Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2c8_wzq94D_gFkRp_pVGVQUx6Rw.roa
File: 2c8_wzq94D_gFkRp_pVGVQUx6Rw.roa (raw, json)
Hash identifier: s5JrB3QPzMM3D2uiqe1gOaoKKih9X+E8WTZjRJUTl8k=
Subject key identifier: D9:CF:3F:C3:3A:BD:E0:3F:E0:16:44:69:FE:95:46:55:05:31:E9:1C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01942825789796680392AEE1211E7FD96AE7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2c8_wzq94D_gFkRp_pVGVQUx6Rw.roa
Signing time: Thu 02 Jan 2025 17:52:11 +0000
ROA not before: Thu 02 Jan 2025 17:52:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215642
IP address blocks: 2a0f:b241:14f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 08 Jan 2025 23:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:78:97:96:68:03:92:ae:e1:21:1e:7f:d9:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 2 17:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9cf3fc33abde03fe0164469fe9546550531e91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:62:b5:b5:27:b9:73:03:78:3b:27:b7:13:
34:06:16:93:77:01:01:83:dd:ef:77:ca:c9:2a:85:
a9:94:f6:4e:d4:1f:d8:f8:22:c6:2c:a9:fa:bc:d4:
b9:d3:21:6d:dd:0b:e1:85:c7:f6:51:02:f8:41:bd:
6d:7c:72:dc:11:bd:e8:cc:d2:2e:b5:52:95:e9:df:
f9:1d:2d:d8:e2:c4:97:77:1c:dd:24:49:da:eb:d4:
ca:ee:c8:b0:85:3b:36:12:ff:48:d2:49:99:b1:55:
ff:f2:8e:f8:9f:db:f9:5a:5a:82:f2:81:27:d8:3d:
e3:b5:09:75:eb:19:91:42:50:38:42:f1:2f:f8:63:
7c:91:e3:2f:19:a2:4b:e8:85:2d:6d:f0:e2:e3:b1:
d4:fd:85:db:e3:52:c8:bf:9f:15:24:ee:2a:10:75:
5f:5f:51:15:ca:b5:01:bd:e7:62:c7:3b:41:a1:90:
8e:e4:d5:86:f6:fc:b2:c9:0b:45:28:a3:a6:f2:b5:
bd:cf:3d:fc:9e:01:54:63:ce:bc:bb:4e:9a:4b:25:
f1:88:22:5a:fb:45:90:2d:18:23:3b:bf:9b:62:05:
4e:3f:38:27:b2:09:23:a5:d8:2b:86:ff:18:45:b6:
63:a6:a1:d1:8a:d9:95:83:b3:41:29:37:a9:86:d0:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:3F:C3:3A:BD:E0:3F:E0:16:44:69:FE:95:46:55:05:31:E9:1C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2c8_wzq94D_gFkRp_pVGVQUx6Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:14f::/48
Signature Algorithm: sha256WithRSAEncryption
32:e5:a8:86:29:17:f9:c3:76:99:cd:88:fc:d6:03:7c:f9:29:
2d:cf:ae:91:6c:ef:8f:f2:bc:72:95:f8:42:3f:e3:10:bc:9d:
3f:3a:e2:07:8f:f7:22:0b:d0:3c:74:12:16:f6:b1:6c:c3:df:
e8:4c:0d:ee:54:3b:f4:43:b5:a4:82:43:90:90:fd:2c:00:40:
cb:cd:b4:fe:7a:0b:cf:15:48:22:5b:a1:19:8e:ba:64:08:a9:
b1:8c:1c:8b:60:f8:61:ca:f5:94:98:f4:52:ca:71:3a:ce:c2:
21:fd:24:5f:a5:b5:09:73:ef:71:b0:e1:61:70:3c:ad:b6:e8:
36:db:ba:c1:aa:4d:e5:c5:1e:35:61:fa:dd:4d:20:7d:e3:26:
4d:9f:20:62:5c:cc:49:bd:b8:00:16:12:99:36:20:7d:2c:16:
fb:28:31:f5:90:48:cc:5e:8d:e7:ed:5c:67:98:f8:f1:d9:87:
48:20:0a:01:d1:46:47:82:8d:69:79:be:93:8a:3d:54:83:e8:
16:75:89:ed:11:54:11:e7:00:97:4b:c6:16:bf:1b:62:02:96:
2f:16:8d:d5:99:fb:bd:31:fb:03:bd:50:91:c7:a4:19:09:15:
68:e8:2f:db:2e:3e:7c:8f:78:58:f6:13:a6:55:c6:70:ec:12:
10:7f:bb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:18:23 2025 by rpki-client