Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZrnkjTIQ8d9fIHFrG6n3gUCl4Qg.roa
File: ZrnkjTIQ8d9fIHFrG6n3gUCl4Qg.roa (raw, json)
Hash identifier: MNgo6kjVCL+pS0ttTOf2+QCJMeGdRU3SC+6H9tUNERY=
Subject key identifier: 66:B9:E4:8D:32:10:F1:DF:5F:20:71:6B:1B:A9:F7:81:40:A5:E1:08
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F95C0A556F2A56A35803F19E36F67BC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZrnkjTIQ8d9fIHFrG6n3gUCl4Qg.roa
Signing time: Tue 06 Feb 2024 18:02:16 +0000
ROA not before: Tue 06 Feb 2024 18:02:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210632
IP address blocks: 2a0f:b241:48::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:95:c0:a5:56:f2:a5:6a:35:80:3f:19:e3:6f:67:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:02:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66b9e48d3210f1df5f20716b1ba9f78140a5e108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:46:69:92:ef:f4:fd:a1:6c:61:f7:5a:56:98:
5b:5c:5f:71:12:9f:e6:39:bd:cb:31:57:0c:90:1b:
d3:8e:3c:9f:8a:a2:09:92:5b:4f:b4:7d:95:64:cf:
d8:09:fe:bf:30:a1:86:f8:13:ee:2e:8b:26:b4:15:
5f:76:0f:93:23:48:05:d2:51:17:2f:29:ed:cf:63:
ec:f4:9e:aa:9d:0e:dc:e9:31:6a:59:e7:8b:94:d3:
69:d3:bd:0a:c0:05:f6:55:ad:26:c6:21:27:c3:ce:
d5:e8:ce:0a:57:9f:78:a5:cf:37:d6:3c:91:e1:d9:
cd:75:1a:f8:78:d6:41:e6:76:dc:7e:9b:be:11:60:
8f:ab:c7:7f:f3:dc:a0:79:5c:f3:10:e8:1a:05:15:
06:10:65:be:5c:0c:4f:03:c8:ef:e2:ed:2d:5d:91:
bf:25:aa:32:b9:a1:da:9a:28:f3:9a:37:c9:85:ce:
77:12:34:e1:b8:08:e0:6d:e0:f8:44:a6:eb:a2:1a:
4a:7d:ca:e7:40:a6:f0:fd:eb:b9:77:7d:e8:95:07:
9a:15:a7:c2:11:8d:b1:71:f3:be:b6:2e:07:96:68:
90:cb:5f:c4:50:8c:b1:c5:01:89:d4:c9:c6:88:ef:
9e:e8:8a:10:83:0b:1e:d6:05:10:a2:9f:02:dd:a9:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B9:E4:8D:32:10:F1:DF:5F:20:71:6B:1B:A9:F7:81:40:A5:E1:08
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZrnkjTIQ8d9fIHFrG6n3gUCl4Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:48::/48
Signature Algorithm: sha256WithRSAEncryption
4f:31:72:ae:bd:aa:e8:43:57:d1:dc:83:6b:93:6f:a9:47:24:
59:f7:7e:d5:12:55:00:a6:69:11:bd:e2:19:65:fe:60:c0:a8:
30:04:d9:3b:7d:68:f4:84:e2:a9:ca:2b:52:d8:fb:2b:b4:3d:
f4:7c:21:ac:1d:91:a6:0a:9d:e8:ac:83:0f:2e:62:bf:67:bb:
2e:ae:16:f1:e6:06:4c:0c:da:de:4c:8b:c3:c6:85:10:53:dd:
2b:f4:c3:fc:30:9f:f1:82:99:c2:31:09:ad:24:a3:81:71:48:
85:46:b4:eb:01:9c:ac:38:3e:e5:c0:b9:67:95:e7:8a:78:2c:
be:4d:6e:ec:2d:3c:8c:b0:c1:6c:27:57:b3:b0:5c:a2:48:46:
d0:8d:15:eb:bf:fa:cc:b7:5a:d6:23:3e:61:8f:52:d6:c1:97:
c3:82:84:63:b1:36:25:f0:3c:15:36:32:b0:7d:0c:2f:ad:3b:
9d:c2:d9:0c:ff:45:77:23:fb:15:58:85:34:a0:7d:a1:5c:49:
64:40:9a:e8:58:55:f6:17:43:e5:7d:c4:33:03:02:1d:2a:40:
0b:fa:fb:05:6a:17:29:60:09:41:56:79:04:bf:15:15:62:cc:
4b:09:93:01:d3:08:18:87:72:5c:7f:17:a2:4b:dc:5d:16:10:
30:9f:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org