Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2LlsI0wxjxNpFlH_U0tU4cJ__4Y.roa
File: 2LlsI0wxjxNpFlH_U0tU4cJ__4Y.roa (raw, json)
Hash identifier: EfugHtkQWU21nLUP/mqtXtk4/zDxg8wxPoTe3jDnHwY=
Subject key identifier: D8:B9:6C:23:4C:31:8F:13:69:16:51:FF:53:4B:54:E1:C2:7F:FF:86
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F95C7BBD951DEE63E88CCB21E3C7DC6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2LlsI0wxjxNpFlH_U0tU4cJ__4Y.roa
Signing time: Tue 06 Feb 2024 18:02:18 +0000
ROA not before: Tue 06 Feb 2024 18:02:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215659
IP address blocks: 2a0f:b241:4f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:95:c7:bb:d9:51:de:e6:3e:88:cc:b2:1e:3c:7d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:02:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8b96c234c318f13691651ff534b54e1c27fff86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:72:5b:94:1c:27:da:b7:1a:34:76:ec:ac:
b3:80:b0:05:aa:38:96:1d:e7:cf:a2:f9:34:fd:08:
bf:ed:a1:ca:e6:d4:20:43:69:e4:e4:aa:c1:a0:92:
67:e4:5f:71:87:cf:4f:6c:85:ed:51:c0:d1:41:7e:
35:aa:3c:2b:19:fb:6b:15:75:45:3d:26:8f:18:47:
0b:24:68:ca:9f:6a:76:4a:45:66:fe:19:a1:a8:3f:
85:91:c8:38:41:98:d6:35:17:8a:8a:57:e1:9d:76:
dc:70:e4:59:cc:c8:29:24:c2:cd:31:b2:c6:8f:d8:
95:31:aa:a0:99:cc:5a:82:40:d6:92:93:4d:75:19:
e0:e9:2c:9b:74:90:45:3f:07:8c:73:e9:0f:ef:53:
f9:8b:1e:90:94:ae:0e:9f:e0:be:11:fb:8c:74:06:
86:88:55:5e:b2:68:1a:17:58:35:1d:9e:5c:08:a4:
82:c9:7c:70:ee:63:84:bd:d4:a2:af:32:f0:03:34:
98:2e:12:52:2e:12:81:7f:fa:c5:da:20:94:68:7d:
6a:06:bd:29:83:05:ad:f7:cf:82:d2:d1:a3:1d:05:
39:4a:86:cd:45:99:13:38:f1:26:5c:84:c1:d6:cf:
fe:91:54:5a:47:f0:c6:1d:f5:42:45:b2:78:77:13:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B9:6C:23:4C:31:8F:13:69:16:51:FF:53:4B:54:E1:C2:7F:FF:86
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2LlsI0wxjxNpFlH_U0tU4cJ__4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:4f::/48
Signature Algorithm: sha256WithRSAEncryption
1a:aa:1f:5a:74:14:0d:5b:1f:04:9f:f5:07:03:8e:53:22:30:
7a:24:4a:e5:ee:51:5c:ab:3d:09:0b:5d:8e:55:cb:fb:e9:e9:
16:a4:79:3a:36:b5:5e:11:50:fc:59:9f:d6:2e:e2:a9:d0:37:
b1:0d:4d:aa:4d:48:c6:6e:c0:b5:b5:d9:48:6f:8d:23:79:62:
38:2b:bd:ff:06:f2:e5:61:59:50:43:81:ca:1e:b6:6f:7e:0a:
fb:b5:cd:6e:97:cc:62:98:37:42:31:ef:68:21:16:4b:e3:4b:
65:e9:a0:68:35:cc:88:40:53:c7:8c:c1:66:72:27:30:00:17:
f9:f7:78:9f:ce:a7:3f:27:3c:0d:56:44:a8:50:0b:8b:f2:fd:
b5:a4:a7:b7:ad:b8:5e:fd:ed:8b:bf:d5:f4:20:45:51:c8:b7:
93:c0:de:dc:19:68:fd:27:d1:35:55:9e:40:56:56:ce:43:cf:
7d:02:26:d9:94:17:d7:e4:07:b1:89:69:e6:41:26:b2:ca:31:
1b:d3:3f:48:79:8a:33:07:49:df:e6:30:20:7d:1b:19:f9:d5:
98:77:32:b5:13:fa:f7:a1:f5:c9:89:1a:af:ee:7e:6b:09:03:
73:50:8a:f4:f4:e8:e3:ba:d3:84:62:e4:6c:b9:e0:a3:21:c3:
be:93:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org