Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/nypflObbtV13Vgd9hXEq-ySshlg.roa
File: nypflObbtV13Vgd9hXEq-ySshlg.roa (raw, json)
Hash identifier: J9CBvIZIpf0gQ0RkAnsnN9ut9w6yZAkfluQEdABQ2Rc=
Subject key identifier: 9F:2A:5F:94:E6:DB:B5:5D:77:56:07:7D:85:71:2A:FB:24:AC:86:58
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAACC4AFD687EDACD49885ECCAB17D3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/nypflObbtV13Vgd9hXEq-ySshlg.roa
Signing time: Tue 06 Feb 2024 18:25:16 +0000
ROA not before: Tue 06 Feb 2024 18:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200968
IP address blocks: 2a0f:b241:da::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:cc:4a:fd:68:7e:da:cd:49:88:5e:cc:ab:17:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f2a5f94e6dbb55d7756077d85712afb24ac8658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8d:4b:07:20:03:71:30:c3:5d:d0:d6:8d:b6:
1f:a2:68:97:cf:3c:b9:f5:67:e1:d0:1a:2c:4f:a2:
67:0d:76:5c:cc:a5:03:cc:b3:f5:33:14:70:62:90:
30:ac:3d:ac:bc:2d:4a:3c:94:60:f1:9e:2c:1a:3c:
5a:b6:fe:29:ed:cb:ee:1f:1c:93:c8:07:41:d4:b8:
3a:0c:a3:9a:0f:08:ed:8d:0d:f8:ee:ac:57:cc:22:
63:6c:51:b2:e5:93:32:6d:aa:1a:1a:39:a9:25:e2:
78:76:9d:e0:46:ad:31:82:5f:36:d0:5d:05:8e:e5:
bc:71:a3:7b:1e:60:01:1c:4e:37:f9:19:5a:d2:f9:
98:7d:38:a3:ca:90:8f:66:e2:35:10:3d:9b:ef:a1:
aa:73:1e:1a:a3:3e:9a:75:b0:46:47:d0:2a:1c:3d:
90:1c:bf:a4:ea:09:f0:83:90:31:b5:6b:6c:f0:c0:
c4:81:a3:db:dc:74:dc:e2:06:a5:7c:0f:28:9b:e4:
4b:13:c8:fb:15:d4:ac:62:f2:7b:76:64:66:a7:f9:
65:fb:0f:c7:44:02:f6:8c:68:c0:a4:09:59:7a:52:
d6:a0:2b:14:00:fb:87:e6:bc:93:7c:9e:92:1f:6c:
0e:ba:5c:f5:1d:ed:50:73:1a:a0:60:9d:d8:9a:f9:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2A:5F:94:E6:DB:B5:5D:77:56:07:7D:85:71:2A:FB:24:AC:86:58
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/nypflObbtV13Vgd9hXEq-ySshlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:da::/48
Signature Algorithm: sha256WithRSAEncryption
0b:79:95:b6:f5:ca:cf:dc:86:cc:fa:75:9c:17:96:7a:56:08:
c4:ce:88:c8:24:6e:cd:e4:17:32:38:75:5c:7b:c7:07:55:2c:
74:e4:08:5b:d4:a9:10:18:93:e8:e0:07:f4:d3:b4:f0:57:f9:
2a:64:a8:72:94:10:df:fd:6c:93:17:b1:57:8e:24:63:f7:25:
a0:5e:f0:30:73:5e:d0:dd:be:c4:0d:ca:b8:b8:f3:18:f5:36:
34:35:90:83:35:33:ec:35:e6:45:46:53:9b:2d:c0:26:e4:e4:
d9:6a:22:71:5f:35:65:b5:37:bc:61:a6:32:d7:e3:a1:8d:48:
ed:88:23:59:7c:e0:cc:94:7e:ac:dd:a8:47:82:7a:a6:1c:b1:
64:42:b5:e2:6a:1a:72:4d:46:e4:1b:31:31:e1:33:56:cd:06:
ce:ce:de:78:fc:f8:71:93:9b:6f:76:f1:a6:61:d1:65:b8:df:
60:b4:8b:2a:20:9a:e0:bd:b8:50:f7:a7:1e:1c:31:41:74:f6:
c2:d3:d3:aa:ae:4d:54:59:61:7d:c1:6b:e4:be:79:e1:04:42:
fe:04:9d:6e:5f:60:e8:13:6f:0e:24:e4:3d:33:2c:d4:19:5f:
d6:87:84:fe:8b:ea:a6:8c:30:26:cd:7d:f4:b9:ec:d9:f6:8a:
ae:2c:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org