Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/z9cKKYD6D8AzRfWrUoL_ZQhljsw.roa
File: z9cKKYD6D8AzRfWrUoL_ZQhljsw.roa (raw, json)
Hash identifier: uTt4KBKi7WyQWVrEemwy6T3INRw/wrjW57rxYrF8zLM=
Subject key identifier: CF:D7:0A:29:80:FA:0F:C0:33:45:F5:AB:52:82:FF:65:08:65:8E:CC
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABB7969DF35368A59CACFB2C9D2982
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/z9cKKYD6D8AzRfWrUoL_ZQhljsw.roa
Signing time: Tue 06 Feb 2024 18:26:16 +0000
ROA not before: Tue 06 Feb 2024 18:26:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204842
IP address blocks: 2a0f:b241:eb::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:b7:96:9d:f3:53:68:a5:9c:ac:fb:2c:9d:29:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfd70a2980fa0fc03345f5ab5282ff6508658ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:18:bf:89:03:68:5d:24:4a:99:c2:42:99:
41:cd:c2:9d:8e:a4:da:28:0a:dd:55:ea:c9:08:48:
51:22:8b:41:f8:00:a1:98:96:cc:b6:4b:c4:c8:39:
09:bf:f5:83:b1:0c:bf:93:4f:dd:fd:4c:e1:71:db:
77:6f:1f:1e:e1:b6:9c:f6:a1:aa:eb:03:ff:da:22:
ec:e4:28:6f:06:3f:57:d7:48:eb:00:f6:80:16:e1:
92:01:f4:20:98:4b:c8:91:8c:11:f7:ee:f9:ed:75:
6d:04:90:00:93:6d:69:d1:08:3b:a4:58:87:c0:3f:
e0:d5:6e:29:9e:cc:87:79:5d:03:a4:95:38:a5:23:
55:40:cc:dd:d3:c9:58:66:50:e7:f3:b4:9d:fc:70:
9f:c8:ed:56:b3:7e:c1:5c:dc:7c:3e:7e:e4:56:d9:
e2:6b:26:f7:4d:a9:bf:31:ef:05:49:37:5b:2e:76:
fb:ae:21:1d:a0:3b:02:d4:d9:bd:15:9a:42:ff:d9:
b8:2b:24:15:df:26:37:91:47:6e:f1:ee:97:2e:5c:
fb:d4:0d:e5:4f:1d:e3:46:b7:ba:65:80:90:b5:c4:
2e:cb:a3:26:c3:a2:5d:57:be:d8:15:f9:49:09:06:
7d:df:98:95:8f:b0:df:99:52:11:1e:1d:43:d8:70:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D7:0A:29:80:FA:0F:C0:33:45:F5:AB:52:82:FF:65:08:65:8E:CC
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/z9cKKYD6D8AzRfWrUoL_ZQhljsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:eb::/48
Signature Algorithm: sha256WithRSAEncryption
3a:0c:af:23:66:ea:9d:f3:c3:75:0c:df:12:b9:47:f5:1d:9f:
6c:d9:d6:b1:44:d4:66:58:07:73:cc:e9:93:cb:77:3c:18:65:
19:61:00:c5:f8:90:a4:03:5b:50:68:31:62:ec:4e:92:7c:b4:
5a:ef:34:bd:c6:15:49:ad:a5:2b:77:18:c8:37:02:6a:07:bb:
ee:c8:f5:9e:90:c8:93:a6:d1:ed:60:a4:4e:df:67:2b:3e:3e:
1f:b0:6e:0d:8c:ee:a8:5c:71:cf:48:6b:91:ab:c4:01:d0:07:
21:c4:76:83:09:08:1d:60:55:82:77:75:24:70:e1:2b:e4:9e:
a0:04:ae:98:c6:c5:7e:a7:ce:4f:cd:24:ab:f2:af:5a:fb:f4:
da:95:ee:7e:25:fa:a8:54:6d:1b:39:6b:ae:6a:9d:e8:3c:12:
79:2d:74:3c:71:1e:d8:0f:c6:a9:34:a5:f7:5f:b4:f3:79:be:
97:3b:49:fc:de:64:10:8f:41:f1:c2:23:87:85:bc:ff:74:40:
d0:a9:ee:25:56:bc:a0:63:39:1a:bd:ec:f2:a3:40:4f:63:8f:
86:dc:a8:2c:42:72:6b:d9:f7:33:1c:c8:a5:78:32:91:09:09:
23:4a:fa:20:67:9a:db:bc:0f:fb:11:b3:be:4e:ec:70:3e:a8:
0f:87:6d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org