Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uyOAyD4cBpLgDUJpdF6o90a46ng.roa
File: uyOAyD4cBpLgDUJpdF6o90a46ng.roa (raw, json)
Hash identifier: Pyd7eBtp6fPaedS4Kydurs47kLW0jZml/gZy/wLIr3Y=
Subject key identifier: BB:23:80:C8:3E:1C:06:92:E0:0D:42:69:74:5E:A8:F7:46:B8:EA:78
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F075CCFB4EB8D603393FA3D4173768
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uyOAyD4cBpLgDUJpdF6o90a46ng.roa
Signing time: Wed 07 Feb 2024 05:00:36 +0000
ROA not before: Wed 07 Feb 2024 05:00:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199257
IP address blocks: 2a0f:b241:80::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:75:cc:fb:4e:b8:d6:03:39:3f:a3:d4:17:37:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb2380c83e1c0692e00d4269745ea8f746b8ea78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d7:9e:6a:c4:a2:b0:e0:ed:d2:c2:25:81:07:
94:72:b3:f6:63:ed:86:6f:03:33:fc:06:b1:48:fd:
58:0a:4e:c0:7b:75:6e:56:fd:ac:16:61:22:b6:40:
a5:88:8b:19:3d:df:15:aa:f6:f5:dc:f6:57:54:a5:
40:6a:d0:14:1a:0e:a4:bd:e0:1b:c6:39:c3:85:29:
33:5f:10:6b:02:40:98:43:ab:2d:7a:b3:cd:9c:03:
ca:1c:a1:4f:cb:87:18:6e:7a:55:a7:c1:2e:8e:af:
b7:ad:92:b3:30:38:3f:a8:79:15:97:f7:9f:9d:2a:
6f:82:23:d6:6e:2b:66:db:81:61:d1:85:e5:34:a7:
ec:49:b5:7a:22:ad:ea:3b:53:74:04:be:37:a9:dc:
24:d2:82:6b:aa:cb:6c:6a:5e:86:a9:8e:66:ce:ce:
90:ef:dd:11:ea:98:69:15:9b:4b:8e:99:16:d4:8c:
91:fb:73:d1:c2:37:83:49:8b:ee:36:40:79:40:97:
7d:ad:e5:6e:56:e2:9f:05:5c:bd:15:35:be:9b:7b:
c1:e1:4e:52:63:68:75:8e:c1:cb:46:9e:67:8e:4d:
51:39:23:1f:0e:b3:60:a5:40:81:ca:e0:e0:94:2f:
e9:79:0c:0f:6f:c5:0d:f3:89:12:71:f6:2e:c7:81:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:80:C8:3E:1C:06:92:E0:0D:42:69:74:5E:A8:F7:46:B8:EA:78
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uyOAyD4cBpLgDUJpdF6o90a46ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:80::/48
Signature Algorithm: sha256WithRSAEncryption
0a:21:cb:3e:43:09:7d:c2:22:1a:89:cc:e8:e1:4b:aa:02:05:
48:07:63:20:7e:e0:86:21:c7:79:16:6d:2c:07:43:ae:d9:f8:
78:39:c8:a1:3d:6a:c0:c9:0d:d1:3f:2d:21:dd:b8:08:4b:e2:
ab:0e:a4:2a:36:f2:19:e9:ed:a3:60:b5:6d:c6:0f:36:bb:2e:
83:64:49:48:bd:ec:87:94:70:7c:df:6d:b0:9c:b2:80:db:88:
1b:f0:32:00:c2:9f:bd:b1:d0:83:d0:5d:55:6a:b4:86:a0:9d:
ff:0b:4c:20:55:64:d1:7c:82:ea:74:dc:98:4e:f0:a1:7a:e5:
11:0d:4d:4e:30:83:99:c5:37:c8:67:ea:d9:aa:18:cd:b9:8c:
bd:3f:be:70:e4:09:0a:b2:1e:32:b9:39:9a:d1:c6:b5:e6:a5:
b8:bd:81:da:5b:53:da:23:a0:2c:18:7d:a2:10:b2:9d:5b:38:
f5:da:a9:2e:98:68:65:a0:57:a7:b2:29:93:6b:f4:d2:ed:b1:
cd:fe:72:da:92:dd:e6:a7:38:bc:21:90:f9:fb:60:eb:97:69:
09:42:62:ee:1c:45:6a:a0:39:40:a2:cf:fd:69:f6:3e:8b:d7:
74:7a:fc:2e:93:30:6d:6f:04:18:09:50:5e:83:7a:d0:ae:3a:
73:19:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org