Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lN91aKC-2Ct6JwnQBQQnCjEUA0k.roa
File: lN91aKC-2Ct6JwnQBQQnCjEUA0k.roa (raw, json)
Hash identifier: f65WPrhJzDODLxmxoBqU1FMZtWAyK+BfA1ZEQ5v/Ahk=
Subject key identifier: 94:DF:75:68:A0:BE:D8:2B:7A:27:09:D0:05:04:27:0A:31:14:03:49
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0618417E1450D5E31E87B55C037CE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lN91aKC-2Ct6JwnQBQQnCjEUA0k.roa
Signing time: Wed 07 Feb 2024 05:00:30 +0000
ROA not before: Wed 07 Feb 2024 05:00:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50104
IP address blocks: 2a0f:b241:11a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:61:84:17:e1:45:0d:5e:31:e8:7b:55:c0:37:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94df7568a0bed82b7a2709d00504270a31140349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:69:b3:8b:d5:ff:3f:e3:c1:76:ff:20:ee:
dd:90:64:80:97:35:d2:ee:99:88:09:4e:7d:ed:01:
d1:63:46:20:35:c1:00:f5:b3:db:a2:ee:a7:da:40:
ff:84:e3:a3:2b:eb:21:e4:40:a4:b6:5c:22:62:0f:
a9:f9:b3:08:5d:d1:a6:8e:75:f4:b8:45:6a:85:b5:
e2:de:4b:69:ea:e9:3c:b5:09:1e:33:a7:49:38:80:
e5:49:08:06:82:0a:96:43:81:d1:70:f0:b2:68:a8:
02:ad:ef:46:a1:b9:ed:06:f3:f5:1a:82:2a:06:76:
d3:88:fc:f6:b0:25:9f:22:ee:90:65:37:33:3b:88:
cc:02:16:aa:80:2a:dc:82:84:e0:9d:a2:89:09:93:
f4:b3:88:7b:ab:15:92:84:83:40:ce:39:7f:35:ad:
83:1d:e1:2b:23:11:02:6d:8c:2c:92:23:b4:2a:19:
89:52:c1:89:c8:20:1f:d3:55:25:3b:f6:20:36:8f:
02:31:d5:c8:70:c3:fd:52:00:e0:a0:aa:83:2c:6e:
04:c1:7a:37:3d:6f:64:7a:93:51:27:ea:ab:67:b7:
40:cf:bf:57:32:01:55:75:bf:51:3a:9e:a3:4e:00:
89:8a:30:e1:d2:0c:2c:0d:81:97:16:bd:de:b2:23:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DF:75:68:A0:BE:D8:2B:7A:27:09:D0:05:04:27:0A:31:14:03:49
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lN91aKC-2Ct6JwnQBQQnCjEUA0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:11a::/48
Signature Algorithm: sha256WithRSAEncryption
8a:32:ac:c3:e4:48:0e:c7:4e:e2:1e:dd:64:9f:d4:08:6e:6e:
02:5c:fc:7c:9b:21:74:d5:bb:77:10:76:6b:73:bf:76:67:75:
b1:cf:a6:3a:0c:a1:16:a1:56:78:3f:e7:e0:51:47:f4:6c:9a:
0d:c3:ef:b1:1e:94:12:ad:39:2b:96:b4:80:ad:08:e0:4c:3f:
02:bf:23:f0:fe:5c:c9:91:8f:bf:b7:33:56:5c:7d:e9:25:c1:
1a:9f:ef:af:e8:0d:4c:8d:3b:67:44:44:1c:90:a0:85:b1:3d:
5d:d4:4f:3a:56:b5:73:97:0c:d3:38:15:26:c5:76:26:3c:1c:
1e:8d:50:78:40:13:b5:57:e7:ae:b2:68:96:f3:13:be:76:96:
5a:2b:78:94:49:e8:69:c4:dd:97:19:5d:c4:8e:68:89:b8:ef:
2b:ad:e7:48:26:3b:a1:17:6e:a6:e5:56:e2:d5:62:85:0e:80:
75:86:18:ef:d3:7c:2b:7c:d6:b7:ed:34:f4:5f:cd:9a:e1:9c:
56:38:f7:ff:43:8a:bb:1c:b2:c1:9f:eb:43:f5:f8:76:ae:7a:
2b:a3:0f:20:fc:be:fe:81:79:2e:63:69:df:7a:21:e1:cc:84:
41:18:1b:68:33:d3:a3:7f:c9:c0:0b:7e:b4:62:5d:c7:6e:bc:
a9:cf:e4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org