Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YOJ92XmredWAROMuvVppewVvP-s.roa
File: YOJ92XmredWAROMuvVppewVvP-s.roa (raw, json)
Hash identifier: zmKUAGeWaDOqpgqhuc7L+EqkwQwfQt2E9Rl6j3c0Jd8=
Subject key identifier: 60:E2:7D:D9:79:AB:79:D5:80:44:E3:2E:BD:5A:69:7B:05:6F:3F:EB
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0896E628D86F44A5C5A13FE2BE223
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YOJ92XmredWAROMuvVppewVvP-s.roa
Signing time: Wed 07 Feb 2024 05:00:41 +0000
ROA not before: Wed 07 Feb 2024 05:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201504
IP address blocks: 2a0f:b241:df::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:89:6e:62:8d:86:f4:4a:5c:5a:13:fe:2b:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60e27dd979ab79d58044e32ebd5a697b056f3feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:57:b1:95:ea:fa:f4:38:c8:86:53:b4:88:
4c:aa:88:7d:e5:c4:f9:4c:99:04:f1:c1:6e:63:70:
76:3c:67:a3:30:ba:ec:3d:88:a1:0e:68:73:52:cb:
91:c7:4a:1f:a4:df:9e:af:9f:6b:83:84:5d:4b:6e:
11:a2:bd:05:bb:ee:63:88:22:b5:73:e9:57:73:72:
3e:82:69:a1:b4:27:5d:e5:26:f1:4d:e9:c2:65:f5:
7f:93:f0:71:c5:da:93:a7:9d:56:d5:1f:4b:17:13:
05:c4:a0:9e:4e:06:e5:1b:44:4d:30:2b:e1:11:f0:
f5:ad:79:72:81:8d:f0:41:93:b7:7e:ba:18:ed:3e:
06:f4:c3:d7:93:ba:e7:69:7d:bb:23:c2:8b:e4:6d:
4e:a7:31:f1:55:cf:67:cd:f2:58:2f:b8:86:07:f7:
f6:96:97:e8:f0:83:e8:8c:e8:1f:31:6c:29:02:47:
70:a5:9e:f8:81:cb:d6:83:ce:5e:55:39:19:4d:24:
ab:93:96:53:75:dd:93:a3:16:3d:99:2d:49:bb:a4:
59:aa:0e:cb:a4:4a:4a:2b:f5:cf:15:a0:89:c0:eb:
ae:83:10:78:de:6a:5c:d0:5a:63:8e:ae:fe:6a:c6:
b9:3d:ca:cd:76:da:fb:90:fd:6c:ca:65:2b:6e:fc:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E2:7D:D9:79:AB:79:D5:80:44:E3:2E:BD:5A:69:7B:05:6F:3F:EB
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YOJ92XmredWAROMuvVppewVvP-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:df::/48
Signature Algorithm: sha256WithRSAEncryption
7f:e7:d9:1e:57:23:ab:44:57:61:2c:e7:17:ea:39:f6:be:1b:
90:b0:ea:10:81:4f:1e:70:1d:89:98:e9:d4:cf:94:36:5a:c6:
01:bf:c6:41:9e:ee:0a:6c:2c:eb:c8:d0:b4:55:73:73:4e:1c:
47:ee:1e:31:fb:47:0f:19:96:1c:83:c5:68:77:c0:1a:9f:60:
c6:21:8c:73:09:cc:c0:65:0b:97:64:03:5a:57:a0:cc:7b:87:
62:71:df:1d:dd:41:33:8e:77:18:a9:bb:0d:0c:e1:6b:84:4d:
75:ce:31:e2:7e:33:d2:13:00:75:8c:c7:05:4e:cd:d9:0a:30:
43:2c:03:76:ec:83:4b:12:d7:2e:d4:58:2a:ee:a2:28:70:ca:
15:c2:89:ea:31:cf:a9:9f:36:d8:1c:92:7e:63:a5:68:65:51:
d0:44:dd:a6:07:56:db:b1:61:d0:d1:93:d6:d1:30:28:a1:1e:
3a:ba:c9:5a:fb:a6:6e:93:53:6b:c0:7a:ea:c8:06:11:d3:7b:
4d:46:28:32:f2:15:63:1e:f4:18:aa:6c:01:82:4e:63:69:2d:
44:fc:c2:a1:cb:4e:cf:2c:4b:d0:de:36:7f:c1:0d:6a:94:79:
44:e6:91:96:c7:35:46:e5:4a:85:ed:10:27:da:63:b3:37:5d:
97:c9:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org