Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sJuzRaHAwlmA96L6q70Zzmp7yks.roa
File: sJuzRaHAwlmA96L6q70Zzmp7yks.roa (raw, json)
Hash identifier: G6IMwJbCwOA5Vi8wDdN08IXhxt51vFVmwiZFRjVXNuE=
Subject key identifier: B0:9B:B3:45:A1:C0:C2:59:80:F7:A2:FA:AB:BD:19:CE:6A:7B:CA:4B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F09582986234551C5A6462FDD0E8FA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sJuzRaHAwlmA96L6q70Zzmp7yks.roa
Signing time: Wed 07 Feb 2024 05:00:44 +0000
ROA not before: Wed 07 Feb 2024 05:00:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206824
IP address blocks: 2a0f:b241:13c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:95:82:98:62:34:55:1c:5a:64:62:fd:d0:e8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b09bb345a1c0c25980f7a2faabbd19ce6a7bca4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:5f:b9:3f:7d:81:4f:5b:9d:08:d0:92:6c:
41:29:8d:b7:a3:3e:d5:8f:0a:69:ff:84:b6:ef:af:
05:7d:f3:b6:9d:86:9c:c5:5c:ba:c9:d6:a7:e6:e0:
3a:0d:9f:8f:b2:d5:bd:d2:e0:0b:5f:9c:f9:7f:59:
83:fe:1a:2b:83:e0:f3:ee:6c:0a:4f:1f:0f:8c:45:
e6:01:eb:a0:e7:4e:16:c3:20:d3:79:b6:f5:23:4c:
8e:33:14:c9:ed:d6:8a:a6:92:27:6d:cc:11:da:90:
42:60:00:a3:9b:f0:15:1f:d7:fa:37:f6:17:f1:cb:
d0:35:a3:cc:be:61:c0:6a:cc:f1:ae:e9:dd:86:39:
c7:3b:83:05:50:50:2e:2e:37:56:44:df:5c:0f:5c:
2e:92:11:b2:b8:63:0e:46:92:80:c0:89:ca:31:ff:
54:2c:a2:12:bd:f5:ef:e4:5b:28:13:3d:ac:58:ec:
34:f7:7d:44:04:2e:2c:b5:75:1b:d3:70:b4:ed:76:
9c:6b:23:78:bc:8d:1c:05:af:4c:39:70:4e:38:de:
55:4e:17:53:8e:16:a0:91:c9:dd:d8:a6:72:4d:67:
55:24:c6:58:74:14:81:13:31:57:dd:ef:97:91:6b:
d9:1c:9e:ac:a1:5a:62:34:ea:fa:ad:e7:6e:67:4d:
bd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9B:B3:45:A1:C0:C2:59:80:F7:A2:FA:AB:BD:19:CE:6A:7B:CA:4B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sJuzRaHAwlmA96L6q70Zzmp7yks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:13c::/48
Signature Algorithm: sha256WithRSAEncryption
0d:aa:6d:d3:70:99:6e:49:88:e7:41:24:68:24:49:af:00:40:
44:d8:64:5c:0d:91:ba:bc:17:5d:31:63:63:94:2f:e4:36:4e:
6b:14:92:83:e9:9f:58:55:6b:3b:95:59:ff:d9:70:17:f9:78:
1d:80:25:3c:88:5f:db:be:5d:f9:a7:ee:1a:d0:bb:ca:dd:da:
2f:7c:4d:55:fb:f0:6c:38:46:2a:10:38:91:87:78:af:02:0e:
c6:49:69:0e:fc:39:a2:bb:f6:d3:49:62:84:28:c6:8d:8a:f4:
59:27:bb:9e:0f:f3:36:f0:0f:57:f8:e2:1d:96:07:6c:2f:5d:
4f:36:a3:4c:80:72:3f:26:85:54:76:de:2b:71:85:26:9f:73:
eb:bb:26:03:81:a0:82:07:66:ae:de:46:dd:d3:b2:83:bd:3b:
c6:c1:1f:30:23:74:a1:b2:75:cc:84:24:1d:ed:a9:be:23:63:
4c:d1:56:9a:f0:29:a7:00:05:29:a3:ae:f4:8f:1e:39:24:6e:
61:35:dc:d0:47:8c:50:35:7f:f3:e8:2d:fb:7f:42:59:14:97:
45:35:08:fc:f6:00:e5:09:27:3c:a0:d4:c6:5e:33:bf:90:c9:
74:15:37:ec:e5:b9:24:3e:9e:e3:8e:e0:98:76:00:cf:c4:48:
46:f7:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org