Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ud47R3C8dwKIanNfeYA7tQ7o-B4.roa
File: ud47R3C8dwKIanNfeYA7tQ7o-B4.roa (raw, json)
Hash identifier: P+TGpX1t0w9VWiiXC87+63tp6hsvorBrutsQDn/yLcE=
Subject key identifier: B9:DE:3B:47:70:BC:77:02:88:6A:73:5F:79:80:3B:B5:0E:E8:F8:1E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA81472CA17E6E2696895D3302976C4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ud47R3C8dwKIanNfeYA7tQ7o-B4.roa
Signing time: Tue 06 Feb 2024 18:22:18 +0000
ROA not before: Tue 06 Feb 2024 18:22:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200219
IP address blocks: 2a0f:b241:99::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:14:72:ca:17:e6:e2:69:68:95:d3:30:29:76:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9de3b4770bc7702886a735f79803bb50ee8f81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:86:6e:0d:82:40:38:1e:e9:c4:28:ce:d8:51:
ac:65:de:c0:55:16:04:8b:e5:df:bf:71:cf:c1:ea:
5b:39:b9:9a:c5:64:9e:76:f2:1f:38:01:a2:a4:91:
4a:8f:67:c3:27:96:df:d4:5b:9b:d1:8d:0c:e5:77:
70:fc:7c:2a:c7:dc:1c:29:61:28:6c:f0:19:5a:84:
26:ed:f9:56:46:41:c6:c1:75:68:d1:44:b6:f7:85:
67:ff:0e:2b:7e:84:26:a4:b2:5d:ce:1e:93:3e:53:
54:56:da:70:5b:67:db:da:33:43:83:21:3d:75:a6:
a1:47:76:f8:63:65:4d:81:ac:eb:17:7d:e6:16:2d:
c8:4e:81:62:45:3e:78:78:81:cf:b2:98:23:e1:cf:
5d:5f:e4:70:d7:c9:9b:67:81:9e:f3:cb:fb:20:76:
09:ac:10:44:e0:af:2e:02:0a:52:72:b0:b2:e8:a0:
e3:6a:47:24:cc:b0:3b:93:9b:cd:c5:7d:80:d2:37:
5b:5f:36:8f:3d:04:ac:1f:42:74:7b:6f:31:f5:7d:
16:bf:a8:ee:1f:5b:0f:46:52:e2:c0:d6:ed:22:4a:
3e:9a:29:da:0d:f1:03:75:91:aa:f5:ed:e5:93:c7:
0a:fb:18:70:0d:c7:6d:30:fa:1d:fa:83:36:50:84:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DE:3B:47:70:BC:77:02:88:6A:73:5F:79:80:3B:B5:0E:E8:F8:1E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ud47R3C8dwKIanNfeYA7tQ7o-B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:99::/48
Signature Algorithm: sha256WithRSAEncryption
07:34:0d:d9:e1:a0:ab:8e:3d:b7:52:b6:d8:b4:d7:11:14:65:
83:53:ab:e7:7c:71:5f:3d:5e:29:80:d6:63:b8:ae:68:07:11:
5b:5a:21:f2:13:f8:39:ae:fc:cd:26:48:65:95:ab:35:f0:98:
e4:a6:11:27:74:10:4a:26:85:d1:84:5e:2c:6b:62:b5:2f:81:
c6:8a:0b:93:43:20:87:8f:1e:a1:ab:05:86:09:4a:20:83:bf:
a5:94:bf:17:40:4b:16:e1:f9:d2:52:ac:97:8a:1e:a3:f0:86:
ee:ed:16:cb:0a:75:08:14:75:2f:b0:13:90:fc:38:9b:84:45:
1d:96:29:a5:f1:53:58:8a:f1:20:28:8e:f8:1e:24:1b:dc:c3:
10:8f:68:61:53:cd:60:3d:c6:9a:74:87:0a:8d:1c:40:93:09:
db:26:19:a9:e7:00:5c:44:15:0f:3c:85:d8:cc:db:09:5b:e4:
f9:ce:84:cb:4e:58:85:4c:7f:3d:6f:07:37:5a:ad:74:4a:7a:
cc:1b:ef:90:92:03:42:b1:74:26:04:2b:0d:d4:0b:a8:7a:cd:
f8:59:8f:65:96:1e:21:96:10:74:89:ad:56:07:27:0b:75:f7:
33:45:04:65:b2:b1:19:78:ee:b6:8f:d5:12:08:d3:76:45:5e:
76:0f:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org