Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Zge4u2SMaRk5lwIbDtdx1VRec2k.roa
File: Zge4u2SMaRk5lwIbDtdx1VRec2k.roa (raw, json)
Hash identifier: c9819ejzUj4NP6huBKXgPsaTZyLiqWQLIoVFm3netAk=
Subject key identifier: 66:07:B8:BB:64:8C:69:19:39:97:02:1B:0E:D7:71:D5:54:5E:73:69
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA811831CA9F3362256FB41E56C31AA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Zge4u2SMaRk5lwIbDtdx1VRec2k.roa
Signing time: Tue 06 Feb 2024 18:22:17 +0000
ROA not before: Tue 06 Feb 2024 18:22:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200103
IP address blocks: 2a0f:b241:93::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:11:83:1c:a9:f3:36:22:56:fb:41:e5:6c:31:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6607b8bb648c69193997021b0ed771d5545e7369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:a3:60:ef:4d:e8:75:20:6f:d4:5b:f4:69:
89:57:9d:21:b5:87:a6:62:3e:69:1b:42:18:f2:b5:
47:7b:3c:46:13:27:d8:ae:5d:3e:39:32:b0:cb:2f:
45:4d:ef:f2:3d:2f:68:3a:ba:59:99:a7:8a:3d:fc:
32:e6:e3:50:2b:f2:51:1e:df:92:23:2d:39:45:dd:
57:ec:5a:9e:8b:21:1c:df:94:3b:f7:e3:fb:c3:e2:
33:f2:41:67:4e:7c:2e:9c:a9:a8:6c:d1:a9:9e:0a:
5d:eb:b8:88:28:e1:c3:e4:13:7b:76:2a:a6:d4:fa:
79:57:49:2e:b4:ec:60:5c:7b:eb:c5:9a:dc:7e:2e:
67:35:80:96:80:b7:7c:7b:98:48:bc:58:20:32:a9:
e2:61:8c:c9:98:df:72:b6:02:7b:62:dc:ef:71:06:
f6:f3:4f:16:9c:e1:c4:d2:d8:7a:f6:77:24:7b:fc:
dd:a4:05:ea:8d:20:75:e8:9d:00:07:5c:51:8e:e2:
f6:31:14:9f:6d:79:b2:e1:06:ba:7e:89:ea:00:40:
cc:7d:45:15:4d:db:fb:a3:60:49:31:35:78:21:f3:
30:0e:69:8f:43:3e:33:6f:af:7d:60:57:a5:b4:7c:
c7:9a:4e:9b:d5:81:05:50:ee:5e:0c:33:81:7f:b2:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:B8:BB:64:8C:69:19:39:97:02:1B:0E:D7:71:D5:54:5E:73:69
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Zge4u2SMaRk5lwIbDtdx1VRec2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:93::/48
Signature Algorithm: sha256WithRSAEncryption
44:45:0d:2b:80:b7:f4:36:95:74:5b:d8:69:88:65:87:ed:15:
84:35:9c:47:00:d7:cf:02:58:d3:18:6a:a9:7c:a5:b1:18:37:
59:3e:9c:8b:81:4f:7f:c9:90:21:1c:30:2c:d5:cc:b6:5b:91:
95:a1:5f:35:07:29:cb:4d:b6:5a:02:7b:8f:88:0f:32:0c:7a:
dc:d8:be:21:18:db:11:39:ac:89:b0:d3:9d:ad:fb:09:04:72:
78:19:b2:c0:51:90:db:8b:55:72:f4:c2:49:a4:2a:58:06:0c:
83:85:c0:d1:17:37:b7:e7:b3:fb:50:20:bb:e4:26:ea:95:c0:
73:56:05:74:71:02:93:93:64:4b:de:9c:5a:e5:ea:72:e6:bd:
e6:58:cd:35:32:f3:13:ab:ab:02:f0:af:fa:4b:46:f7:3e:af:
f2:61:e5:8b:57:2a:cb:47:da:51:06:da:16:5a:d1:ee:66:90:
14:c1:ee:8d:58:11:8c:a4:be:62:30:e5:d2:9a:39:1b:44:0c:
37:0e:45:3e:e1:6d:c2:74:46:13:3b:0e:25:86:9d:d0:e9:61:
d4:c0:c1:48:ed:4a:d0:fd:83:a6:f9:b9:dd:6e:bd:04:81:ae:
42:ca:bb:13:ee:06:4a:ff:40:d0:0a:a9:ed:a6:31:db:19:65:
a2:4e:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org