Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/d9iseIJkoYl9eyujDb63K0u3kIU.roa
File: d9iseIJkoYl9eyujDb63K0u3kIU.roa (raw, json)
Hash identifier: tIJiI5MufFCTy9234PrQfU0czkhgRZA+W82E7NJYFWc=
Subject key identifier: 77:D8:AC:78:82:64:A1:89:7D:7B:2B:A3:0D:BE:B7:2B:4B:B7:90:85
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6B42C2A7B652A083B8F01CEAD821A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/d9iseIJkoYl9eyujDb63K0u3kIU.roa
Signing time: Tue 06 Feb 2024 18:38:16 +0000
ROA not before: Tue 06 Feb 2024 18:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199705
IP address blocks: 2a0f:b241:12f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:b4:2c:2a:7b:65:2a:08:3b:8f:01:ce:ad:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77d8ac788264a1897d7b2ba30dbeb72b4bb79085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:74:54:bb:31:5f:fd:9a:bc:bc:11:b1:e5:
34:4a:7b:94:d1:ba:2f:44:de:f4:ef:0e:6c:42:94:
74:1a:6b:16:03:1c:4a:7b:8c:d2:3b:35:15:b4:96:
51:56:23:d2:8d:e6:a1:54:88:22:63:09:16:68:bc:
e4:70:cd:32:ab:6b:93:26:0f:ee:43:6a:fe:e7:50:
04:e7:6d:24:74:2b:f9:9f:36:db:0c:5c:0a:50:ad:
9b:be:6f:d9:20:de:56:fb:92:44:44:ea:1d:e9:fe:
bf:74:eb:41:c3:71:e9:f9:d7:47:c1:2b:07:20:ea:
17:d2:08:5b:38:fb:99:05:8d:3c:e4:f6:9b:59:45:
fd:b8:da:80:93:b8:34:4f:0d:25:aa:c9:e1:60:b4:
b5:34:4d:a5:8e:33:94:3f:b6:48:7a:ec:ca:5a:63:
fc:e8:1f:c6:a3:9c:58:47:d7:87:2f:cb:38:9b:6a:
fe:f3:24:b9:c6:32:ae:c7:c1:95:bc:f2:77:1a:2f:
56:7e:19:18:83:a4:d6:8f:97:a1:53:c8:ad:ea:55:
dc:8b:a1:a8:d0:5c:8a:72:fc:a6:60:8d:d2:e1:6e:
01:a6:bc:40:64:52:b4:c9:4e:d5:79:e9:a4:93:85:
fb:62:4e:a2:01:a3:b3:ef:1f:6f:13:e4:86:45:c5:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D8:AC:78:82:64:A1:89:7D:7B:2B:A3:0D:BE:B7:2B:4B:B7:90:85
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/d9iseIJkoYl9eyujDb63K0u3kIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12f::/48
Signature Algorithm: sha256WithRSAEncryption
2d:d9:15:e6:e8:47:6d:93:e7:05:3b:42:77:2c:d0:4a:a2:e0:
32:ac:75:6b:74:58:fd:0e:09:0b:ba:37:45:57:a4:cb:55:f5:
0b:cf:66:78:87:19:0a:91:22:02:36:63:36:5d:ce:e3:fb:3b:
9a:c7:32:3a:24:44:dd:49:4c:c7:3c:2e:4a:32:5b:9a:08:83:
a8:2a:ff:42:6b:50:19:9f:e4:5e:01:ce:7b:e9:60:ec:72:aa:
34:5a:96:60:63:77:93:6b:21:7b:aa:12:2e:34:fd:05:a3:4e:
fb:5b:a7:63:3a:b8:91:4d:e5:ac:49:5e:3b:16:12:34:0d:6e:
7c:63:a0:05:d3:63:0d:d7:ee:fe:d7:95:37:a0:73:26:c4:9c:
28:be:fc:ec:81:f0:c0:17:f6:d9:38:30:f3:8c:79:69:d1:05:
67:00:71:e8:8a:df:c9:d4:9b:e1:a8:0b:31:cb:da:9d:1b:ec:
b5:2e:5b:fc:75:4e:67:e8:b9:6e:dd:14:1f:b4:d4:0d:db:3b:
45:30:b7:0b:a7:f2:4a:e1:cd:76:98:02:f9:4d:b6:70:c6:8b:
3f:a8:4d:70:96:d4:c7:29:4c:34:0c:71:ea:a4:54:9b:52:f6:
3b:6e:0e:8a:38:72:4f:40:28:6c:58:59:26:ca:d7:a2:e6:a3:
31:ff:f2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org