Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/VuGxyBmn26X66xlg4npvK-uZj-w.roa
File: VuGxyBmn26X66xlg4npvK-uZj-w.roa (raw, json)
Hash identifier: 6q3wu8hw1Mp2QAY5D7bAtSU7aFa3G4u46/sK3aEyp6s=
Subject key identifier: 56:E1:B1:C8:19:A7:DB:A5:FA:EB:19:60:E2:7A:6F:2B:EB:99:8F:EC
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F94985B601622901F80D0D107AE2F33
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/VuGxyBmn26X66xlg4npvK-uZj-w.roa
Signing time: Tue 06 Feb 2024 18:01:01 +0000
ROA not before: Tue 06 Feb 2024 18:01:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207451
IP address blocks: 2a0f:b241:3c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:94:98:5b:60:16:22:90:1f:80:d0:d1:07:ae:2f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:01:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56e1b1c819a7dba5faeb1960e27a6f2beb998fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:3c:04:fe:51:32:75:75:e5:f4:04:e8:c3:
26:7f:63:ed:63:b0:2a:9b:85:cb:a3:79:0b:6b:ae:
11:0e:03:ca:95:d1:fc:27:c1:80:a6:fc:0d:38:de:
8d:9e:66:03:d6:7d:2c:d3:a8:5d:18:fd:d2:6f:25:
d1:29:02:0e:e7:8c:95:9a:c2:25:a0:74:f8:eb:6b:
a0:6a:8b:92:46:70:09:5c:56:4c:1d:b7:c4:a3:a3:
db:fe:4e:e3:66:50:38:0e:4a:70:39:45:fa:91:de:
c4:3a:a6:87:24:ca:ac:0c:b9:d5:80:cd:41:09:35:
a9:14:66:7d:7c:31:b8:78:79:c5:59:4c:4c:6a:87:
8d:87:a0:0e:9d:7a:e0:1e:68:28:0b:8d:d4:11:18:
20:87:da:18:9b:79:36:74:8f:4e:fb:e8:59:c2:35:
69:3d:3b:f3:e2:3f:96:22:ec:94:a2:f5:7e:a4:31:
b6:c9:a7:6c:21:c1:8c:52:f9:0f:2c:52:94:fe:80:
29:0e:d1:1b:a4:db:b5:87:3b:f8:e4:d4:80:b4:78:
12:24:a1:88:27:53:dc:00:4b:b9:2c:1b:bf:e5:9c:
d4:d3:d9:a7:d3:e8:2e:68:ab:cf:85:fd:1d:73:26:
93:e3:81:4f:bb:3d:83:af:33:e6:95:5b:ef:5c:bc:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E1:B1:C8:19:A7:DB:A5:FA:EB:19:60:E2:7A:6F:2B:EB:99:8F:EC
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/VuGxyBmn26X66xlg4npvK-uZj-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:3c::/48
Signature Algorithm: sha256WithRSAEncryption
77:bd:34:89:d0:75:08:9f:d7:67:99:66:71:d5:d8:ad:12:3a:
98:39:a8:c5:34:32:50:b4:57:f0:93:d5:87:13:33:85:22:da:
45:a6:70:af:c7:05:f2:03:8d:8a:e7:82:df:ee:bf:54:f6:b0:
fa:e3:d3:78:e7:b3:fd:12:42:ba:05:73:9a:d7:bf:e9:e2:aa:
d5:73:53:1b:78:76:4b:b1:87:dc:66:d6:d3:87:7c:b9:8b:68:
bc:c5:cb:34:8e:3c:0c:6a:45:e0:03:81:34:7b:48:29:49:5f:
9f:6c:4c:a2:37:78:87:06:b0:23:c2:20:cd:e3:a8:53:69:43:
60:c0:f9:da:d1:e2:c9:69:04:e5:37:b3:85:80:20:aa:fa:64:
bd:73:0f:01:8d:06:d8:4a:e9:b7:e0:e9:5d:6c:66:41:e6:ce:
70:64:08:34:f8:ad:a6:3e:8d:05:e3:71:fd:78:a7:b1:15:36:
7e:00:1d:68:d7:d3:38:b7:0e:49:aa:5e:e5:4e:a3:f0:68:b1:
55:d8:4b:a6:3b:a0:74:66:32:e6:e9:f4:a5:d8:db:f6:7a:cc:
be:c8:ef:63:6b:8c:28:d8:b6:70:98:54:0f:62:4a:79:a6:5f:
55:f8:06:83:e7:39:be:80:ce:98:8e:57:42:25:46:66:5d:10:
6c:a0:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org