Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uzxlIJ6nWv9DxnQZF5JwLFK9SgM.roa
File: uzxlIJ6nWv9DxnQZF5JwLFK9SgM.roa (raw, json)
Hash identifier: iwcf0ttWlB5oI2NazshdgJFBwIcRG6yxYq3swCkBkKU=
Subject key identifier: BB:3C:65:20:9E:A7:5A:FF:43:C6:74:19:17:92:70:2C:52:BD:4A:03
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAAD104FE2B39CA49E729BF1CECEF85
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uzxlIJ6nWv9DxnQZF5JwLFK9SgM.roa
Signing time: Tue 06 Feb 2024 18:25:17 +0000
ROA not before: Tue 06 Feb 2024 18:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202338
IP address blocks: 2a0f:b241:e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:d1:04:fe:2b:39:ca:49:e7:29:bf:1c:ec:ef:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb3c65209ea75aff43c674191792702c52bd4a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:42:1e:e6:8b:a8:0d:f7:d9:4f:b5:36:e8:
38:19:1e:d7:51:42:77:b5:5f:db:d3:0c:b7:f3:81:
b8:82:26:4a:0c:ae:8b:25:3b:e6:3e:f5:24:43:56:
0c:26:bc:dd:d9:ab:6a:f3:e9:99:8a:0b:a8:e4:63:
cb:d5:b7:58:53:7f:45:02:07:e2:48:ad:cb:0c:5d:
78:51:fc:56:c0:be:6b:f6:ee:26:f1:92:92:82:c0:
a6:c4:d6:8d:4b:0d:78:e0:3b:22:f1:cb:0b:15:3d:
63:51:d3:26:54:4d:52:66:f4:31:be:a0:52:2e:af:
8b:1b:a1:2f:99:86:81:02:4f:4b:54:46:aa:ef:a8:
81:17:98:d0:bc:6b:5d:b2:43:5a:fc:6d:83:13:a2:
8d:43:bc:75:32:9a:3e:2e:e7:c5:e0:41:ee:af:80:
27:f6:99:d5:db:14:1b:f3:1a:94:c2:32:92:87:0b:
31:76:d5:69:cd:92:cf:20:29:2e:da:b4:7b:3e:1a:
a4:84:82:e7:43:eb:54:0c:9b:79:89:5f:37:80:08:
28:b4:b4:5f:c8:f9:df:9d:05:ec:89:6c:78:f3:4d:
3b:7f:91:3c:f0:95:44:db:00:89:d5:18:45:2a:2d:
4a:f9:8e:df:3b:bd:21:57:ca:1e:1c:0e:54:ae:ee:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3C:65:20:9E:A7:5A:FF:43:C6:74:19:17:92:70:2C:52:BD:4A:03
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uzxlIJ6nWv9DxnQZF5JwLFK9SgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e0::/48
Signature Algorithm: sha256WithRSAEncryption
2f:e9:a6:ae:3e:17:de:b8:f4:d3:b4:8d:c0:46:cf:aa:7e:53:
f7:3e:70:d3:d4:0f:69:95:7e:8c:0f:ef:d9:97:f2:fe:1d:d9:
6f:bc:56:8d:6f:3a:5c:f9:aa:f0:d3:8d:21:07:2e:e4:ed:ec:
ab:40:5f:83:55:cc:ad:4a:90:56:a6:e1:8c:22:b6:93:8c:c8:
86:8c:93:38:a5:1e:29:79:32:8b:42:cd:f4:32:e9:e4:eb:47:
67:d2:1e:26:b2:cf:bc:1c:c8:9e:06:9b:c1:2d:12:1e:66:93:
d0:c5:7e:a2:88:23:0d:4a:aa:ea:91:06:60:50:bf:3e:ae:68:
6d:6b:94:1d:f8:d3:bc:d4:01:06:1f:44:ab:01:94:54:1e:02:
2e:d2:f0:89:07:18:25:21:4a:09:9c:d7:50:33:72:a3:9d:40:
fb:eb:9f:f0:aa:65:c9:bc:b7:f7:d6:56:1f:e3:a5:a7:0f:fa:
df:9c:1e:1f:7d:21:ba:d8:a1:d3:73:f4:cb:71:52:03:41:84:
2f:88:6b:9f:80:a2:b9:4e:ae:09:64:70:ae:9b:95:2c:ad:0e:
0f:11:f1:c6:27:0b:90:14:47:3e:54:c4:4b:77:dd:03:0f:e7:
63:7e:be:f1:cc:e2:88:65:1f:94:6e:ff:72:07:4b:af:be:49:
44:77:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org