Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eTYpd1syspDqmZhCDBaY40AWqEc.roa
File: eTYpd1syspDqmZhCDBaY40AWqEc.roa (raw, json)
Hash identifier: B4U50l8GcN6txp2/tm7y3/qFQANSBcxaSz15nJIYrsM=
Subject key identifier: 79:36:29:77:5B:32:B2:90:EA:99:98:42:0C:16:98:E3:40:16:A8:47
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F06435FB7B647496D958602F6254D8
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eTYpd1syspDqmZhCDBaY40AWqEc.roa
Signing time: Wed 07 Feb 2024 05:00:31 +0000
ROA not before: Wed 07 Feb 2024 05:00:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51992
IP address blocks: 2a0f:b241:15e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:64:35:fb:7b:64:74:96:d9:58:60:2f:62:54:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=793629775b32b290ea9998420c1698e34016a847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:55:84:b1:61:cf:9e:2b:20:c0:af:fa:04:
7b:5b:be:1b:e7:a6:37:59:f8:38:03:4d:9c:b7:44:
a6:c9:f7:8e:c4:3a:23:02:db:86:51:c6:d4:fa:17:
d1:06:eb:29:9f:cc:51:54:0a:f6:df:1c:17:c3:1e:
82:94:45:9d:62:45:9d:29:fd:6e:7d:aa:07:a2:9f:
ba:6b:89:4e:d0:c6:c4:1a:0e:e6:c9:ad:db:45:0e:
78:2b:89:85:6d:15:f2:42:ab:f1:a3:97:cf:66:5f:
24:76:4b:d7:9a:5a:aa:8a:79:09:3d:fa:f7:1c:3c:
8d:fe:5b:42:14:57:2e:e5:16:e1:28:2d:28:07:99:
6a:06:a7:45:ea:9e:1a:c4:13:10:ae:4c:58:84:c9:
4b:8e:e0:7b:1c:bb:74:bd:04:59:d7:0e:f7:76:c9:
74:a2:51:46:aa:c0:d6:93:ca:60:00:31:48:2b:27:
1b:49:d8:84:e6:92:25:7b:b8:15:33:bf:a0:79:80:
b6:ce:b3:a7:75:49:8e:a0:bd:53:dd:e1:d5:44:20:
eb:7e:3c:33:58:96:17:4a:27:65:79:18:b8:57:d7:
70:05:86:64:d5:35:90:99:c0:74:5d:d6:be:62:0e:
f7:be:9c:18:98:cd:f7:a1:b0:76:f8:68:7e:2f:34:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:29:77:5B:32:B2:90:EA:99:98:42:0C:16:98:E3:40:16:A8:47
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eTYpd1syspDqmZhCDBaY40AWqEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:15e::/48
Signature Algorithm: sha256WithRSAEncryption
85:fa:5f:89:27:92:74:4b:32:47:bc:16:c5:a2:fc:42:bb:ce:
38:11:ea:bb:54:10:16:b9:0a:69:6a:e8:a6:ee:8c:99:0e:aa:
5d:04:51:c9:d9:b5:c6:33:bd:a9:b2:ab:71:a8:5c:d0:8d:45:
87:83:fa:35:0b:e7:13:41:c0:36:80:95:f6:5c:e4:8b:9e:e3:
22:30:c6:54:a2:91:e0:9e:ba:3b:5a:6e:10:e7:0b:7a:27:1e:
64:29:24:0d:a8:e2:20:f2:1f:79:e3:ef:c8:9d:51:ad:aa:9d:
1a:66:8d:16:d9:65:a2:e5:66:fe:6e:ea:cd:ca:52:91:98:a9:
aa:40:14:e7:ff:eb:42:27:1c:6b:25:c8:29:08:ea:d5:28:c9:
b4:c4:fb:55:94:48:c7:ee:49:3b:82:62:91:7e:a5:5c:ba:0a:
ba:4f:80:7a:66:70:3d:ac:6f:6d:d1:b4:78:02:d1:83:7a:ba:
e9:4e:4d:60:11:aa:32:ca:6b:95:61:e6:3f:dc:d2:e6:71:5d:
07:ab:72:fb:9f:a4:eb:1e:5c:8d:1d:30:69:bd:cc:b4:6d:49:
da:1d:ed:0b:f9:00:fb:a2:d5:05:ac:d2:ee:c6:77:fa:62:6b:
6c:e0:02:e4:1d:09:22:e3:5e:98:2c:e6:eb:a9:54:b0:c0:4e:
4e:5e:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org