Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bU213JMecQjI6XJtMsiNQ9PomHo.roa
File: bU213JMecQjI6XJtMsiNQ9PomHo.roa (raw, json)
Hash identifier: dREPBHS+FmDJREXsyUpiXGSFEHaYQFD6UN6ri89tc00=
Subject key identifier: 6D:4D:B5:DC:93:1E:71:08:C8:E9:72:6D:32:C8:8D:43:D3:E8:98:7A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA80E1E6EFC50BECC4E71E2DAEF4454
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bU213JMecQjI6XJtMsiNQ9PomHo.roa
Signing time: Tue 06 Feb 2024 18:22:16 +0000
ROA not before: Tue 06 Feb 2024 18:22:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199751
IP address blocks: 2a0f:b241:8a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:0e:1e:6e:fc:50:be:cc:4e:71:e2:da:ef:44:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d4db5dc931e7108c8e9726d32c88d43d3e8987a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:f6:17:f1:60:f3:db:50:ac:58:58:a3:69:
e7:90:29:e3:d8:95:4e:5c:10:12:86:70:b1:a2:ae:
f9:f2:8c:03:bb:ad:4b:d6:df:e4:ec:3b:24:26:ca:
6a:2a:39:d1:d5:37:e0:e2:29:61:3a:ce:45:3f:17:
5e:c7:22:bb:37:2e:88:c5:dd:20:db:23:a3:83:17:
77:15:44:b1:7d:5c:a8:83:2a:24:ed:60:7b:19:0a:
97:83:16:3c:a6:1f:ed:85:81:b8:f4:38:c5:f6:72:
1f:48:7c:31:cc:ba:2e:39:5e:23:72:fb:06:0a:ba:
c8:f8:82:87:57:53:0a:b3:e3:dd:46:ca:57:f9:b7:
43:36:9a:65:dc:92:9c:d4:5c:5b:49:69:36:d3:55:
72:49:0a:6c:b8:34:12:2c:ca:71:fb:0a:f1:39:a4:
6a:cc:57:3f:37:10:e3:9b:d8:53:b3:d6:89:ff:89:
af:d9:ab:bc:5a:63:98:d1:f4:fd:b7:fe:f8:1c:e5:
a8:5a:42:32:3e:b8:27:06:dc:26:e5:33:75:b4:55:
a7:dc:c2:90:5c:4e:97:14:c1:07:ae:4e:15:59:b9:
2f:a2:ec:28:42:3f:ce:64:b2:39:5c:bb:89:eb:e8:
c7:3a:4e:70:56:95:8d:fc:57:90:cd:5e:60:2a:cf:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4D:B5:DC:93:1E:71:08:C8:E9:72:6D:32:C8:8D:43:D3:E8:98:7A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bU213JMecQjI6XJtMsiNQ9PomHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:8a::/48
Signature Algorithm: sha256WithRSAEncryption
0d:46:de:9e:6e:0c:23:0f:47:da:39:e8:89:c3:d1:e9:bf:a7:
74:6a:7e:1f:be:37:29:52:14:f8:27:ef:2d:f4:97:a1:73:3a:
aa:d6:4d:73:47:0c:68:1d:43:a9:80:9a:59:70:fe:94:78:d9:
6c:59:12:31:54:00:52:74:33:f1:8c:57:b3:30:e5:9a:34:40:
b9:19:ed:88:6b:2d:94:71:65:a8:e1:e2:c5:b6:9b:8f:3a:8b:
02:7c:8e:37:ce:36:c4:83:78:ab:e0:1b:ba:f8:0e:b1:e2:ff:
17:b7:f4:34:de:63:6d:3d:e4:fb:c6:0d:6a:04:4d:7a:64:88:
c2:7f:9b:df:4f:08:8d:2d:79:fd:3a:fa:49:ba:fb:41:23:71:
21:bc:6c:63:e8:c9:e7:7a:8a:af:49:70:8f:0d:c9:0b:a6:ec:
80:66:0b:da:68:03:cb:76:97:f4:fc:79:e7:f5:a3:92:81:97:
8c:02:cb:2a:52:1d:f8:ee:f5:78:a5:ae:10:c1:3e:2a:27:02:
36:58:4a:d9:9d:8b:c5:1f:6f:ca:81:36:01:00:2b:6d:99:9b:
e1:68:91:42:56:9a:34:cd:c3:cd:ca:b8:d8:1a:4d:df:34:2f:
8a:f2:fe:8c:b4:26:6e:38:c0:10:0e:83:54:c8:a2:3e:e4:4e:
44:ab:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org