Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YooZplYM5hENer25wEqEOtmx3tw.roa
File: YooZplYM5hENer25wEqEOtmx3tw.roa (raw, json)
Hash identifier: Og0GFHRMJYKtHAWr0Pf+6IfjY7+sxBWcndxtPEoeM3k=
Subject key identifier: 62:8A:19:A6:56:0C:E6:11:0D:7A:BD:B9:C0:4A:84:3A:D9:B1:DE:DC
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F06A3EA30FB0AEFA08C0B7B2E01173
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YooZplYM5hENer25wEqEOtmx3tw.roa
Signing time: Wed 07 Feb 2024 05:00:33 +0000
ROA not before: Wed 07 Feb 2024 05:00:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197434
IP address blocks: 2a0f:b241:70::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:6a:3e:a3:0f:b0:ae:fa:08:c0:b7:b2:e0:11:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=628a19a6560ce6110d7abdb9c04a843ad9b1dedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:30:37:30:c2:f6:0d:1f:dd:4b:10:dc:d6:
0b:4f:4f:41:27:b5:0b:65:ee:8e:27:8c:87:47:97:
b4:15:7a:2f:c2:5e:ac:d0:35:b4:34:cb:69:59:33:
e0:61:83:0f:94:9e:ad:d8:73:e5:93:a3:ce:1f:e0:
94:81:fb:29:6f:7c:6e:06:7f:4f:7c:c5:8b:b1:27:
ac:c6:84:8f:df:3a:cd:31:3a:f3:e4:59:cb:81:5e:
c4:8c:e5:65:ea:a7:59:8d:9d:d5:1d:76:87:a3:21:
08:ef:fb:82:1d:09:91:39:c7:94:e2:ea:79:d6:8a:
f5:a4:70:40:d4:de:f8:c2:e7:35:d9:9b:2c:f0:fd:
a1:54:13:5b:01:a6:9e:72:96:43:77:3e:d2:e1:ac:
a3:2f:fd:30:86:1a:0a:5d:18:e5:52:ea:5b:04:61:
75:2a:a8:9c:de:9f:69:8f:b2:91:13:e0:a5:0a:56:
24:8f:11:36:7b:0f:62:a3:22:15:51:bd:bd:0b:53:
67:57:97:ed:9a:6e:09:56:e7:2e:c0:f1:8d:15:ff:
67:21:7c:02:eb:e5:01:d8:85:cf:e1:c1:bb:ae:e9:
15:2b:09:9e:2a:e0:ba:91:a7:14:7d:f3:64:93:fb:
4f:89:09:7c:a0:ca:c5:15:78:50:3a:e4:ad:4e:65:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8A:19:A6:56:0C:E6:11:0D:7A:BD:B9:C0:4A:84:3A:D9:B1:DE:DC
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YooZplYM5hENer25wEqEOtmx3tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:70::/48
Signature Algorithm: sha256WithRSAEncryption
73:7a:40:a5:42:0b:99:df:c9:77:37:e1:3a:12:18:92:9b:ea:
af:1b:e9:c4:48:48:18:29:3f:3a:19:4a:46:2f:ee:ce:29:ab:
e8:4c:ce:a6:5d:bd:dd:88:a1:ab:4f:ca:f4:2f:ad:07:f3:00:
3b:b4:8b:20:cb:5b:a5:70:93:b6:39:46:e1:2e:c3:af:b2:ae:
fc:18:fa:86:7c:5e:8a:8f:9c:b0:25:12:04:2e:8d:4f:8d:28:
67:26:bd:6d:c3:1b:97:06:8a:da:ab:b4:77:eb:4d:61:97:89:
e1:9d:aa:28:73:12:f6:a5:0d:13:23:1f:29:5b:3e:2b:af:a3:
67:f1:a5:cb:f4:e8:1a:a2:b4:81:42:da:f0:b9:c8:f2:33:c4:
a8:b1:31:b2:78:cb:2c:d1:81:b9:13:3f:0f:ea:98:db:6f:bb:
b4:35:d6:71:dc:34:11:de:3c:d5:55:b3:98:97:00:9b:0d:8a:
45:aa:6a:2a:27:f1:98:cc:61:af:b4:dc:6e:cd:17:ab:51:b5:
5e:29:30:00:ef:dc:ef:12:54:18:9b:be:fa:2b:a0:ab:f4:17:
3f:3e:63:98:54:01:07:06:a0:9a:6b:e3:39:91:2e:f6:63:d2:
cc:49:c9:5f:5d:06:1e:66:29:a3:75:ba:c1:68:90:c3:66:b3:
c4:0f:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org