Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EeqBZH3GoyiN82R_R759Ebp2nxw.roa
File: EeqBZH3GoyiN82R_R759Ebp2nxw.roa (raw, json)
Hash identifier: u/7qjcjFdN5V7aCviLUr5ZCVH/QySiatzqVv9SzZxds=
Subject key identifier: 11:EA:81:64:7D:C6:A3:28:8D:F3:64:7F:47:BE:7D:11:BA:76:9F:1C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81FED00F328A790FF0F6F7A0438995BB
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EeqBZH3GoyiN82R_R759Ebp2nxw.roa
Signing time: Wed 07 Feb 2024 05:16:16 +0000
ROA not before: Wed 07 Feb 2024 05:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211679
IP address blocks: 2a0f:b241:98::/48 maxlen: 48
2a0f:b241:b1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:fe:d0:0f:32:8a:79:0f:f0:f6:f7:a0:43:89:95:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11ea81647dc6a3288df3647f47be7d11ba769f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:27:2e:ec:52:ef:a1:30:62:dc:0a:d4:18:59:
4b:3d:74:38:42:79:87:40:d8:86:6c:63:6e:59:de:
7f:25:90:b1:ea:0f:81:b8:9e:9d:f3:66:32:d8:57:
2d:32:34:d4:2f:b6:7d:30:9d:bd:f1:7f:63:41:2c:
dc:de:3e:ab:3b:d8:0d:96:4a:60:f0:c5:bd:d7:cb:
7f:3a:8e:87:fb:7f:95:fa:e6:ad:18:f4:25:78:ad:
5f:e5:4a:6d:41:e7:58:14:55:ff:14:58:4a:8b:a5:
2a:c8:5e:e1:70:c2:56:37:dc:c6:45:c3:66:83:88:
44:45:dc:fa:f6:5d:58:3a:e2:86:7c:0e:db:36:cb:
e8:69:ee:27:d5:bb:ed:7d:5b:29:48:ad:3b:cf:da:
0d:37:77:7c:03:c7:25:b9:12:03:0d:59:3b:d7:47:
34:9a:e2:8b:9e:d9:47:20:32:64:32:17:cb:18:ad:
09:8a:ac:b8:4d:0b:de:c4:d9:23:5a:70:01:5a:ff:
81:cd:c9:47:90:17:63:db:4d:ac:4f:fb:b9:d7:2c:
c8:b6:94:91:3e:15:63:ae:ea:96:b0:81:71:1b:8c:
e2:24:32:1c:18:1c:d0:76:e6:10:26:23:cb:cf:4f:
ea:a9:53:1d:35:98:07:38:e0:64:a2:75:37:b4:d3:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:81:64:7D:C6:A3:28:8D:F3:64:7F:47:BE:7D:11:BA:76:9F:1C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EeqBZH3GoyiN82R_R759Ebp2nxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:98::/48
2a0f:b241:b1::/48
Signature Algorithm: sha256WithRSAEncryption
41:db:4e:85:42:68:31:69:34:8c:e4:83:35:a6:47:a9:46:cb:
e4:6a:f4:85:b6:c9:d5:eb:ed:9a:c1:ea:84:14:b5:a9:5d:ee:
50:4c:df:42:53:9d:2f:db:bc:5d:81:81:aa:6e:0a:f1:7e:7c:
1d:38:67:7d:2c:d5:88:05:43:02:8f:84:fb:33:92:10:8a:6a:
bd:ea:25:7d:0f:61:52:5b:5c:ca:e9:26:b7:62:cb:07:83:82:
a1:b6:7a:a5:4e:6b:00:ee:6f:29:66:82:02:b0:0e:34:2e:56:
93:cb:c6:17:f2:c3:2c:cc:5b:16:ee:43:e3:6b:29:74:3c:51:
69:ba:42:74:19:35:89:9d:c6:f8:6c:9f:21:b8:9e:6f:bb:35:
60:ef:81:b2:3e:df:11:b4:83:9d:b5:87:7c:11:cf:50:b2:4d:
b9:59:0b:a5:ed:70:ab:a8:cc:a2:07:91:7c:79:5a:ce:cd:54:
bc:7c:09:fb:05:50:37:a3:b2:46:d6:fa:35:be:d6:e4:1b:b0:
24:f5:0f:31:f2:60:ee:38:7c:e5:71:45:e7:9b:21:61:a6:4f:
81:5a:7b:d4:d5:33:33:76:b1:2d:a8:3a:67:10:6c:57:ed:a7:
d7:2f:26:93:68:5c:cf:8d:36:b6:62:e6:80:51:06:f4:7e:4a:
81:1a:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org