Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jMUkIEkQdhZ4zJJnqt-BLGLZRa8.roa
File: jMUkIEkQdhZ4zJJnqt-BLGLZRa8.roa (raw, json)
Hash identifier: 4LvnfAC24k6rfr2LQOQVX0Ql5kmPkypFm6WK8riOv2E=
Subject key identifier: 8C:C5:24:20:49:10:76:16:78:CC:92:67:AA:DF:81:2C:62:D9:45:AF
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96AD308B011F053721FE83F23CB285
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jMUkIEkQdhZ4zJJnqt-BLGLZRa8.roa
Signing time: Tue 06 Feb 2024 18:03:17 +0000
ROA not before: Tue 06 Feb 2024 18:03:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215934
IP address blocks: 2a0f:b241:58::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:ad:30:8b:01:1f:05:37:21:fe:83:f2:3c:b2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cc524204910761678cc9267aadf812c62d945af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:7e:38:57:da:aa:a9:46:8f:7c:5d:56:87:
77:10:ac:9c:06:0d:d3:e2:05:42:94:20:5d:ba:bd:
ee:7b:84:80:02:dd:d9:b4:00:e2:a6:95:38:c6:96:
46:39:e4:c3:67:7f:51:0f:7b:5e:ab:b1:c6:bf:cc:
7f:45:b6:e2:6e:47:3c:67:84:0c:74:46:4c:d7:68:
0c:39:b3:e6:94:6c:4c:df:ea:20:e7:60:51:0b:62:
a5:5d:24:72:8e:20:cd:7b:c8:56:f7:e2:dd:57:5c:
6d:44:ae:a9:0c:81:bd:f2:5e:ef:36:c7:12:60:04:
0a:d9:90:e5:0a:5b:bb:03:d1:42:83:a8:c1:7b:70:
51:cb:7b:40:fe:a1:56:bc:8e:ee:d3:68:77:87:18:
03:3e:10:32:45:93:3c:e2:1d:e8:2b:27:ae:59:ba:
27:19:ba:55:23:49:f4:fb:a1:6e:19:a1:4f:23:c6:
34:92:00:7c:e1:0c:40:71:01:ba:60:42:15:e1:da:
b5:f2:14:e4:4d:6f:4b:92:a5:08:22:1c:cb:2f:fb:
4e:cc:4c:b7:11:83:40:6a:f0:ca:68:4f:55:a4:d8:
45:f5:6c:9d:d8:43:b2:eb:08:d9:4a:d3:47:a6:7b:
31:7f:7c:ba:6a:1d:ed:4c:90:2d:2e:ac:ef:c6:ff:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:24:20:49:10:76:16:78:CC:92:67:AA:DF:81:2C:62:D9:45:AF
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jMUkIEkQdhZ4zJJnqt-BLGLZRa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:58::/48
Signature Algorithm: sha256WithRSAEncryption
8c:f2:0c:c8:87:15:b7:e7:f9:1b:52:d3:0f:a9:16:42:c0:2d:
36:2a:f4:e8:e8:63:0a:ed:6f:3e:fc:ab:cd:a5:c9:4e:d7:d8:
4b:f3:ac:d7:8f:e4:31:ca:90:da:46:fc:14:5a:6d:2f:fb:50:
6d:e8:f4:5b:4f:15:cc:f1:4b:3a:e4:75:c8:0e:bb:8a:90:29:
d6:77:d9:27:71:10:25:d8:bb:53:d5:c4:55:c0:a6:b7:60:ca:
dd:ab:2b:97:7e:df:bd:88:57:e2:80:ad:fd:51:e1:65:8a:7a:
af:92:13:48:f7:dc:2e:1c:cb:7d:22:ea:cd:3d:06:f9:72:f3:
b3:3c:7d:b5:19:50:19:06:4f:31:62:99:7c:9c:52:5a:e6:4a:
1b:38:9c:66:2a:4e:43:d2:12:ce:87:04:b0:df:f2:47:87:db:
67:64:66:79:31:0d:ef:b1:28:cb:89:8d:c4:fc:af:0f:12:e4:
fe:8a:13:34:0e:25:9a:59:3b:b6:84:d1:2d:4b:2a:c2:e6:b9:
1d:57:41:c6:84:2d:ed:ba:21:44:75:56:e2:a6:d1:1f:5e:aa:
fc:63:3c:d9:31:ea:eb:2d:eb:03:df:e3:8d:bd:45:29:73:1f:
88:49:2f:56:83:61:a1:cb:e5:95:d4:a9:47:4b:b1:34:81:ca:
d3:2f:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org