Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jgqRusGyCUxK3lIaP8nEKfoyCdE.roa
File: jgqRusGyCUxK3lIaP8nEKfoyCdE.roa (raw, json)
Hash identifier: 2OBzgsDnOkgweW+1bPzeicyyIiIZfzF54fcRR67KE1g=
Subject key identifier: 8E:0A:91:BA:C1:B2:09:4C:4A:DE:52:1A:3F:C9:C4:29:FA:32:09:D1
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96ADAA95BD37E55ADC237E9965E908
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jgqRusGyCUxK3lIaP8nEKfoyCdE.roa
Signing time: Tue 06 Feb 2024 18:03:17 +0000
ROA not before: Tue 06 Feb 2024 18:03:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215999
IP address blocks: 2a0f:b241:5a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:ad:aa:95:bd:37:e5:5a:dc:23:7e:99:65:e9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e0a91bac1b2094c4ade521a3fc9c429fa3209d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:9e:80:d1:f3:ca:92:d1:66:0e:2b:94:c4:
90:35:1c:fe:2a:2a:bb:fe:d9:3c:94:89:bf:f2:4b:
b5:93:c1:51:34:0f:fd:89:61:a1:04:64:24:c5:24:
fd:48:7f:62:36:46:ad:32:39:3f:26:2a:25:53:a9:
c5:05:d3:00:18:8e:9b:6d:80:b7:a3:02:c8:01:95:
19:98:b8:f1:f9:ae:eb:26:43:ef:bb:0f:22:55:cb:
5f:ac:bb:09:40:3e:97:ca:3a:24:d2:3a:2a:ff:78:
33:73:ca:24:41:84:c3:a5:79:d3:32:a8:f1:b5:45:
ef:af:9b:b1:38:fb:51:c5:6a:20:1e:39:26:bb:ba:
7f:c5:29:80:54:01:64:a3:17:65:ba:6c:9e:9f:96:
8f:e4:a7:15:00:90:90:32:e2:ae:a7:50:e7:6a:32:
71:84:6e:4f:5d:fe:2d:7b:58:2e:38:40:d3:56:1e:
d1:76:9e:7d:88:ca:32:51:e5:cb:9e:cb:68:40:80:
e8:e0:83:15:ff:09:ab:8f:7c:32:c9:b6:8f:18:c9:
88:1a:5f:e9:a5:71:4b:ab:68:f1:72:f4:21:96:f3:
35:28:ae:0e:0d:5b:96:ee:1b:fc:39:20:1c:99:14:
b2:ab:25:48:e0:92:2f:3a:5b:0d:a1:e6:f7:81:dc:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0A:91:BA:C1:B2:09:4C:4A:DE:52:1A:3F:C9:C4:29:FA:32:09:D1
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/jgqRusGyCUxK3lIaP8nEKfoyCdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:5a::/48
Signature Algorithm: sha256WithRSAEncryption
2f:a1:42:77:ad:14:00:4c:7b:19:bc:1d:42:20:53:93:33:35:
88:60:ba:db:3c:6b:ef:68:06:c4:2a:90:7b:ad:82:01:b3:2b:
52:36:f9:8b:7e:1e:2c:3d:a5:4f:14:5c:2b:c5:54:9f:03:d9:
16:ae:b7:b3:2c:bb:75:ab:be:d8:34:36:48:74:7a:dd:80:f5:
a2:65:bb:15:95:d8:c6:15:c5:e4:42:51:db:81:11:53:3b:20:
0c:23:d2:b8:83:fa:dc:4a:1f:df:b9:36:76:e1:a3:74:5d:00:
4e:ea:61:86:44:1f:4d:5f:9e:07:89:f7:b6:82:a9:8e:42:78:
03:d3:39:dd:f0:13:4b:b4:61:ee:79:51:44:73:f8:11:71:29:
b2:2b:a0:49:b0:14:12:72:c3:8c:6c:5d:e2:43:ad:92:ad:13:
c1:35:c2:62:01:0b:1f:59:61:fe:81:c2:a9:80:2e:f6:56:10:
cf:35:f8:84:52:76:7b:a6:6c:5f:b2:eb:92:a2:d7:9b:8f:81:
54:46:01:83:67:f8:29:2f:a3:47:8d:67:f1:9c:ec:2d:93:48:
f0:1d:71:cc:3a:e4:70:50:49:1e:c9:99:4d:63:13:5d:ba:28:
c6:3f:95:8f:41:26:02:b6:5a:f5:c1:d2:3f:f0:e0:8c:95:0c:
ff:b5:af:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org