Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/r0UbLqXapAW84qqaLO7ffT-6PRg.roa
File: r0UbLqXapAW84qqaLO7ffT-6PRg.roa (raw, json)
Hash identifier: MajQxroD8Ggc3CW0U5y//M5WCWtUo3oj/Go4/buHZjg=
Subject key identifier: AF:45:1B:2E:A5:DA:A4:05:BC:E2:AA:9A:2C:EE:DF:7D:3F:BA:3D:18
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACA5BF38252755407F28A58EAB4B14
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/r0UbLqXapAW84qqaLO7ffT-6PRg.roa
Signing time: Tue 06 Feb 2024 18:27:17 +0000
ROA not before: Tue 06 Feb 2024 18:27:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211443
IP address blocks: 2a0f:b241:fc::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:a5:bf:38:25:27:55:40:7f:28:a5:8e:ab:4b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af451b2ea5daa405bce2aa9a2ceedf7d3fba3d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b9:ce:0f:c2:e3:3f:06:95:20:73:af:65:67:
e4:3c:36:fe:a5:f8:85:f2:1a:90:4d:1a:bd:9e:da:
40:fc:dd:97:c9:a1:8f:5b:05:c4:10:23:df:ef:25:
93:fa:a2:26:76:12:78:b2:1f:0f:d3:a6:b2:82:47:
a6:fe:98:67:69:90:c6:09:20:2d:5a:d4:d0:ed:84:
aa:89:27:94:16:33:8e:a6:ae:da:28:b7:03:23:48:
2d:ac:cc:a6:96:77:95:27:eb:fc:e1:37:59:84:22:
49:38:8f:eb:c3:ac:71:ce:91:54:77:5c:67:32:a7:
96:aa:cc:98:a2:7e:1f:b7:52:a6:51:58:f8:14:4d:
73:6a:27:6b:35:13:26:0e:dc:cf:15:0b:25:f2:3e:
a2:c7:16:08:b2:8a:40:f0:65:7c:9e:a8:bb:e5:d7:
f3:af:92:55:a6:df:18:b6:15:c2:d4:0a:4e:af:67:
08:29:0d:b2:4e:f2:b8:33:fa:e9:7e:ef:5f:f1:77:
eb:5c:2e:d2:90:2b:08:b5:c3:2a:d4:bf:52:76:f1:
81:c4:0a:ea:a5:8a:17:e9:d1:10:e7:2b:2e:9b:c8:
96:8c:29:2d:43:24:4a:be:c5:35:f1:6f:00:2b:0a:
e2:59:f3:7c:ad:5f:82:a3:74:6a:87:83:bf:cc:54:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:45:1B:2E:A5:DA:A4:05:BC:E2:AA:9A:2C:EE:DF:7D:3F:BA:3D:18
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/r0UbLqXapAW84qqaLO7ffT-6PRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:fc::/48
Signature Algorithm: sha256WithRSAEncryption
69:0a:5f:f1:4b:ea:fe:de:a9:16:89:c7:6f:50:b9:5e:c6:6b:
8c:80:2c:7e:0f:e0:af:44:da:c3:42:59:07:c7:9a:af:81:dc:
88:7f:e1:2b:27:2f:5c:5d:37:a6:ab:45:42:d6:8e:3e:a6:4f:
f7:74:70:7f:35:8c:16:ba:ab:3a:05:3c:ee:97:dc:df:3e:7e:
93:1a:c4:cf:5d:0f:8d:a9:cb:31:d5:de:77:26:4c:2b:66:01:
f1:65:5a:b6:08:d4:06:2f:8d:ea:19:bc:cc:08:c4:7e:80:4c:
9c:f8:8c:65:fe:11:eb:26:18:ca:df:17:fa:8f:a4:a6:f4:af:
49:b0:f2:db:80:bd:3e:f9:ce:78:98:75:45:b7:a9:91:99:46:
09:4b:6c:eb:72:9b:17:2d:d9:df:22:ac:ee:84:70:e2:b8:cc:
80:83:b8:09:2d:36:0c:c7:8d:a0:7f:54:b7:50:90:f3:d6:e3:
36:ba:d7:80:46:e7:f0:58:98:11:7f:69:e5:23:68:16:ed:19:
bf:13:b0:11:d0:78:d8:e8:ca:ad:5a:ef:8f:15:7d:5c:3b:d5:
f7:bb:11:3b:7c:d9:c5:b6:54:34:88:54:23:53:4e:7d:00:5c:
65:c5:11:b8:c8:4d:65:f3:2f:74:4b:ce:2c:68:62:f4:0a:ae:
75:e7:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org