Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uriQcdelngHt9SCBDjEPMx0Byts.roa
File: uriQcdelngHt9SCBDjEPMx0Byts.roa (raw, json)
Hash identifier: MXvDW3VUzKH0UInExybS87F20wsrI2j1sXYB3Zxg7EM=
Subject key identifier: BA:B8:90:71:D7:A5:9E:01:ED:F5:20:81:0E:31:0F:33:1D:01:CA:DB
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0B088A11467653EEB509D5C91E44D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uriQcdelngHt9SCBDjEPMx0Byts.roa
Signing time: Wed 07 Feb 2024 05:00:51 +0000
ROA not before: Wed 07 Feb 2024 05:00:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213339
IP address blocks: 2a0f:b241:4b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:b0:88:a1:14:67:65:3e:eb:50:9d:5c:91:e4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bab89071d7a59e01edf520810e310f331d01cadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:6d:cd:dd:3b:e7:4d:c7:2f:77:e1:7e:95:
8d:d8:87:3b:69:2a:88:a3:c9:5e:9f:3b:61:ce:b9:
b4:1c:68:d4:74:40:64:7d:e0:29:dd:27:4a:d0:11:
a8:26:5e:80:49:a2:2a:81:36:dd:9b:80:55:70:18:
db:1b:57:3a:51:d9:20:d6:b7:b4:d3:0b:2d:b1:8c:
c6:08:b2:d3:79:8d:41:56:73:01:bc:28:eb:8d:f1:
f5:5b:8b:57:98:17:9f:25:2e:f9:fe:19:31:07:01:
13:bc:94:e6:ef:28:28:0c:03:b4:6c:85:cc:27:f7:
33:85:9b:ee:73:c8:b1:4e:70:dd:06:dc:f8:3d:8f:
be:df:31:d1:16:c8:94:42:15:8d:c8:1e:50:a4:5f:
38:8a:52:7b:9c:7e:af:ab:f2:39:ea:70:d7:0c:ff:
4e:e7:33:49:85:c6:7e:a6:7a:25:ce:03:c1:57:d6:
63:0d:b7:53:cd:03:03:18:22:11:ee:95:2d:08:8f:
51:b9:51:32:32:43:ac:36:a1:76:9e:ca:13:d3:6b:
90:c7:f1:b8:b9:b5:31:ab:63:45:56:f1:b5:58:49:
1e:03:bf:f8:1a:02:95:54:b1:0a:18:12:bc:68:fa:
74:13:39:54:ac:4d:cf:64:a9:ae:d0:3d:1e:8b:a9:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:90:71:D7:A5:9E:01:ED:F5:20:81:0E:31:0F:33:1D:01:CA:DB
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uriQcdelngHt9SCBDjEPMx0Byts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:4b::/48
Signature Algorithm: sha256WithRSAEncryption
72:89:9f:a9:a0:16:d6:23:7a:ac:7e:1a:fb:77:d3:5d:c3:41:
56:61:24:ec:8c:60:6f:28:42:ac:64:91:33:2e:89:0d:9b:cf:
b9:60:72:39:18:c9:e1:52:6e:0a:c7:e5:20:e3:78:95:e7:ac:
3c:4b:2c:ee:9e:8f:30:e4:51:bf:7b:1c:34:6e:03:02:ca:94:
35:0b:46:9e:d8:34:2d:e3:d1:f2:97:c9:d1:ba:2a:c5:52:1e:
7d:d1:37:85:30:5f:69:57:1a:15:7e:30:bf:83:af:3c:18:51:
46:36:21:d8:fc:b9:5e:fa:19:cc:2c:48:d7:c5:2f:06:98:25:
da:e9:00:91:64:74:65:05:3a:e0:7e:66:57:00:a1:df:b6:99:
48:c6:2d:7f:03:c3:07:6e:61:bb:ad:49:b1:ae:50:2d:9a:3a:
79:e3:80:45:14:c8:00:99:b2:90:66:1e:47:37:0b:56:cb:01:
5b:1e:61:d9:a6:55:34:6e:e1:cb:09:b8:d0:a3:c1:ee:f0:ab:
00:95:89:4b:b4:74:d6:c1:d5:19:de:07:37:b8:7a:a6:47:df:
0b:3c:ff:4f:87:23:8a:bf:58:fc:e5:c7:ce:82:5c:53:1c:cc:
c4:78:fe:56:96:d7:0e:89:c9:5a:0a:ae:b9:77:a3:db:47:70:
88:b7:bf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org