Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jI8w2RzSMmZDJrOcQ5gqhkIT_zU.roa
File: jI8w2RzSMmZDJrOcQ5gqhkIT_zU.roa (raw, json)
Hash identifier: /EwCWZSIIYUuG5wKJuNWTXoZVwCBQrtJ5K1m33wZmFw=
Subject key identifier: 8C:8F:30:D9:1C:D2:32:66:43:26:B3:9C:43:98:2A:86:42:13:FF:35
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F93A72074F06C55FB7F25F7449F8FB7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jI8w2RzSMmZDJrOcQ5gqhkIT_zU.roa
Signing time: Tue 06 Feb 2024 17:59:59 +0000
ROA not before: Tue 06 Feb 2024 17:59:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216266
IP address blocks: 2a0f:b241:2c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:93:a7:20:74:f0:6c:55:fb:7f:25:f7:44:9f:8f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:59:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c8f30d91cd232664326b39c43982a864213ff35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:03:38:94:b2:19:7f:f2:a7:dd:dc:b9:0d:
73:39:85:56:36:fe:d6:b1:00:bd:8d:c5:ff:9d:a3:
fd:5c:b1:39:c7:3b:3a:5d:7b:24:5d:c7:63:ac:6a:
af:ba:ee:56:05:ec:3d:d9:09:cc:1f:57:28:40:e5:
46:2c:da:44:5a:6f:ae:e3:67:76:93:19:7c:c4:27:
d6:2b:e9:dc:f6:17:19:db:08:3f:34:41:23:3f:38:
60:6b:7e:cf:78:96:4c:cd:dd:03:c3:5d:49:e4:c4:
d0:b3:a2:30:b2:83:19:c8:52:60:5a:e4:c4:55:9a:
30:4d:06:0a:49:4c:f4:3f:11:7e:5a:d1:a8:1f:df:
35:4f:62:ed:b0:09:db:c6:a1:b5:8e:00:5b:50:8f:
75:fb:99:f9:66:77:73:22:40:24:48:8c:70:76:eb:
24:a5:08:f6:d7:38:18:d0:a7:d6:84:9e:5f:38:b1:
61:82:25:86:3b:f3:f3:50:f4:e4:d3:19:8e:37:22:
e4:76:d4:23:08:a9:b3:0a:21:7b:83:16:99:25:42:
63:73:36:7b:57:ca:04:4e:ff:03:4f:52:ea:5f:53:
4f:35:43:6f:60:aa:53:76:56:d7:d5:a2:24:91:49:
f2:49:f1:b6:47:8f:3c:4f:9f:2d:1f:9e:f2:8d:b4:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8F:30:D9:1C:D2:32:66:43:26:B3:9C:43:98:2A:86:42:13:FF:35
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jI8w2RzSMmZDJrOcQ5gqhkIT_zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:2c::/48
Signature Algorithm: sha256WithRSAEncryption
46:b5:56:9b:d4:3c:69:c5:fb:86:c6:3a:bb:f5:62:e9:03:7f:
33:f0:42:7d:4b:b8:97:be:16:28:1e:f8:09:a4:cb:ce:1b:1f:
61:83:61:86:f8:3b:89:80:00:65:04:20:bd:38:36:a5:8e:45:
bc:e5:7f:aa:c5:cd:63:fc:e9:2f:0f:ba:f9:ef:d9:b2:28:73:
fa:01:66:60:e6:78:70:3d:7c:cd:25:90:7d:ac:cf:37:38:8c:
e1:bb:70:c8:b2:c4:54:a9:c9:6a:cd:90:4c:36:24:78:b6:05:
02:b3:2c:4e:24:56:43:b0:cf:52:ef:0a:9d:d4:23:74:72:9d:
3a:81:c1:d9:7a:17:bb:90:8f:3e:66:f2:de:c0:6d:27:a4:18:
31:fc:99:85:ba:36:1d:d5:b2:06:3f:39:4a:f6:20:d0:ec:61:
cd:77:16:23:1f:81:3b:a0:28:db:3f:2e:84:12:12:6a:b2:0f:
98:38:e9:f6:79:ea:d7:48:a3:ac:6f:48:74:cf:c5:8a:2e:f0:
8f:2d:de:82:e8:de:81:35:ca:f9:27:69:86:23:b9:b7:e0:91:
ae:83:44:e2:10:35:30:a6:a0:33:5b:b1:f6:07:1c:9d:73:63:
a6:15:a5:13:ba:83:f7:15:70:a8:be:db:14:21:96:4a:22:14:
2a:66:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org