Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Wx9yRijlZDDMiqPKrET6i5BmLXM.roa
File: Wx9yRijlZDDMiqPKrET6i5BmLXM.roa (raw, json)
Hash identifier: /fUaEPlxee7o6DX80UvI0R4sxSCbXCKNdltZEG/sbTI=
Subject key identifier: 5B:1F:72:46:28:E5:64:30:CC:8A:A3:CA:AC:44:FA:8B:90:66:2D:73
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F08B3B00EB22138186BB201D0D1AA3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Wx9yRijlZDDMiqPKrET6i5BmLXM.roa
Signing time: Wed 07 Feb 2024 05:00:41 +0000
ROA not before: Wed 07 Feb 2024 05:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202988
IP address blocks: 2a0f:b241:e3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:8b:3b:00:eb:22:13:81:86:bb:20:1d:0d:1a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b1f724628e56430cc8aa3caac44fa8b90662d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:ca:02:5b:e7:35:6d:87:c2:d9:9e:78:2e:
fd:59:8f:a8:52:f3:47:e1:8b:29:a5:33:47:69:d2:
7f:cb:da:2c:c1:6f:d2:a3:a3:72:e9:4c:82:da:30:
0b:bd:e1:dd:98:41:ab:ea:80:f2:58:42:39:80:03:
6d:5a:e5:f1:7f:7a:b4:97:14:0c:cf:cf:40:06:78:
35:06:17:8b:62:27:d1:f3:19:2d:30:48:31:f2:b4:
23:31:6e:6f:f8:83:05:01:5d:95:90:81:1c:8c:1f:
8c:43:1e:5c:05:b0:c6:27:a2:70:33:d0:a0:75:34:
18:29:bd:e0:79:cd:18:77:cc:87:27:23:e3:eb:bf:
42:ae:e0:a9:82:62:8c:a7:74:28:f6:21:4a:68:5b:
ee:18:8a:6f:95:3b:6b:5c:87:0b:58:67:17:ae:38:
ae:4a:6b:c4:28:94:be:0f:d5:5b:a8:41:23:63:2d:
ce:bc:e2:5b:f0:9d:81:e8:93:cd:c7:62:b4:c4:ca:
d8:87:0d:b1:2b:0e:d6:ee:13:1e:7f:f6:0f:f2:be:
95:8d:fa:7c:16:82:85:aa:d6:6f:ae:3d:13:d1:24:
3d:5d:8c:85:7a:b4:e9:7d:f8:42:46:6f:db:27:a2:
11:c7:86:5a:96:40:4b:a5:4d:ba:cf:2c:84:9f:fe:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1F:72:46:28:E5:64:30:CC:8A:A3:CA:AC:44:FA:8B:90:66:2D:73
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Wx9yRijlZDDMiqPKrET6i5BmLXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e3::/48
Signature Algorithm: sha256WithRSAEncryption
0f:fa:9d:68:e5:e4:36:ee:0f:83:1b:e1:37:47:76:25:f8:e5:
4a:79:02:1f:b8:53:08:43:33:76:44:cd:ce:84:bb:bb:19:a0:
3a:73:22:e6:79:37:40:71:4b:a3:5b:96:4c:31:10:22:de:4f:
04:7c:56:41:5a:91:21:45:98:eb:79:91:68:1b:73:b0:c8:52:
ef:5d:88:19:f9:74:f2:65:8c:c7:2d:a1:ef:1e:21:78:23:d2:
a7:09:04:f5:ce:3d:65:fa:fd:6c:78:62:0b:fd:34:24:66:74:
c9:d3:c2:aa:26:0f:ee:ce:ec:88:be:10:70:66:9a:7f:52:af:
f1:45:de:9a:62:8d:6e:03:36:4b:31:97:ad:c4:41:9a:ff:9f:
79:f5:23:a8:95:81:ac:b8:be:b4:93:fe:6f:60:d7:2d:11:9d:
ec:3d:57:17:a9:44:aa:83:da:95:0c:24:f2:34:0b:8b:f1:86:
f5:77:c1:eb:04:55:2d:59:bc:47:b3:59:aa:ee:52:01:3c:ca:
34:e9:bd:07:4b:3f:dd:d4:88:b9:dd:24:d0:d7:cb:01:e1:d9:
71:e7:b9:90:d4:78:96:2c:b8:37:26:24:a6:e8:55:70:b0:47:
67:4e:1b:d3:24:13:35:19:a9:6f:1d:90:f4:09:36:4c:9d:2d:
88:6f:99:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org