Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sUaw-4tSFSHIgp6nuFfojGsbUWY.roa
File: sUaw-4tSFSHIgp6nuFfojGsbUWY.roa (raw, json)
Hash identifier: KapLBr1qS0QHfbrXKZCIOfRFxfOWJZf9RZMDAOyXVSI=
Subject key identifier: B1:46:B0:FB:8B:52:15:21:C8:82:9E:A7:B8:57:E8:8C:6B:1B:51:66
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F95BD2DC33BACB95CC365D2A6698F4C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sUaw-4tSFSHIgp6nuFfojGsbUWY.roa
Signing time: Tue 06 Feb 2024 18:02:16 +0000
ROA not before: Tue 06 Feb 2024 18:02:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209129
IP address blocks: 2a0f:b241:41::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:95:bd:2d:c3:3b:ac:b9:5c:c3:65:d2:a6:69:8f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:02:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b146b0fb8b521521c8829ea7b857e88c6b1b5166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2d:c9:c8:5b:39:30:54:e9:32:ad:de:8f:61:
3e:e2:e5:26:15:59:ac:2d:13:ab:aa:1a:7e:06:f5:
12:2e:35:87:10:d6:a1:04:b8:1d:36:66:39:d2:cd:
42:60:fb:3a:98:1d:4e:39:95:07:d9:f8:34:bf:48:
47:cd:06:30:29:8b:d1:dc:09:60:00:54:18:b4:b0:
3f:d1:1d:73:0b:69:7d:3c:2d:00:73:02:cd:92:13:
f9:4f:62:5b:8a:db:29:49:63:86:65:11:47:5d:15:
3d:d1:37:a9:75:ce:29:4f:78:d2:94:47:c8:c1:d0:
fa:3f:b5:f6:66:07:46:e5:42:29:ad:f2:e6:fc:a3:
13:63:4d:31:c1:5c:9b:9a:a2:59:9b:11:1e:b7:83:
c8:fd:db:8e:ec:da:ce:c2:16:82:5e:f8:a5:ed:8b:
41:7f:5f:30:62:b5:f2:26:4b:b5:b0:9f:d2:6a:ef:
4d:79:ec:d4:3a:9c:6c:e7:f5:a9:ed:92:4a:eb:37:
17:e7:a5:82:6e:52:69:e2:d6:83:8d:66:a1:ba:34:
9c:bb:be:87:dd:19:37:f8:ec:5e:33:8a:e5:3c:c8:
b6:be:50:05:f2:44:93:30:f6:64:95:b3:5e:b6:6a:
a0:b5:08:98:ef:ce:11:3d:19:eb:29:c9:9b:18:50:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:B0:FB:8B:52:15:21:C8:82:9E:A7:B8:57:E8:8C:6B:1B:51:66
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sUaw-4tSFSHIgp6nuFfojGsbUWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:41::/48
Signature Algorithm: sha256WithRSAEncryption
45:1b:50:fc:2c:75:95:71:63:8f:f6:dd:19:fc:65:ea:24:d3:
d5:d1:78:1f:1c:11:22:3f:9f:d3:1e:57:5d:49:9d:e2:ef:69:
20:52:27:7c:d6:34:bb:f5:b2:ef:6f:35:0b:bd:29:29:47:f8:
16:e1:d4:7c:85:b4:ad:f8:90:b1:4f:f3:64:7c:41:05:d5:be:
af:b4:34:a6:47:ed:ec:cd:bf:bd:dd:14:4a:2e:ea:cb:20:01:
2d:88:84:77:e2:67:45:3e:e9:77:76:9a:a3:2d:78:24:66:ff:
86:06:b3:45:09:9d:65:a6:c3:84:44:d8:d1:ce:c5:70:c0:bd:
87:53:15:8a:c1:6e:ed:79:ea:a4:5a:a4:4b:9c:a7:ca:0e:0f:
0b:70:f2:1e:8a:2a:b0:08:e2:b4:7c:5c:d0:90:9a:90:22:a0:
41:df:fe:08:76:cf:11:95:65:76:c0:83:0f:9c:89:6c:a6:2f:
b5:1b:8a:6d:91:32:ff:c6:fe:c1:db:c6:c8:d8:a0:0a:65:0d:
84:37:58:d1:4e:e8:64:21:04:04:eb:a3:88:e2:20:40:b6:94:
69:09:7c:0e:e2:a2:bd:f6:69:03:19:ec:01:37:38:5a:a9:74:
ae:d4:7d:80:46:94:d0:db:25:72:56:d0:c0:6b:94:52:b1:b0:
bd:13:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org