Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vhhJbzbXNEAZaawQXp42CyDLBcQ.roa
File: vhhJbzbXNEAZaawQXp42CyDLBcQ.roa (raw, json)
Hash identifier: n4YDxO/X3o/BXdlncQhvW/MIGIwzxrtKb3RwBU/3bPs=
Subject key identifier: BE:18:49:6F:36:D7:34:40:19:69:AC:10:5E:9E:36:0B:20:CB:05:C4
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABC11D6352C59481B4F6CD3D53978A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vhhJbzbXNEAZaawQXp42CyDLBcQ.roa
Signing time: Tue 06 Feb 2024 18:26:18 +0000
ROA not before: Tue 06 Feb 2024 18:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215843
IP address blocks: 2a0f:b241:e8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:c1:1d:63:52:c5:94:81:b4:f6:cd:3d:53:97:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be18496f36d734401969ac105e9e360b20cb05c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:cf:fc:46:26:18:3c:4d:3f:16:af:bd:c4:
a6:b4:f4:1b:77:a8:ac:1e:f6:70:61:f9:35:e4:e3:
27:00:f9:8c:2a:e9:3f:ee:18:68:f1:6b:2d:a2:fc:
a0:9e:de:d7:a1:26:2f:06:3f:ba:0d:b4:1a:eb:95:
50:db:c0:61:4c:b3:cb:7e:3a:f8:d7:18:03:f3:eb:
fc:71:9a:e4:0d:ca:33:6d:d6:d4:83:48:f2:0c:83:
9f:c7:1a:e7:13:b4:b9:bb:97:02:3c:a2:ad:1b:6d:
4c:c1:86:00:65:1a:a7:ec:f1:5c:a6:ce:06:8e:54:
13:fb:13:e2:b3:be:53:58:4a:06:32:f6:6f:d9:8b:
61:98:29:b0:c8:e4:2c:26:60:2c:aa:ff:19:9e:e2:
fe:86:b2:96:1d:89:74:24:d4:0f:a7:26:3a:0d:b9:
a8:a3:fd:0a:63:e2:aa:77:f4:ae:5b:48:c0:71:39:
d2:3f:da:ad:4d:bb:ab:74:c9:8c:b9:06:5a:b0:37:
96:6b:0d:dc:ef:af:18:13:5d:21:2e:88:cb:28:5c:
8c:d1:88:d5:e4:e4:b4:3e:fa:e1:7e:03:0d:31:de:
80:6b:6e:62:7e:03:ad:f6:e5:9f:44:8d:77:36:a8:
2a:d5:af:f7:ae:af:f6:da:b0:60:0d:ae:a6:15:c8:
02:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:49:6F:36:D7:34:40:19:69:AC:10:5E:9E:36:0B:20:CB:05:C4
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vhhJbzbXNEAZaawQXp42CyDLBcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e8::/48
Signature Algorithm: sha256WithRSAEncryption
80:1a:aa:cb:0a:3d:79:ef:40:43:11:d5:f6:39:b9:3c:c3:8d:
61:2c:07:da:43:5a:83:28:7b:d3:d8:4f:6d:46:92:65:ac:00:
43:50:bc:0e:a0:ae:b9:3f:a9:58:88:ff:cd:83:ce:be:09:b9:
d6:57:f9:dd:c4:cb:67:72:fd:1d:5e:a9:ee:b9:b2:59:ce:e3:
8b:4e:7a:e3:1f:46:8e:d6:68:67:aa:e8:3b:e5:b6:cd:1f:4c:
80:92:ae:55:c8:ff:d4:36:ec:e8:a4:7d:b7:4e:73:bf:69:5b:
47:5c:db:0c:14:3e:5b:96:f3:cf:01:76:4a:cf:78:3f:db:3f:
ef:8d:25:44:6f:75:39:d9:55:01:7c:16:1a:e2:f4:ca:0f:57:
36:a0:0e:f8:5b:38:58:f3:30:cc:ba:d3:b6:7d:09:f7:87:59:
55:3d:48:6f:93:30:d9:89:b1:76:69:0b:bb:fa:4b:9e:b7:81:
06:da:58:e7:b2:00:5d:99:8f:76:6c:d4:ec:39:be:72:5d:ad:
eb:26:06:96:64:01:a5:3e:c4:af:2f:c5:9b:d8:1e:8a:96:cf:
7c:62:7e:89:c9:2f:4d:98:2b:b4:80:0d:ad:bc:76:8a:45:0b:
f7:c5:a4:74:49:17:43:f0:62:d7:19:54:d2:d0:87:6b:b6:43:
76:84:02:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org