Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/w4mylpE-C_MILtRUAZIzplNJL9o.roa
File: w4mylpE-C_MILtRUAZIzplNJL9o.roa (raw, json)
Hash identifier: 7o64+ZnTEa17CluRRbnveb8BPAkxNZi8vreph/+kvEY=
Subject key identifier: C3:89:B2:96:91:3E:0B:F3:08:2E:D4:54:01:92:33:A6:53:49:2F:DA
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACA8583102324A4B7C230094E9F118
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/w4mylpE-C_MILtRUAZIzplNJL9o.roa
Signing time: Tue 06 Feb 2024 18:27:18 +0000
ROA not before: Tue 06 Feb 2024 18:27:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212332
IP address blocks: 2a0f:b241:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:a8:58:31:02:32:4a:4b:7c:23:00:94:e9:f1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c389b296913e0bf3082ed454019233a653492fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:73:a7:b3:63:13:7e:49:74:68:d8:3f:8c:de:
b2:3a:82:ab:f6:20:fb:90:61:51:05:b1:8d:b7:c8:
61:f3:49:d6:66:7d:b6:3c:a2:45:cc:31:f2:74:95:
64:1d:ae:08:27:fe:98:4b:90:e1:76:05:29:55:5b:
b5:c1:92:81:67:6b:ef:ce:90:9d:27:4b:6e:04:e5:
37:98:2d:60:81:01:bc:af:b0:10:07:a8:f7:22:a7:
bc:10:d7:42:5e:39:2a:9c:ad:05:0d:da:c8:b7:bc:
6f:b8:ae:98:24:a4:4d:de:56:4a:60:15:5a:99:23:
e7:71:cf:e3:78:27:69:c4:78:41:7d:4f:91:c4:f7:
23:f5:63:1f:02:46:ba:24:db:69:1d:25:11:c6:fb:
dd:0c:fd:25:cf:a8:05:47:0c:27:2f:6e:ca:01:27:
1f:16:77:cd:99:a1:f0:15:09:0e:9f:f2:60:ce:5d:
1e:b7:d9:ea:4f:0e:c8:ea:f4:ef:19:02:77:20:a1:
88:14:c3:67:2d:75:4f:88:0c:a6:7e:8b:e2:7b:1a:
0c:42:74:3a:07:cb:82:68:c7:1b:04:78:32:21:d8:
7b:f8:c3:d1:48:57:ed:c0:85:6a:7d:dc:d0:15:e8:
9a:f8:4a:4e:63:cc:c2:5e:79:6a:b8:58:da:d6:f4:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:B2:96:91:3E:0B:F3:08:2E:D4:54:01:92:33:A6:53:49:2F:DA
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/w4mylpE-C_MILtRUAZIzplNJL9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:100::/48
Signature Algorithm: sha256WithRSAEncryption
67:bf:25:34:5d:1a:bb:b8:47:b3:23:3e:48:4a:6d:01:df:50:
47:d4:ba:cb:ad:19:a4:25:23:bc:7e:32:98:d1:94:e9:fd:84:
8d:00:b7:13:3a:a1:61:8f:44:22:22:23:4e:67:36:f3:01:21:
24:db:51:c8:f8:6d:7f:ff:0b:6a:b7:4e:b3:af:f7:1d:24:38:
fc:46:c1:7c:31:23:77:b4:e2:9b:8f:82:ed:26:59:d4:37:da:
ee:a3:af:2b:6f:73:7a:50:4c:5d:7d:46:6b:8d:d6:ad:72:cc:
25:c5:1c:11:5b:4d:63:b3:90:b1:ce:51:50:51:19:61:47:e4:
6e:03:ac:8c:a6:d7:0a:22:de:27:2e:16:c5:6b:aa:84:0f:92:
03:59:61:6b:33:3e:aa:94:84:c1:40:f4:80:01:cf:dd:c4:a2:
76:9b:b6:39:aa:7e:a3:23:82:de:12:e4:a7:97:c6:53:51:b1:
05:33:16:ae:61:74:27:0d:e7:e3:36:43:71:2c:42:2f:83:35:
24:8f:f8:42:71:fe:bd:29:6e:44:c5:69:62:68:65:c2:2a:7f:
f9:23:cf:67:59:89:17:fe:b2:c9:56:b9:28:7d:16:d6:9a:bc:
50:ed:aa:10:59:98:74:e2:39:28:64:41:35:17:b8:b8:7a:b4:
90:1d:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org