Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1Lt1FvvdDCk1UzeDBkGcQyZYU8Q.roa
File: 1Lt1FvvdDCk1UzeDBkGcQyZYU8Q.roa (raw, json)
Hash identifier: MOpzsjAfoXhZomTL2VVqr4zhF8xUDW9MaK5QP/Nv5L8=
Subject key identifier: D4:BB:75:16:FB:DD:0C:29:35:53:37:83:06:41:9C:43:26:58:53:C4
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB9729B1F2E81BC7A3E407003C54510
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1Lt1FvvdDCk1UzeDBkGcQyZYU8Q.roa
Signing time: Tue 06 Feb 2024 18:41:16 +0000
ROA not before: Tue 06 Feb 2024 18:41:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49926
IP address blocks: 2a0f:b241:15d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b9:72:9b:1f:2e:81:bc:7a:3e:40:70:03:c5:45:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:41:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4bb7516fbdd0c293553378306419c43265853c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:1d:85:28:f8:2d:34:2e:c2:94:0b:9a:2d:
f6:12:c5:5c:ab:cc:11:d2:f2:a7:57:bd:d8:28:5f:
c2:a2:5b:c8:ff:21:41:1a:93:8c:af:f8:d3:83:00:
be:0c:b7:6b:d8:cc:21:7e:b5:76:50:aa:9a:99:8b:
c4:19:f9:27:fb:e5:8d:20:1f:6d:31:bb:41:f0:02:
77:1a:77:12:81:1c:87:f9:f6:9e:48:68:78:53:0d:
08:d9:1a:26:e7:bb:ff:6a:19:57:d2:1a:dc:90:46:
6f:ec:73:23:e3:c5:91:23:97:05:1d:05:06:af:2f:
7e:28:4e:07:4f:05:08:71:99:ab:d7:49:ac:ff:2d:
ec:30:db:bc:fa:b6:22:5a:7e:80:0f:a9:88:6e:00:
f5:10:ea:2b:f0:ba:9a:90:af:0a:a0:14:be:f7:14:
35:fd:77:90:21:7f:9d:9a:57:ab:b8:f2:aa:a6:15:
0f:d0:65:15:4b:96:0f:5c:31:5f:62:dd:cb:6b:3b:
11:e4:25:a9:03:f3:d4:ed:23:a1:45:d8:00:ad:3b:
19:be:24:7d:26:b3:14:4d:ab:13:f6:67:1c:59:35:
fa:fc:fe:bb:d2:38:05:aa:e5:93:e0:a6:88:49:03:
7f:7f:32:43:2b:1a:77:29:34:8c:f5:93:d6:74:aa:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:75:16:FB:DD:0C:29:35:53:37:83:06:41:9C:43:26:58:53:C4
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1Lt1FvvdDCk1UzeDBkGcQyZYU8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:15d::/48
Signature Algorithm: sha256WithRSAEncryption
43:05:c7:9b:24:98:f2:ca:10:a3:5a:8c:0e:21:36:1a:9c:f2:
7c:41:61:78:80:7b:1f:5e:ec:f1:12:b1:01:30:a5:1f:50:f5:
2a:e6:12:a1:13:b5:86:c6:d1:dc:a0:61:56:ae:ad:94:79:d2:
f6:25:b7:35:b3:32:18:1c:a3:e9:c7:32:8a:0e:3e:77:cf:53:
fd:fd:4f:81:45:93:66:f9:2e:36:6a:10:32:55:c6:11:a5:05:
96:fd:df:c6:46:3a:59:ee:30:f4:de:12:fc:2f:c1:d9:b7:8c:
54:9f:d6:7b:5e:d4:d2:26:89:95:db:d3:a2:d0:47:23:b1:00:
ac:53:f9:9a:e9:d9:88:53:2c:13:e7:d5:a1:7f:38:98:ce:59:
90:95:f1:a9:4c:40:07:17:c8:1b:63:14:e4:b1:57:38:bd:df:
a5:ea:1c:35:ed:c2:fb:1a:ec:e1:20:56:2e:e4:b0:36:84:e2:
59:3f:9c:54:38:65:ed:3b:4e:4b:9f:e0:64:85:7e:11:cd:cf:
e7:14:2e:52:af:46:6e:40:66:46:00:fb:e4:0d:29:51:40:6c:
49:7a:a6:21:79:ec:7a:d8:94:a9:69:7e:4b:f0:2a:89:6a:bd:
50:77:be:c2:15:88:47:73:7b:c8:d6:8f:cf:90:f2:1f:ac:c8:
70:f7:14:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org