Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2rHGSq02uyTcvbyjnBGYDKGivu8.roa
File: 2rHGSq02uyTcvbyjnBGYDKGivu8.roa (raw, json)
Hash identifier: aXljZ+I8Ax77ETN0tj6OfmUzxG+ROR7X/gKixBHQJHw=
Subject key identifier: DA:B1:C6:4A:AD:36:BB:24:DC:BD:BC:A3:9C:11:98:0C:A1:A2:BE:EF
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA80B6825E4A673E849F1E0FC8040AE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2rHGSq02uyTcvbyjnBGYDKGivu8.roa
Signing time: Tue 06 Feb 2024 18:22:15 +0000
ROA not before: Tue 06 Feb 2024 18:22:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199626
IP address blocks: 2a0f:b241:88::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:0b:68:25:e4:a6:73:e8:49:f1:e0:fc:80:40:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dab1c64aad36bb24dcbdbca39c11980ca1a2beef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:c2:14:3b:42:f8:7e:d6:a0:57:eb:08:cf:
98:16:70:6a:29:40:87:20:d6:3a:ec:4b:9a:87:20:
ea:80:7d:38:2f:9a:3e:9a:89:3a:6a:a1:5e:2e:c2:
22:7c:80:28:85:cb:64:ec:13:36:82:9b:85:4e:9c:
08:ee:41:e3:8c:ab:5d:5d:d2:a2:31:6b:67:27:b5:
5b:8f:51:38:cb:e2:a3:46:16:7c:08:16:88:4a:6b:
cd:64:d3:a1:c4:9a:92:40:15:57:c6:bb:81:56:e0:
b6:93:b7:61:5b:bf:43:e9:32:f3:09:c2:cb:34:37:
f7:dc:1b:f2:58:52:47:ee:fd:39:a1:a1:7e:02:0a:
c6:df:08:46:ab:d0:0b:9c:e0:2b:75:48:f3:c5:dd:
a8:10:74:c4:0d:c7:51:0b:cb:88:91:8c:a0:71:e6:
da:e0:86:5d:54:c1:1d:0f:0d:2b:05:58:39:a2:a4:
ba:32:59:cb:27:ea:32:f6:c8:18:5d:4a:5f:b6:c0:
a5:0d:97:08:55:e8:0f:2e:c6:16:94:58:4a:d1:94:
12:49:1d:ae:4a:ba:96:16:cc:38:22:ef:20:f8:9c:
f2:b3:09:23:ea:8b:9b:5e:13:34:29:0e:fe:5e:1e:
9f:f8:81:09:5b:68:89:d0:dd:ce:c2:c5:75:46:06:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B1:C6:4A:AD:36:BB:24:DC:BD:BC:A3:9C:11:98:0C:A1:A2:BE:EF
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2rHGSq02uyTcvbyjnBGYDKGivu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:88::/48
Signature Algorithm: sha256WithRSAEncryption
0e:a6:76:7a:0b:23:20:15:f8:a7:fc:d9:4a:48:65:cc:05:29:
06:ba:ec:e5:41:f8:eb:b3:72:30:9b:44:3a:09:c2:ab:be:a3:
89:ce:a3:4b:ec:48:9c:eb:33:ea:0b:0a:e7:65:76:a5:ec:7c:
2e:a8:34:3a:48:d0:5a:88:50:8a:0d:60:63:dd:6f:8d:31:59:
38:82:b7:c4:50:ed:0c:e7:19:c5:92:a5:6f:b9:2d:77:31:7c:
49:79:92:2d:a5:3a:49:48:ca:69:66:6e:4d:64:90:76:8f:38:
fb:63:d8:40:62:e6:d9:64:27:ec:ad:0b:cb:3e:0f:51:e3:6c:
f1:76:b5:66:27:72:ec:f7:fd:ad:8d:f1:69:00:34:a8:fe:2a:
08:9f:64:9a:a0:ea:96:c0:c2:e7:81:b7:95:62:4b:50:6c:da:
68:62:27:6d:47:93:f1:bd:7a:f8:6a:00:b8:37:7d:5a:25:a2:
77:c0:87:de:72:d4:23:86:0c:7a:d6:e5:7e:f2:e8:9c:d7:3f:
c9:f8:b0:fe:bb:6c:36:67:03:97:79:0c:32:75:74:ca:b9:2e:
48:76:3b:d5:fb:44:22:e3:d8:a3:a6:8d:34:1d:72:e7:cc:d0:
fb:e1:fc:70:e9:cb:e6:62:00:1a:88:29:a0:c3:64:b8:3b:8d:
8f:e2:41:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org