Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cUETR7nPU00d6PtorCP5MBPi-Xo.roa
File: cUETR7nPU00d6PtorCP5MBPi-Xo.roa (raw, json)
Hash identifier: ffU5RK7maAc/TTYAzxaweHOygB5ipT15v09c6Q937nY=
Subject key identifier: 71:41:13:47:B9:CF:53:4D:1D:E8:FB:68:AC:23:F9:30:13:E2:F9:7A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA637EAB79E115735A3BCC069EB01F4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cUETR7nPU00d6PtorCP5MBPi-Xo.roa
Signing time: Tue 06 Feb 2024 18:20:16 +0000
ROA not before: Tue 06 Feb 2024 18:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197867
IP address blocks: 2a0f:b241:75::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a6:37:ea:b7:9e:11:57:35:a3:bc:c0:69:eb:01:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71411347b9cf534d1de8fb68ac23f93013e2f97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:58:07:d8:b6:98:33:fb:93:80:d5:be:eb:
cb:c5:15:9a:ad:8c:44:c9:ed:01:7c:ad:c8:98:ab:
cd:24:2c:93:19:8b:53:e9:4f:58:e2:ba:99:86:fa:
3e:b5:79:73:7a:00:20:aa:9c:56:2a:0a:ed:02:37:
4a:46:63:fe:ee:3e:2f:4e:21:9b:1f:1c:09:e0:f6:
55:2d:5d:47:60:70:ae:4a:15:42:72:da:a7:54:4d:
22:c0:5d:fe:e7:99:75:00:57:58:3b:a1:d9:fa:76:
c3:5f:a4:64:e5:33:71:c5:02:61:6a:81:7e:d7:78:
67:51:00:81:8d:d1:03:1f:3d:4d:c1:e7:68:59:eb:
af:4d:d6:ca:f7:0b:db:ce:09:84:b3:47:a7:79:c1:
c1:a2:95:e0:3a:f8:29:0b:d1:26:95:3f:58:cd:7e:
1b:af:4e:02:ba:a2:85:d3:32:31:9d:d8:e2:2b:3a:
32:50:05:0c:20:9b:58:3a:51:6b:13:1f:fb:a1:2e:
8a:ea:67:81:a6:5a:02:e5:8d:e9:4c:f6:78:f6:d5:
bf:da:e4:b2:5f:88:66:f3:19:7c:b5:8f:33:73:41:
a2:76:73:14:04:e1:49:6c:e2:0b:0e:eb:2f:86:b0:
b6:04:52:8f:11:3c:91:bf:4a:fe:ca:ab:a5:57:3a:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:41:13:47:B9:CF:53:4D:1D:E8:FB:68:AC:23:F9:30:13:E2:F9:7A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cUETR7nPU00d6PtorCP5MBPi-Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:75::/48
Signature Algorithm: sha256WithRSAEncryption
00:fd:87:7b:1a:a8:cd:94:29:b6:17:51:b3:e8:5a:6d:1e:db:
86:dc:e7:75:40:17:88:ad:27:e0:17:00:a1:47:e5:8b:09:99:
91:a7:0b:fe:39:95:68:91:d2:74:60:ce:78:65:88:b0:6c:71:
e9:c4:c1:e3:2c:58:5f:39:88:38:a0:9f:a0:55:76:88:80:e9:
c1:a7:b2:98:23:59:dc:57:6a:90:38:89:41:8a:03:0d:d1:e9:
93:52:e0:a3:a3:a6:5e:15:e1:46:01:9a:65:e1:19:4c:43:62:
62:ac:0d:2c:24:46:38:cb:5b:70:0b:ff:f3:da:70:7d:7f:5d:
7c:ed:7d:79:1a:6b:fb:bf:1f:f2:54:da:17:9f:ce:8e:6c:d2:
73:cf:a9:11:95:e1:f2:e4:92:86:91:61:e5:d5:1b:c7:d7:75:
db:24:0d:c4:0c:ce:86:6c:5e:ec:79:a7:cd:b3:8f:ce:48:0b:
81:87:e8:a9:c1:53:c2:46:c3:a3:84:9a:df:7f:8d:7a:e0:d6:
90:07:6e:d3:3e:7b:1b:97:2f:08:8a:43:94:bb:b6:5d:77:de:
8c:21:a9:25:95:be:2d:e4:cd:b5:71:ab:7f:37:77:91:72:08:
8a:58:1e:29:ee:72:57:4c:17:4a:7e:cb:cc:d7:e1:d0:1d:ba:
11:b6:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org