Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bPuw0jH5ilHEPCCPF2gdIR4e8hA.roa
File: bPuw0jH5ilHEPCCPF2gdIR4e8hA.roa (raw, json)
Hash identifier: psg+QtauOueJeVCistaDBoGsleE9/sRM5E+xXSaktOE=
Subject key identifier: 6C:FB:B0:D2:31:F9:8A:51:C4:3C:20:8F:17:68:1D:21:1E:1E:F2:10
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F068A8B017C078CEB7424A2815ADEE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bPuw0jH5ilHEPCCPF2gdIR4e8hA.roa
Signing time: Wed 07 Feb 2024 05:00:32 +0000
ROA not before: Wed 07 Feb 2024 05:00:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60438
IP address blocks: 2a0f:b241:125::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:68:a8:b0:17:c0:78:ce:b7:42:4a:28:15:ad:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cfbb0d231f98a51c43c208f17681d211e1ef210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:a1:1a:9d:cd:ff:29:c0:ad:2e:0b:37:4e:
f6:13:b4:2b:85:65:e5:a1:9d:c5:19:10:54:7a:5f:
bf:12:56:b6:00:25:a5:ad:1e:c5:d9:86:86:93:96:
43:1d:bc:61:e1:f4:dc:ed:7a:71:a2:fc:4d:99:1d:
1c:ec:2c:59:3d:ad:cf:05:f3:12:3f:53:60:cd:d5:
ea:84:74:9a:81:35:88:ca:90:c6:db:e5:93:be:43:
e1:7b:34:60:d8:0c:00:3e:d2:09:ca:3e:05:07:72:
03:9e:ec:a8:12:7e:bb:ac:0e:95:69:f1:10:8e:a1:
af:35:18:31:1e:8e:18:6f:fa:9c:4b:df:d9:4d:80:
9d:d9:0a:ef:71:1a:fe:9b:80:94:d0:cd:18:83:2a:
79:25:3c:63:24:9c:da:4e:34:ae:d9:71:c4:b0:8c:
83:34:ef:0f:10:b1:c8:da:86:b8:2b:ee:24:ad:f0:
cf:fc:eb:73:8e:14:20:be:40:0c:6b:03:08:f0:f2:
03:a8:53:a3:8c:a7:b0:4a:24:67:0c:2e:57:0b:4c:
e3:40:05:44:fc:06:b8:6e:cc:8f:cf:93:f2:db:1a:
a4:9b:1c:2f:e6:b0:bc:36:54:4c:fd:ab:8b:9f:2e:
65:8f:06:eb:06:8f:94:41:7f:3d:b2:98:d3:f9:de:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:B0:D2:31:F9:8A:51:C4:3C:20:8F:17:68:1D:21:1E:1E:F2:10
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bPuw0jH5ilHEPCCPF2gdIR4e8hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:125::/48
Signature Algorithm: sha256WithRSAEncryption
39:98:3c:b5:0b:a2:b4:ff:3b:9e:0b:e0:6b:54:b7:f1:90:d1:
e1:eb:2c:58:57:56:d0:6b:9e:3c:c3:2e:44:82:0e:82:96:e3:
e3:87:fe:ea:df:ee:62:c2:e7:a2:ad:29:30:bf:bc:b8:2c:1b:
69:0b:a6:bd:0f:11:44:c5:c0:eb:d6:1c:0e:76:c1:a0:ea:fd:
f5:4e:bd:b7:39:d7:ee:af:4e:69:13:de:ab:88:f2:d3:9b:7c:
44:91:6b:dc:ad:9a:f1:81:2b:b7:fa:c2:f7:32:89:6a:0e:30:
1b:bd:98:9e:3f:00:8d:f4:44:d3:79:1c:9d:a6:30:6a:f5:e1:
20:65:cf:bf:43:b3:e5:60:99:8c:6c:1f:5e:05:86:0a:b2:f4:
5d:7d:1a:88:8e:5c:48:b9:6a:97:f4:68:c5:46:ba:e7:ca:46:
12:de:c8:55:27:88:f8:20:b5:90:50:6a:fb:96:47:2f:6f:9d:
a3:68:67:0b:3b:dc:5f:fa:80:a3:b4:49:29:95:fc:ae:6d:9d:
a2:fe:7f:a4:bc:8b:64:6f:e8:6a:68:cf:99:58:cd:62:bf:a5:
ac:bf:ee:df:5b:02:0a:82:e3:fb:0e:49:d0:17:b5:64:17:4f:
e4:93:25:7d:5b:f3:df:e7:fd:bb:ab:57:e2:e3:18:cd:e4:83:
05:03:a9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org