Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rKJFDueJ0fiFb4Xqg9zHS27fMpM.roa
File: rKJFDueJ0fiFb4Xqg9zHS27fMpM.roa (raw, json)
Hash identifier: U2qboVulIvlsjH8Yt4AEqA7w+lvXeO2p6B2B9lVQuHA=
Subject key identifier: AC:A2:45:0E:E7:89:D1:F8:85:6F:85:EA:83:DC:C7:4B:6E:DF:32:93
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F06716C25CBA9EAFCD78DF6F9730E9
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rKJFDueJ0fiFb4Xqg9zHS27fMpM.roa
Signing time: Wed 07 Feb 2024 05:00:32 +0000
ROA not before: Wed 07 Feb 2024 05:00:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59799
IP address blocks: 2a0f:b241:65::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:67:16:c2:5c:ba:9e:af:cd:78:df:6f:97:30:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aca2450ee789d1f8856f85ea83dcc74b6edf3293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:de:d0:66:3d:e8:cc:83:d7:2d:96:a7:1e:37:
3e:ff:8f:a0:4d:51:9c:eb:3a:77:19:41:19:ff:98:
b7:a1:65:21:3c:3d:1b:fc:d9:3c:37:d3:4a:f8:08:
e9:7d:24:50:a4:07:3d:87:94:10:34:93:7c:80:2a:
37:4f:18:03:db:40:60:c9:c2:8b:98:db:c5:de:e1:
e8:76:88:29:2f:8a:84:fa:ed:23:e8:71:0b:7a:22:
fd:83:d4:b0:a7:d1:5c:e1:e0:48:ff:f4:0b:1f:d7:
e7:cf:97:4e:cc:95:e7:69:c0:c2:7b:ac:00:62:42:
37:cc:a9:0f:d5:06:c8:97:16:d1:69:2b:cd:50:5e:
53:a8:25:4e:56:8d:6d:4a:ee:8e:fc:09:fc:a3:e4:
09:78:e0:7c:e4:b9:cd:85:ee:a8:3f:bf:52:31:b2:
5f:f2:a6:74:fa:cd:2b:c5:89:56:ce:13:28:6b:73:
95:67:eb:e6:82:ad:55:11:94:f4:48:5e:83:5c:8c:
b2:5c:49:06:52:b5:6f:8d:19:64:30:3a:72:74:cf:
b4:94:1c:bb:3c:46:8f:d9:c6:3d:69:82:35:8d:d4:
45:b0:b6:2a:4c:cf:73:4f:13:0f:71:b9:ad:95:d3:
42:93:f6:0b:88:c2:15:5a:17:7b:e2:4c:ae:07:26:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A2:45:0E:E7:89:D1:F8:85:6F:85:EA:83:DC:C7:4B:6E:DF:32:93
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rKJFDueJ0fiFb4Xqg9zHS27fMpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:65::/48
Signature Algorithm: sha256WithRSAEncryption
00:96:67:27:47:70:86:d6:b4:55:cb:ec:04:f5:f1:3b:d4:bc:
ad:9c:74:ad:a3:6b:f2:cb:f5:5f:4d:dd:1c:23:9a:95:d4:16:
f0:5d:92:e8:da:07:13:7f:2e:45:16:16:92:bc:7d:c2:d4:b1:
11:4a:8b:d6:96:53:91:4c:4a:67:1d:2e:c3:64:1a:a5:50:c4:
0b:ff:f1:e6:27:4f:e5:1d:58:41:3b:5a:60:95:b2:21:61:ec:
99:fa:49:20:36:56:a0:0b:b2:34:7c:d8:49:e7:4a:90:55:43:
a3:5e:f3:f3:5c:d5:01:51:d4:5b:1d:43:f2:6c:69:5b:95:fc:
30:dd:f3:5a:36:e8:e7:52:d1:ba:53:3b:c2:c2:8e:0b:b1:4e:
20:03:f1:08:35:49:29:d4:16:a7:09:82:cb:b2:03:de:ff:99:
14:09:9e:02:20:c0:7e:36:38:6b:56:31:59:cc:6a:31:75:4a:
d5:10:ba:ae:55:d4:cb:7d:74:d8:2c:8e:05:4d:25:fb:86:a2:
25:8b:71:ee:8e:88:2b:12:e5:12:10:63:ff:a0:a8:21:f5:86:
d1:ca:a6:d1:9c:06:4f:4c:ae:8b:42:2b:47:9b:f0:95:d3:af:
eb:11:63:16:d6:de:d4:af:8a:75:d4:dc:49:d2:10:b1:b7:a9:
30:4e:78:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org