:
47:ae:fc:7b:24:90:70:4f:49:6b:27:fa:c5:ec:cc:
e1:42:f9:c3:74:4a:39:c5:a6:5c:a2:7b:d0:08:3a:
49:5d:0d:d5:0e:66:6c:2d:1a:e4:a5:9e:dc:86:56:
44:c8:ae:8f:7a:db:94:27:7d:dc:5f:f0:d0:e2:51:
7b:db:2d:64:f5:24:08:ee:f8:06:d9:4c:91:23:d1:
2c:51:af:8c:20:47:67:fa:3f:49:ce:23:84:0e:1c:
5c:5b:70:75:49:75:f1:8f:f4:43:fe:3c:16:a4:f0:
97:c7:96:b0:ef:60:c5:1a:0d:d9:d2:2d:1c:52:5c:
15:69:12:33:f1:d6:82:f0:ae:83:3b:da:9b:09:f4:
3f:61:6b:4f:97:8d:82:cf:ec:8e:ce:dc:41:61:82:
1a:34:4d:a9:c2:74:5e:e8:f0:b3:91:48:c5:f2:5e:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3A:3C:88:F1:C2:33:57:49:BE:F1:46:43:E5:53:93:C4:B2:72:03
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Uzo8iPHCM1dJvvFGQ-VTk8SycgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e6::/48
Signature Algorithm: sha256WithRSAEncryption
28:51:52:85:48:99:71:e5:c7:09:43:b4:dc:3f:0a:46:df:ea:
2f:f8:19:01:35:45:65:7b:de:ff:71:43:01:03:79:77:b1:20:
8c:ae:cd:d1:0d:f2:65:d4:d5:f7:92:78:e0:67:7a:06:a1:fe:
35:af:a3:c3:7d:f9:c0:e1:f2:ff:b4:36:12:69:9c:b0:3d:16:
47:af:ac:ad:32:81:0c:0b:be:cc:46:6a:b3:73:94:98:87:12:
6d:77:63:7c:0e:a3:7a:95:6b:9a:40:a4:2d:20:02:61:73:ce:
29:ab:53:65:cb:81:b5:3d:a6:4a:c9:68:8a:fe:b1:68:b7:f6:
9d:d5:c4:bf:b0:d0:3e:bb:eb:06:f2:34:07:d7:3f:6f:ac:ed:
d9:15:d0:91:1e:b2:ed:8c:fe:79:9f:fd:f9:87:9d:d6:ad:4c:
ce:b6:28:95:3f:d5:2f:f6:f0:78:7d:79:92:02:08:b8:5b:c2:
f8:1a:da:39:6e:c1:f0:c5:1c:b4:aa:67:2d:48:88:55:56:43:
99:6c:fc:32:fe:2a:24:8c:a3:56:e9:d5:09:5e:55:97:94:dd:
ca:02:c4:3b:0a:94:71:ee:28:48:4e:9c:fa:55:18:e4:e2:60:
db:5b:d2:33:d4:da:8c:29:6f:c1:33:9a:c0:8e:2c:25:ce:e3:
c7:81:6f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org