Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eUp_a9XKkfZUhDonJ3fKcMvcCsE.roa
File: eUp_a9XKkfZUhDonJ3fKcMvcCsE.roa (raw, json)
Hash identifier: JKUZnJiwwcF1QhYSHMFHUuZUxecnht6RgCZHsMH7AOI=
Subject key identifier: 79:4A:7F:6B:D5:CA:91:F6:54:84:3A:27:27:77:CA:70:CB:DC:0A:C1
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAAD44BD46CFF109F59A5D604B5ADBF
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eUp_a9XKkfZUhDonJ3fKcMvcCsE.roa
Signing time: Tue 06 Feb 2024 18:25:18 +0000
ROA not before: Tue 06 Feb 2024 18:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203174
IP address blocks: 2a0f:b241:e4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:d4:4b:d4:6c:ff:10:9f:59:a5:d6:04:b5:ad:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=794a7f6bd5ca91f654843a272777ca70cbdc0ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:a6:17:d2:3b:03:e3:e5:7a:e7:bf:86:ee:
57:92:ce:a3:b6:9f:5c:56:f4:ee:d0:14:63:2a:7f:
1e:d6:7c:6a:c0:a4:fa:f1:98:3b:83:92:a9:a4:14:
8f:45:96:4b:ea:54:2b:62:91:f4:a0:4f:2c:e5:2c:
9d:5c:6b:59:e0:4f:6a:72:26:60:27:df:09:97:20:
b8:e1:95:38:44:d7:75:0d:75:c4:dd:c3:50:19:94:
de:72:2d:b5:1a:b5:47:b8:6a:d5:1d:da:b1:56:d7:
bd:c7:09:7e:f2:ba:22:7d:af:2a:61:b8:c5:a0:30:
91:a7:7c:b6:d9:56:cc:6b:1b:9a:70:64:ea:15:ab:
64:e7:de:fb:0d:12:67:4a:4b:be:16:5c:bc:49:52:
8d:68:f7:8b:98:2e:f2:87:38:16:77:4e:3b:9c:80:
76:30:c1:b9:49:55:a4:85:32:b0:60:0f:cb:61:e5:
f7:5a:0c:41:d7:bf:df:aa:75:e6:6d:08:35:52:04:
69:59:86:6a:24:8e:cd:78:34:80:55:7e:d4:10:eb:
ca:f8:ae:fe:3c:cc:aa:5c:f5:06:3f:bf:17:27:b9:
c4:3c:61:cb:21:2e:c7:9f:d4:ff:f1:c9:81:dd:5b:
bc:ff:a5:69:e3:10:f0:b9:38:59:87:76:93:76:9a:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:7F:6B:D5:CA:91:F6:54:84:3A:27:27:77:CA:70:CB:DC:0A:C1
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eUp_a9XKkfZUhDonJ3fKcMvcCsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e4::/48
Signature Algorithm: sha256WithRSAEncryption
85:50:27:cb:ca:8a:7f:0e:c8:15:8a:e9:89:7d:79:3b:c0:83:
8b:8a:39:fe:92:bf:c9:8b:2b:ec:73:90:c6:ae:7c:b5:8a:d8:
f7:4f:b0:f8:c8:d6:0c:a4:ae:4b:bf:1c:20:ff:77:2e:aa:98:
02:4d:ea:86:b2:ca:7f:7f:e4:ef:d2:83:76:62:03:1a:e1:07:
e3:c2:c1:a4:7b:0a:d4:64:01:02:70:19:06:96:a5:07:d8:f8:
38:00:0f:90:ff:e5:a0:62:59:3e:63:c4:7d:5c:60:0c:58:97:
ec:e1:ff:b9:27:36:cf:17:ea:4d:2e:49:fa:dd:00:9e:aa:b5:
e5:ef:34:0c:ad:4f:65:a2:5f:16:dd:a0:e4:31:07:01:49:10:
a6:49:0b:98:0f:a8:b3:37:3b:06:6d:5c:b8:36:dd:5e:ff:b6:
d4:4b:29:48:bb:e8:9a:61:fc:81:cf:21:58:06:a3:e1:bb:da:
f8:de:bc:69:4d:d2:42:19:88:18:fb:a9:8c:bb:81:42:5d:60:
0d:5d:b1:ac:52:a4:a0:65:2a:96:8a:f1:3f:9f:53:77:29:77:
d2:10:73:cd:76:a4:a1:b2:48:f5:80:89:b6:c3:d8:a3:55:9c:
54:53:98:a4:74:41:f5:1a:e2:e5:36:48:e6:55:4c:be:80:85:
72:55:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org