Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0lbOGWprGGCKLrj5tvWgmaNcuNQ.roa
File: 0lbOGWprGGCKLrj5tvWgmaNcuNQ.roa (raw, json)
Hash identifier: 3VSKcArgYrjsoaxUNWCT9ucmngptxTGSkgiKuyRCHz4=
Subject key identifier: D2:56:CE:19:6A:6B:18:60:8A:2E:B8:F9:B6:F5:A0:99:A3:5C:B8:D4
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACA4EFE58FAA89272980FF32F94CE9
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0lbOGWprGGCKLrj5tvWgmaNcuNQ.roa
Signing time: Tue 06 Feb 2024 18:27:17 +0000
ROA not before: Tue 06 Feb 2024 18:27:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211233
IP address blocks: 2a0f:b241:fb::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:a4:ef:e5:8f:aa:89:27:29:80:ff:32:f9:4c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d256ce196a6b18608a2eb8f9b6f5a099a35cb8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:59:bb:ac:62:fe:8e:a5:56:f4:b3:93:36:
bd:68:f0:20:ac:58:1a:54:47:9b:19:19:5e:0f:35:
5f:6b:ba:74:7d:ab:dd:95:38:b3:b0:5b:d0:f5:ac:
ce:e0:64:0f:4c:a6:e2:19:62:cd:a0:68:7d:d8:66:
7e:17:79:08:b0:be:fe:5c:68:b8:80:c8:f0:41:39:
e2:ee:78:52:bf:29:ff:0e:35:cd:3b:b9:82:94:65:
8a:e5:f5:b4:a6:f3:9b:45:8d:a0:4e:bc:6d:cc:1d:
ee:ad:c1:53:09:30:0f:f0:63:a5:f7:57:20:b8:f3:
70:0e:bc:c8:19:b5:b3:2c:0f:33:f2:48:e9:df:1b:
de:d1:83:14:b0:ed:e0:d6:45:b0:76:15:05:08:5a:
fc:10:6d:e3:87:9e:36:cf:44:1a:0f:f5:40:5c:3f:
b7:62:b3:9d:07:28:79:b2:a7:8b:0d:5d:28:50:81:
56:10:ab:4a:22:dc:a7:0a:ca:06:f9:5d:8a:0c:93:
f8:7e:e0:7d:76:05:5d:fd:ae:ea:c4:17:bd:06:36:
00:11:3d:32:9c:00:f8:f1:74:90:19:9a:2a:e6:d9:
14:66:fa:27:49:c0:8f:07:26:d8:72:23:05:8b:c0:
d5:c8:ec:7b:93:db:8b:93:2d:72:8e:b3:5a:9b:e9:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:CE:19:6A:6B:18:60:8A:2E:B8:F9:B6:F5:A0:99:A3:5C:B8:D4
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0lbOGWprGGCKLrj5tvWgmaNcuNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:fb::/48
Signature Algorithm: sha256WithRSAEncryption
68:00:f6:25:38:77:ed:3f:f0:8d:c7:89:c8:ec:0d:09:45:a8:
94:db:60:86:f2:65:c1:36:a8:7c:3c:e1:60:1b:b4:1b:e5:06:
6d:8b:15:e5:8f:13:49:c6:18:93:a3:fe:ef:d7:d8:a7:a3:c3:
1a:1a:75:99:72:0f:dc:40:ad:9c:59:72:ef:a4:01:73:8b:1e:
a5:ca:c9:71:a1:64:fa:13:c7:10:1c:83:7c:f8:5d:7e:8a:8e:
c5:0d:e5:02:6d:f9:24:33:84:76:5d:dc:32:be:d6:69:ff:d3:
be:99:ea:65:01:fc:5d:6a:3c:22:be:fa:0f:4a:72:c6:ea:67:
9e:56:e3:89:02:e0:24:5a:01:a2:dd:88:09:cc:81:e3:4a:cd:
1f:a4:73:d9:fc:65:ac:ac:0a:69:61:80:1c:91:25:db:4e:a5:
c0:59:f3:85:8a:9b:88:bd:db:be:2a:9d:9d:ef:d5:d2:20:b2:
12:18:b5:72:fb:2a:4d:89:47:e0:67:1e:24:43:f3:9c:fa:0c:
fc:2d:f1:c7:d5:3b:10:0d:f9:5b:bd:1f:63:6c:b5:4d:42:3c:
ac:61:c0:0f:11:ec:96:68:42:a2:df:6b:79:2f:28:6c:fd:08:
1c:fd:d6:8f:cb:75:ba:c4:3d:7f:6f:00:f4:41:7a:3d:e7:a5:
e9:e9:99:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org