Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jVEirIzKiuiqu2r_DDKW9-0OXMo.roa
File: jVEirIzKiuiqu2r_DDKW9-0OXMo.roa (raw, json)
Hash identifier: 2fcD28aIpou5sMgeIw8ZqbOwPVueBc1EYgjLosbWi68=
Subject key identifier: 8D:51:22:AC:8C:CA:8A:E8:AA:BB:6A:FF:0C:32:96:F7:ED:0E:5C:CA
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACA3C4E373AF55255F4594AC7CF19C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jVEirIzKiuiqu2r_DDKW9-0OXMo.roa
Signing time: Tue 06 Feb 2024 18:27:16 +0000
ROA not before: Tue 06 Feb 2024 18:27:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210738
IP address blocks: 2a0f:b241:f9::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:a3:c4:e3:73:af:55:25:5f:45:94:ac:7c:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d5122ac8cca8ae8aabb6aff0c3296f7ed0e5cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:57:80:33:02:a4:8a:84:48:62:94:71:40:
1c:7f:5a:41:6f:99:a8:be:92:be:0d:fc:e4:78:ce:
73:4c:9f:7e:b6:a5:67:83:42:0b:c5:86:5a:60:cf:
d6:77:b1:c0:d2:a8:40:2f:d3:c7:fd:e0:47:25:19:
c3:ef:ab:df:02:7b:fe:a6:76:b4:bc:86:bd:5d:60:
ed:a7:7b:fa:24:f3:8c:fe:70:06:c8:cb:18:03:c1:
d4:df:e8:ac:e2:1f:b7:c1:d5:f2:34:92:7c:4a:c6:
ed:8a:96:c3:a8:47:fb:4e:53:9d:95:09:a5:ef:c0:
17:2f:ff:49:a6:83:98:0b:90:9e:3b:e2:8f:eb:db:
fc:61:5f:1d:ca:dd:6f:94:8a:85:be:4e:46:ca:8e:
80:51:e3:65:06:07:4e:61:f6:a2:e6:5b:27:2e:a9:
73:42:27:cd:19:95:80:a3:37:06:97:e1:dc:43:ec:
d4:9b:33:ac:4f:ee:c1:56:4e:6c:d7:0f:46:2f:4c:
52:5b:50:00:6e:02:e1:23:26:41:c0:a7:1c:6f:8f:
db:3d:f1:f8:de:34:8d:ab:ea:55:d5:9e:01:7b:3f:
76:98:5b:a8:04:f3:1d:c5:ea:ac:ff:fa:64:10:e4:
93:9c:40:98:70:4f:3c:ee:8c:b6:54:c6:1d:a9:8b:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:22:AC:8C:CA:8A:E8:AA:BB:6A:FF:0C:32:96:F7:ED:0E:5C:CA
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jVEirIzKiuiqu2r_DDKW9-0OXMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:f9::/48
Signature Algorithm: sha256WithRSAEncryption
85:73:e2:f1:0c:64:d2:e2:f9:b3:03:0f:a3:b8:cb:99:b5:23:
be:6c:92:8e:6e:77:7e:f9:5a:7e:50:4b:95:43:af:dc:1b:ae:
f6:fc:6e:27:77:b0:71:4e:3b:f2:57:c6:cb:6b:ef:3f:06:88:
f8:fa:c7:fa:40:b7:2a:7f:42:af:3e:cd:90:51:4e:9d:a7:69:
e2:6d:a6:9b:59:0b:6b:2c:a9:5d:cb:ae:ae:79:93:bf:ba:cc:
03:56:7a:53:72:2e:79:88:e7:ff:9d:39:5e:10:2b:ba:d4:9d:
e7:22:31:38:a1:97:6c:76:15:77:f4:f5:6a:12:e2:85:c4:81:
bc:70:1a:5c:bb:05:2c:ff:69:70:4e:05:ca:69:21:00:be:d2:
f3:94:d0:89:22:d0:a3:da:00:6f:ad:f3:7b:77:f1:c5:04:10:
32:58:8f:ce:7a:37:90:ff:df:e8:fc:4f:2b:f0:79:03:50:c2:
22:53:17:05:72:aa:f9:9d:65:6e:fd:d6:dd:08:1e:45:ab:f9:
5d:a3:f6:98:0c:7e:07:40:fa:3c:1c:ff:c3:70:0e:63:18:64:
23:8a:5b:5d:5b:b4:f6:c4:bc:17:9f:39:46:bb:39:27:4e:74:
f8:2c:65:89:7a:36:61:4c:a9:35:40:eb:3d:dc:07:2d:9f:d8:
82:44:f1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org