Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EZdfqHmyOm4Ax8i6qgT2nlcY3fw.roa
File: EZdfqHmyOm4Ax8i6qgT2nlcY3fw.roa (raw, json)
Hash identifier: gVv9bk5PWH037V3aUERFyTtgmmOTi1iC0i3vd7ozrek=
Subject key identifier: 11:97:5F:A8:79:B2:3A:6E:00:C7:C8:BA:AA:04:F6:9E:57:18:DD:FC
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB88E24EF54A16E1910A60BC386F4EC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EZdfqHmyOm4Ax8i6qgT2nlcY3fw.roa
Signing time: Tue 06 Feb 2024 18:40:17 +0000
ROA not before: Tue 06 Feb 2024 18:40:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215845
IP address blocks: 2a0f:b241:152::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b8:8e:24:ef:54:a1:6e:19:10:a6:0b:c3:86:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:40:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11975fa879b23a6e00c7c8baaa04f69e5718ddfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:83:49:0b:7f:61:92:3a:34:2f:31:99:b1:
6c:1a:34:03:46:bc:eb:b4:d3:a7:b5:a4:b7:93:bc:
3d:1a:5e:f2:fc:50:81:45:5b:04:20:3c:ba:ba:2e:
28:cf:c1:0a:7a:c3:ef:7d:4f:31:8a:5a:35:75:fd:
fc:80:af:39:63:07:92:be:1b:d0:6b:f8:48:d3:a1:
87:e5:69:b7:5f:2b:55:1e:9f:a6:06:a9:9a:c4:34:
f2:44:67:1d:b5:ba:db:d3:d0:22:0d:44:cd:34:7e:
8e:dc:df:cb:e3:78:23:e1:e4:ed:f2:7c:0a:92:cb:
43:9d:5f:25:6e:53:be:72:8c:e5:9a:d1:97:52:bf:
d7:63:e8:54:0e:a2:51:ac:f4:ef:38:e9:8d:fa:5f:
78:14:e6:d8:32:00:fd:75:7f:33:43:f0:3e:80:f9:
b8:32:0c:2e:30:2c:38:fd:bd:fc:29:70:3a:a7:a4:
cf:2e:06:c1:3d:eb:e4:38:df:29:23:c3:f5:c5:f2:
8c:d6:f1:00:a2:7f:e3:32:7c:c2:d6:d6:e7:5f:d0:
74:ba:59:88:4b:08:f1:c9:28:c7:a3:8d:8e:a3:37:
d9:66:4e:36:50:6d:e5:44:e9:7b:ab:7b:87:43:df:
d1:7b:df:54:db:5f:c6:90:d5:13:1c:f7:eb:d7:0c:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:5F:A8:79:B2:3A:6E:00:C7:C8:BA:AA:04:F6:9E:57:18:DD:FC
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EZdfqHmyOm4Ax8i6qgT2nlcY3fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:152::/48
Signature Algorithm: sha256WithRSAEncryption
04:35:06:6d:62:39:cb:98:c4:b8:4a:8d:db:fe:6d:f4:1f:cc:
32:06:82:03:ab:21:66:06:0c:bc:25:79:3a:04:3e:71:91:64:
27:12:d0:d6:af:e4:36:e9:4c:f4:ca:ce:4e:f0:20:8c:3f:80:
5e:6f:1d:52:b6:e3:47:00:41:e1:9e:fc:9b:e4:bf:77:ca:d6:
41:2f:eb:2b:8b:2f:b6:37:02:3e:f3:be:21:a5:9f:29:1c:13:
53:1f:76:56:39:ef:8f:88:da:84:4d:32:de:a8:21:35:20:7b:
e8:5c:08:35:10:62:51:1a:bc:a7:77:9b:25:2a:2c:00:0e:60:
92:32:7f:96:f9:39:d8:c0:9f:ee:f5:43:5b:2e:cf:46:67:b0:
09:0d:0d:87:f0:e5:00:d4:a6:f2:4c:e1:fa:80:0c:c4:27:20:
c4:72:09:62:ad:89:51:75:ce:2b:b1:bb:32:a8:6f:1b:4c:b1:
77:7c:06:44:f3:df:8c:3c:ee:e6:9e:d9:c4:ed:a3:bb:42:a8:
66:bc:59:b1:19:68:d0:98:83:89:19:ee:34:8d:00:02:ce:3a:
11:ac:b0:72:84:d8:54:90:30:47:82:82:09:f4:6f:04:3a:73:
41:27:91:37:b8:72:11:82:4c:e5:4a:15:ae:ab:55:5b:61:e0:
3e:bb:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org