Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kzGu5h8JPS481TOaVTYNVetgTUI.roa
File: kzGu5h8JPS481TOaVTYNVetgTUI.roa (raw, json)
Hash identifier: c2bAnDZi6slmcfGIvOkuy02ejAOSws11IAW468be6dc=
Subject key identifier: 93:31:AE:E6:1F:09:3D:2E:3C:D5:33:9A:55:36:0D:55:EB:60:4D:42
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F9494BA67786BE378EEA513E59BBA30
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kzGu5h8JPS481TOaVTYNVetgTUI.roa
Signing time: Tue 06 Feb 2024 18:01:00 +0000
ROA not before: Tue 06 Feb 2024 18:01:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204829
IP address blocks: 2a0f:b241:37::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:94:94:ba:67:78:6b:e3:78:ee:a5:13:e5:9b:ba:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:01:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9331aee61f093d2e3cd5339a55360d55eb604d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:c9:1b:52:cd:91:be:74:88:e1:85:5f:21:
ac:68:85:04:50:94:2d:47:05:03:31:72:38:a4:22:
93:4f:92:2d:f3:d2:39:a9:d6:f4:5e:e7:bc:22:f3:
b1:e9:f9:37:34:00:96:5e:e1:29:82:d4:7e:bd:fe:
6c:82:2b:0c:f8:25:96:1f:42:b9:8d:39:ed:1e:bd:
d7:2f:91:39:3a:f0:3b:0f:8f:98:d3:0a:24:63:53:
5c:39:b5:c9:3b:24:f6:ef:30:46:10:12:ed:22:c2:
33:10:1d:eb:da:f7:48:46:3f:c3:a4:d0:a8:c2:a1:
f2:61:94:be:a2:ff:5f:f3:8d:05:e4:aa:16:1e:7b:
08:a2:46:c1:8a:87:6b:50:d3:e0:6e:12:d5:c8:f8:
06:dc:bd:3b:bd:3a:15:8b:b4:34:b9:52:0e:c1:3f:
82:ca:44:ac:bc:c2:21:c4:b1:06:f6:15:d6:cb:78:
19:75:b0:83:cd:1c:ae:1c:2d:09:65:b4:f7:bb:c3:
76:31:54:f3:d8:cf:a9:26:1c:63:ed:6c:f2:e4:ae:
17:20:4b:f7:be:78:23:78:0d:24:a5:13:57:8d:75:
61:77:4f:be:fa:14:de:e5:96:2b:7f:1e:c5:ad:0b:
6f:25:8c:88:b8:74:68:32:03:21:2b:87:14:0b:89:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:31:AE:E6:1F:09:3D:2E:3C:D5:33:9A:55:36:0D:55:EB:60:4D:42
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kzGu5h8JPS481TOaVTYNVetgTUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:37::/48
Signature Algorithm: sha256WithRSAEncryption
5b:cd:f0:1d:7d:fb:4d:f2:5c:8e:77:6a:04:f7:74:5b:50:66:
8b:40:1e:5c:64:85:84:0d:b3:cb:7f:8a:6a:9f:2b:f8:09:52:
20:34:b8:4c:ab:d2:16:92:2d:7a:12:ca:76:51:22:81:51:eb:
ef:97:e3:47:38:c1:e2:99:ec:ee:55:f1:06:fc:09:07:cd:67:
aa:00:a1:cd:0d:83:27:b2:d3:2e:45:d8:c8:02:23:b3:ad:c4:
d7:8d:f1:94:7c:7e:29:f8:1b:b1:63:6c:4e:2e:17:ef:5a:9d:
7a:d3:4c:f1:e5:92:4a:36:f4:aa:41:fa:3d:9f:42:24:51:da:
18:91:42:de:5e:24:2f:71:d8:b0:22:b4:2d:2d:f9:1f:09:b4:
62:25:2d:10:e8:3d:fc:89:af:e8:e6:a7:d3:25:14:a1:ae:88:
64:ba:6e:a2:92:cb:2c:9c:75:e9:a8:04:ea:c5:c4:7d:53:ca:
c2:4c:05:5c:34:06:30:ee:5b:b4:67:74:a5:17:43:18:11:dc:
cf:54:38:6d:ff:65:02:2b:56:a6:fc:b5:a6:46:9a:21:ff:f4:
79:c4:4e:4d:2e:60:16:64:48:e1:49:21:09:e0:3a:27:c5:66:
b7:c2:84:be:b4:7c:ce:1e:60:13:10:41:10:ef:8c:2c:0e:79:
e2:70:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org