Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wHHEK5Rl6DvGq1u54M19gG9OQ9o.roa
File: wHHEK5Rl6DvGq1u54M19gG9OQ9o.roa (raw, json)
Hash identifier: uuxwMw8qCZ3GuhB/rtpaHVARZcFtbepUeiRA+HHLd6A=
Subject key identifier: C0:71:C4:2B:94:65:E8:3B:C6:AB:5B:B9:E0:CD:7D:80:6F:4E:43:DA
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACA7916725A8C669EC10618114D98D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wHHEK5Rl6DvGq1u54M19gG9OQ9o.roa
Signing time: Tue 06 Feb 2024 18:27:17 +0000
ROA not before: Tue 06 Feb 2024 18:27:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212164
IP address blocks: 2a0f:b241:ff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:a7:91:67:25:a8:c6:69:ec:10:61:81:14:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c071c42b9465e83bc6ab5bb9e0cd7d806f4e43da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:74:69:c4:8d:25:02:62:a2:85:f3:3b:65:
e2:a1:35:9f:aa:46:52:10:7e:90:2a:b0:58:6d:fe:
4e:28:eb:53:20:7e:74:aa:7d:05:a8:f7:6f:a5:04:
bb:04:90:69:f0:f5:54:5d:1c:6a:a4:8c:58:51:0c:
9d:07:b0:8d:16:0d:52:93:6e:ab:94:7d:a0:5e:f6:
43:e6:22:4d:bf:40:f1:fa:94:7f:34:26:e7:25:a7:
c3:b6:1f:b4:80:83:a3:0c:ac:04:b9:f4:83:40:a9:
74:b2:8c:0e:f7:04:78:36:d6:83:9f:14:20:42:78:
13:72:14:14:64:76:e3:24:2f:5a:de:e0:68:b1:4e:
e5:45:79:f4:20:df:a5:13:99:bc:8e:7f:8d:e4:42:
ad:7a:b1:fd:35:83:ea:d8:97:37:2e:8d:0a:07:01:
50:88:1c:2d:a1:19:cb:64:6a:af:d5:51:9c:4e:71:
41:5b:0a:38:ee:0d:c4:fb:8a:56:1b:45:47:c7:05:
9b:17:40:ff:ba:df:3e:2e:c3:8d:83:b9:7d:7b:85:
c1:7c:96:5d:f1:3b:51:8c:4f:ed:36:74:12:14:7e:
53:cc:8f:9c:1d:2f:3b:23:d1:92:f2:e4:46:b0:42:
7f:f8:6a:d0:46:f6:71:67:ed:5e:6b:7d:dd:46:1d:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:71:C4:2B:94:65:E8:3B:C6:AB:5B:B9:E0:CD:7D:80:6F:4E:43:DA
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wHHEK5Rl6DvGq1u54M19gG9OQ9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:ff::/48
Signature Algorithm: sha256WithRSAEncryption
34:ec:6e:0e:0f:83:17:5e:e4:7f:a7:f3:1b:0b:97:f6:fa:5d:
ba:61:fe:bb:4c:17:3d:8a:1e:62:b9:f6:fe:fd:e3:d1:0a:78:
37:0d:2c:cb:cd:5b:4b:57:71:c2:7e:3d:20:8f:fb:6d:fb:25:
0f:46:82:44:a1:e7:78:f4:8b:93:9a:93:a5:78:0c:16:6e:fa:
62:bb:be:ae:20:2d:3b:7e:5b:a4:9f:0b:61:e1:8d:b4:7c:b9:
5c:13:61:ca:91:68:2b:a0:11:2a:ad:35:95:17:6b:0c:0e:ea:
17:62:69:8a:84:d1:96:b3:74:86:51:c3:f0:74:b8:3f:d9:9f:
e4:ff:e3:71:41:be:65:f5:5a:09:19:d6:fe:0c:03:76:0e:1e:
65:03:a4:03:42:58:7d:1f:83:c3:9d:a6:22:7d:9a:5b:89:f0:
18:9a:2d:6e:d7:1a:fd:3f:d2:28:61:0a:77:5e:d7:4d:c0:14:
cd:af:f9:57:52:75:75:ed:68:0d:ae:24:89:ea:87:e2:2e:77:
a1:f4:48:06:e2:63:08:11:a3:05:ae:00:7b:dc:92:de:47:5d:
b2:8a:34:42:fe:a2:58:6e:b6:e7:8c:7d:b8:30:9b:1e:bf:11:
65:23:1e:cc:d0:5b:0c:9c:ec:a6:db:ea:71:c7:be:e9:ca:1d:
f8:32:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org