Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CPmCcSAaaPohGW_YnlcGKU-Ejn4.roa
File: CPmCcSAaaPohGW_YnlcGKU-Ejn4.roa (raw, json)
Hash identifier: 09pqIIBsgXzuG2T73ozIwMi+xhkdLk5zueiusdH8JKI=
Subject key identifier: 08:F9:82:71:20:1A:68:FA:21:19:6F:D8:9E:57:06:29:4F:84:8E:7E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F08D8D7219D2EB14B2142D23B4D454
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CPmCcSAaaPohGW_YnlcGKU-Ejn4.roa
Signing time: Wed 07 Feb 2024 05:00:42 +0000
ROA not before: Wed 07 Feb 2024 05:00:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203539
IP address blocks: 2a0f:b241:e5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:8d:8d:72:19:d2:eb:14:b2:14:2d:23:b4:d4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08f98271201a68fa21196fd89e5706294f848e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:6b:44:0c:12:61:fc:2a:0b:fe:25:f2:ed:
7a:0b:3a:6f:c1:20:0a:e7:b6:9f:6f:6c:62:3e:fc:
8e:bc:95:e3:e0:5d:7e:c3:4a:44:57:42:e6:c1:e6:
12:4c:c0:b1:db:a0:c7:46:a4:5a:ca:8b:52:7a:04:
fc:d0:7d:0f:cf:d5:71:b1:69:6d:42:f5:f7:ec:a3:
1b:76:f6:63:5b:ef:dd:b1:8c:00:84:5f:89:cf:0f:
08:d2:07:b6:9d:ee:d2:2e:1e:7e:1a:c3:97:c8:e4:
2b:d7:41:41:90:ef:d8:e2:be:74:36:5d:4d:22:cc:
90:aa:52:a5:76:3d:6e:1d:2d:55:e7:ea:9f:a2:98:
b9:18:12:43:ca:78:b0:8d:9b:7a:8e:de:b7:13:21:
19:44:9d:4c:d6:a5:f2:4d:31:55:cc:e2:fb:79:f7:
eb:35:2e:a8:61:5d:71:3e:4f:01:eb:cb:c4:d4:d0:
ef:e3:1f:28:1c:96:7a:09:38:81:1e:09:0f:de:f4:
32:df:41:b8:62:d1:52:fc:7b:5d:58:bc:e2:ae:2f:
f1:b4:e6:ba:9d:f7:ac:cc:d4:b6:0a:d8:d7:3a:8c:
f4:bb:d7:8e:02:18:f0:1c:de:10:a0:88:2b:d9:5f:
eb:5d:6b:53:83:2e:a5:30:1c:c7:a6:e5:57:f9:1c:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F9:82:71:20:1A:68:FA:21:19:6F:D8:9E:57:06:29:4F:84:8E:7E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CPmCcSAaaPohGW_YnlcGKU-Ejn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e5::/48
Signature Algorithm: sha256WithRSAEncryption
67:dd:3f:f5:51:45:a3:c5:d1:18:07:51:b2:cf:b0:7d:c5:21:
6b:2e:a6:31:88:7c:56:f8:0b:55:25:9f:e3:cf:53:20:5b:dc:
e2:48:a5:18:48:cb:5f:59:f7:c7:8c:50:62:a2:29:f1:75:8e:
03:43:9a:4e:17:28:4c:99:99:20:4e:42:01:d9:11:f8:a3:6d:
42:0d:0e:23:85:e5:33:22:f2:f5:c4:db:03:d6:bb:87:23:3d:
f5:41:bb:c0:3e:d3:02:5a:84:60:94:f1:8a:a0:16:01:46:53:
57:ad:29:53:89:e2:9a:5e:9e:62:15:80:8f:83:19:18:c3:b9:
a8:41:59:72:eb:d2:34:e1:e9:86:38:ca:20:8b:38:eb:4a:58:
50:17:ef:c1:ea:ff:4e:74:a3:db:c8:85:81:1f:cf:db:ca:d8:
dc:59:a1:80:ed:07:8a:f8:13:ad:02:05:0c:05:23:a5:2f:b8:
6f:bc:c7:bc:05:e5:be:0e:ac:a5:6b:11:68:54:eb:a5:bd:c5:
c6:87:4d:14:26:b5:8b:8e:1d:ab:56:97:f1:f2:9d:d6:bb:53:
da:48:14:7e:e8:51:af:5b:2f:e2:93:96:19:3c:19:ec:e5:ba:
ce:43:6e:59:b4:60:34:ca:5e:41:9d:64:c3:1e:28:11:6b:6e:
05:f7:a1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org