Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YK93JwjZwn-xVysxWZpLrUcwG_0.roa
File: YK93JwjZwn-xVysxWZpLrUcwG_0.roa (raw, json)
Hash identifier: saMTbZE7PQKz4ruOFZrSOw/eUFbE18gXOhb5ebJanEY=
Subject key identifier: 60:AF:77:27:08:D9:C2:7F:B1:57:2B:31:59:9A:4B:AD:47:30:1B:FD
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA8FBF87B713612DA791D8DD7EFB149
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YK93JwjZwn-xVysxWZpLrUcwG_0.roa
Signing time: Tue 06 Feb 2024 18:23:17 +0000
ROA not before: Tue 06 Feb 2024 18:23:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200266
IP address blocks: 2a0f:b241:ae::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:fb:f8:7b:71:36:12:da:79:1d:8d:d7:ef:b1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:23:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60af772708d9c27fb1572b31599a4bad47301bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:92:b3:6f:a7:9c:42:c4:a8:58:78:e1:bd:
7c:9b:3a:30:fe:59:cb:44:3f:b0:57:4b:cd:e0:41:
93:15:f2:b4:b4:46:e5:fb:79:72:e2:60:19:b6:d1:
ad:2e:a2:7a:b5:21:45:c0:42:da:80:2d:58:e1:f7:
55:90:35:b0:57:02:a4:8a:5d:28:1a:1c:71:73:d3:
c6:d0:11:77:24:5a:b8:28:99:cb:d1:b3:a7:13:01:
33:ec:33:33:87:15:c1:c0:df:6e:cc:47:2f:59:07:
7f:10:91:d2:0a:26:63:4a:68:7a:d4:79:bc:36:5a:
44:88:eb:4c:67:e4:03:49:57:93:8e:0a:0a:19:d0:
1b:90:59:34:6c:c6:20:51:b4:ff:60:10:fb:68:8e:
3a:3e:5d:06:24:af:b1:9c:1d:f7:5d:2e:2e:a4:86:
e2:90:31:b5:90:68:1c:1d:cc:bf:13:d8:46:aa:a3:
79:0d:a0:40:b6:3e:8a:44:b6:25:92:17:ba:05:73:
c5:4f:f4:d8:dd:26:7b:bb:ea:1c:a5:9a:a2:aa:9b:
16:11:fb:43:5a:85:56:d3:59:0e:68:7d:dd:44:47:
78:20:8f:7b:46:94:82:c4:b3:57:26:99:69:42:a9:
96:18:02:7f:76:e3:84:7b:10:c9:b1:85:6c:bc:02:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AF:77:27:08:D9:C2:7F:B1:57:2B:31:59:9A:4B:AD:47:30:1B:FD
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YK93JwjZwn-xVysxWZpLrUcwG_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:ae::/48
Signature Algorithm: sha256WithRSAEncryption
4f:93:e3:6f:b8:ec:34:65:e5:d9:12:98:67:b3:b1:42:32:14:
1a:e4:7a:cd:ad:20:fe:6b:7d:1a:cf:1c:7a:17:c1:4e:39:b9:
9d:a2:70:fa:25:dd:e5:78:56:92:a2:3a:65:8b:e5:8f:dc:bc:
0b:87:b9:79:3b:c3:ec:c4:b2:8b:fd:ca:b2:db:0a:99:4a:b2:
c5:6d:d8:d3:f3:ee:6a:7b:e8:96:3d:75:d2:a7:9b:58:48:da:
ce:ad:16:80:a2:b4:3e:85:ed:8e:cd:18:1a:f3:2c:82:fa:a9:
48:9d:bb:92:34:a9:ce:44:2e:a7:8b:63:1f:c0:11:7a:0d:9a:
84:1a:5c:8c:f9:87:13:b9:01:07:42:4b:42:ad:1a:26:9c:ff:
9f:e7:29:3b:6f:65:2c:2b:bd:1d:09:b4:58:93:e8:a2:f0:3c:
43:53:d6:bd:8f:46:17:00:0c:e4:1a:b5:87:5a:5c:57:25:ca:
8c:4b:aa:f1:a7:81:6e:8e:c0:1f:e5:7a:61:21:ad:07:44:8a:
ef:91:0f:49:33:78:02:b1:15:d9:bd:d9:1d:e8:dd:b8:7a:f6:
12:99:00:51:96:cb:93:7d:ed:da:f4:1d:34:c9:c8:0d:93:a1:
73:d1:25:4d:36:bf:d7:2c:26:c9:d5:cc:b5:2a:ce:20:d7:27:
af:ed:d5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org