Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/smA49wxEPDJubtt-8BorhjdHoh8.roa
File: smA49wxEPDJubtt-8BorhjdHoh8.roa (raw, json)
Hash identifier: HMrrErwErSSmG2WG3d4bQlxFnWYZsV3tyL1W+YLshy0=
Subject key identifier: B2:60:38:F7:0C:44:3C:32:6E:6E:DB:7E:F0:1A:2B:86:37:47:A2:1F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0772B21796BDF0518E9616B29FE45
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/smA49wxEPDJubtt-8BorhjdHoh8.roa
Signing time: Wed 07 Feb 2024 05:00:36 +0000
ROA not before: Wed 07 Feb 2024 05:00:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199497
IP address blocks: 2a0f:b241:68::/48 maxlen: 48
2a0f:b241:83::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:77:2b:21:79:6b:df:05:18:e9:61:6b:29:fe:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b26038f70c443c326e6edb7ef01a2b863747a21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:92:07:9a:e8:ed:26:42:e7:31:72:9a:d5:
69:96:a5:53:17:c0:fb:c4:33:c1:95:bf:36:0e:17:
36:e7:ec:16:87:08:5d:13:f8:db:d3:bd:3c:ea:1a:
81:7a:e6:29:8c:7b:8a:5b:26:cd:0e:6f:1d:7f:7c:
79:00:57:39:f3:69:7a:dc:4b:d4:fd:aa:98:86:d0:
94:68:e4:58:d8:57:b7:f8:b3:e6:a3:17:ad:db:82:
44:68:ba:9c:17:80:6e:b3:fd:f0:e4:b3:55:66:ac:
55:78:d2:1b:a1:bd:f1:4f:30:e2:51:71:2a:56:0a:
e5:cd:b6:01:c9:06:7d:60:77:43:2a:e3:1f:d8:80:
70:ca:82:45:9a:38:a2:e9:8c:dd:2f:80:27:4e:61:
89:78:0f:76:81:2a:fb:07:bc:cf:53:3b:25:a6:69:
9b:a9:fb:30:7f:f2:76:c8:78:74:3a:96:db:33:22:
6a:9d:43:37:7f:5c:80:21:af:cd:ba:43:14:8c:c3:
b0:b0:68:66:f8:4c:ed:80:ef:e0:bf:15:7d:3d:dc:
d2:02:30:b7:8e:81:b5:67:6e:1c:f7:bf:17:3f:d3:
58:fd:7d:9e:29:6f:6d:4b:79:35:d3:0f:a5:1a:e2:
4b:ef:e8:ea:7b:46:9b:94:54:26:20:af:db:19:72:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:60:38:F7:0C:44:3C:32:6E:6E:DB:7E:F0:1A:2B:86:37:47:A2:1F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/smA49wxEPDJubtt-8BorhjdHoh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:68::/48
2a0f:b241:83::/48
Signature Algorithm: sha256WithRSAEncryption
63:35:c1:77:d7:8d:fb:ef:07:69:9f:fe:57:31:cb:e9:8f:51:
b7:19:d0:01:97:de:70:b5:c9:eb:a2:15:ac:9e:0a:f4:03:83:
1f:52:78:95:c6:38:c7:79:13:f5:be:ff:2f:5d:1c:72:1a:2b:
6e:0d:47:ff:ed:37:10:90:60:c6:97:f3:ee:12:8d:45:21:9f:
72:d3:2d:40:36:87:35:55:c6:4f:79:00:66:92:db:a8:6b:41:
5a:72:37:20:2e:bd:e9:3b:41:fe:89:9a:54:03:b9:9e:58:8a:
08:29:31:84:c6:43:86:98:4e:4c:45:b2:38:12:52:15:d1:60:
cb:52:be:11:68:cf:8f:14:87:2f:f1:c8:b3:06:5c:68:b2:35:
00:69:04:64:9a:60:5a:6f:4e:d8:fe:8d:e8:75:12:63:47:9e:
13:76:57:97:de:94:1b:11:4b:4a:da:03:c9:de:eb:6a:35:15:
06:23:9b:c6:e3:7a:09:f0:f6:67:f9:1e:a1:1c:8e:1f:27:69:
e5:d2:0c:26:a8:52:6b:6f:6e:e7:5d:f2:a9:6a:5a:52:9a:03:
32:29:bc:33:73:d2:43:9f:c2:30:23:d0:d8:24:e4:45:54:5c:
01:90:d3:6b:95:a7:54:b4:42:7b:1d:69:a2:19:d6:9d:24:95:
f0:2a:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org