Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sZK4iOhY1-76hnALVDv_1bR-B5M.roa
File: sZK4iOhY1-76hnALVDv_1bR-B5M.roa (raw, json)
Hash identifier: io+Smn88iZqCMBaRXkfkmv2iQEWQE+h6ldIy2XC9ySA=
Subject key identifier: B1:92:B8:88:E8:58:D7:EE:FA:86:70:0B:54:3B:FF:D5:B4:7E:07:93
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8C945F62EB27BD46DA6D2E080A3461
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sZK4iOhY1-76hnALVDv_1bR-B5M.roa
Signing time: Tue 06 Feb 2024 17:52:15 +0000
ROA not before: Tue 06 Feb 2024 17:52:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202002
IP address blocks: 2a0f:b241:1b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8c:94:5f:62:eb:27:bd:46:da:6d:2e:08:0a:34:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:52:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b192b888e858d7eefa86700b543bffd5b47e0793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:87:33:00:c0:35:bd:02:68:02:54:1a:b5:
fd:5c:ff:6b:fd:96:76:20:23:9a:fa:f0:f6:00:c5:
98:70:89:13:7f:ab:86:34:72:0e:c2:a6:8a:d5:6b:
f2:ca:35:b9:52:9d:fa:98:65:66:53:3b:0f:6d:00:
4e:78:94:98:fd:8f:ad:0f:8a:b1:5a:8c:72:72:db:
3f:13:2f:bb:7b:0f:23:a7:4a:46:3e:8a:1f:9e:84:
30:f4:4f:50:5a:e8:d2:f1:1d:c6:d5:d6:6c:0c:97:
dc:41:07:1f:d0:c2:9b:a1:3f:ca:6a:c7:19:75:e7:
c5:de:0e:13:d9:03:4f:9e:f0:fc:55:a8:06:f3:ae:
6a:14:7e:83:10:62:32:2b:c3:1a:6d:11:2b:47:16:
c0:8e:3c:07:28:83:86:d5:9b:f9:ba:e9:b7:e6:0d:
2c:75:14:df:bf:ca:32:c8:96:d5:d4:56:d7:84:7e:
0d:0c:21:70:8d:74:6c:ea:c3:54:47:57:a2:6b:ba:
bb:26:9f:a2:a9:34:b8:64:89:43:3e:ff:0e:2a:63:
95:24:58:97:ca:65:53:ef:9e:a4:3c:8b:84:5e:e6:
1f:fa:49:06:e7:af:d3:19:1e:a2:5e:e4:7f:50:48:
4c:79:ba:37:ea:bc:05:6e:c6:3f:e7:c3:8a:1d:6a:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:B8:88:E8:58:D7:EE:FA:86:70:0B:54:3B:FF:D5:B4:7E:07:93
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sZK4iOhY1-76hnALVDv_1bR-B5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:1b::/48
Signature Algorithm: sha256WithRSAEncryption
87:bb:16:ad:b6:15:98:93:ee:b4:81:85:b6:2d:85:ff:5b:d8:
b8:45:89:64:96:25:00:9b:e0:42:59:7f:9a:63:a5:95:67:78:
3f:ba:81:fc:74:5c:23:eb:7e:d8:5b:1c:0a:48:d4:87:eb:cf:
16:f7:ec:91:36:f0:0d:31:1e:4e:93:f6:0a:eb:b3:6e:05:bd:
04:bc:ae:84:f0:ec:15:df:da:34:0a:78:77:17:95:aa:5b:02:
89:15:37:99:9c:40:a0:98:d8:df:2e:a3:fe:27:7c:30:52:3b:
48:4e:4a:77:ff:8e:70:c1:ac:39:07:a9:77:1e:92:d6:24:33:
5c:57:1c:22:85:a2:84:7b:87:5f:79:07:06:9a:1b:49:c1:60:
62:64:9d:09:00:d6:48:95:95:26:8e:7d:87:da:48:8b:b7:86:
65:12:45:ea:0f:dd:72:27:2d:cb:7f:e8:b0:8a:89:fb:1d:5f:
cb:96:f5:6a:aa:2c:11:be:27:31:eb:d8:f7:2c:c6:1f:e0:a7:
f8:2f:ea:82:1a:2a:2e:47:77:15:a8:15:e3:25:f4:ba:88:63:
4e:49:59:bd:0c:f1:0b:cc:70:9e:49:44:aa:50:e4:05:1b:94:
79:c1:76:a0:5b:5a:b1:40:8c:6b:80:22:f1:bc:d1:ef:06:50:
e4:31:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org