Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/KUN8DeRkdl_pfgGZ27zZwGOzSUE.roa
File: KUN8DeRkdl_pfgGZ27zZwGOzSUE.roa (raw, json)
Hash identifier: qOuXmnQAL67OVColydv+LFbLU3ScSJWwAu797OTSGYg=
Subject key identifier: 29:43:7C:0D:E4:64:76:5F:E9:7E:01:99:DB:BC:D9:C0:63:B3:49:41
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6B93E71AF221445CFFA69CE854313
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/KUN8DeRkdl_pfgGZ27zZwGOzSUE.roa
Signing time: Tue 06 Feb 2024 18:38:17 +0000
ROA not before: Tue 06 Feb 2024 18:38:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203062
IP address blocks: 2a0f:b241:135::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:b9:3e:71:af:22:14:45:cf:fa:69:ce:85:43:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29437c0de464765fe97e0199dbbcd9c063b34941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:89:0d:a2:4d:4c:fc:84:a2:2f:2e:e3:4d:
11:a4:01:00:61:db:25:0c:ef:6e:83:d1:ba:24:66:
f7:c6:17:19:de:0a:4a:cf:45:96:d3:83:59:5f:ad:
6c:71:83:70:38:f2:e3:b2:30:11:49:f4:01:36:50:
7a:a2:86:99:e1:36:3f:a6:85:b2:49:5d:72:68:5c:
47:a0:8b:53:07:3a:78:c1:dd:b5:a8:59:13:21:6e:
7b:88:bb:3e:32:11:ec:4a:60:00:37:91:17:a6:0e:
74:d2:65:83:c1:f7:0b:75:8e:92:fd:a0:50:1f:0d:
9e:44:e6:c3:72:19:2d:7c:e9:47:9e:82:a4:e9:4b:
3e:78:ad:13:8e:a5:54:7b:b8:2d:2c:74:87:77:47:
5f:8e:6f:2a:f3:b1:46:18:11:ee:27:99:3a:9a:92:
00:a4:f1:83:75:e7:6a:1c:14:64:b1:53:f7:77:50:
b4:2e:92:be:a6:4b:01:ad:2d:87:4b:54:44:00:f0:
ab:82:7c:77:22:00:b4:d6:02:1c:02:9f:9c:0b:f1:
18:20:cf:03:8a:82:f4:e8:71:39:89:e6:bf:fa:85:
bb:ea:7b:1d:40:26:1b:69:84:9f:59:84:df:3e:9b:
7b:f0:ea:ed:4e:2a:d1:35:c6:aa:00:9a:0b:31:43:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:43:7C:0D:E4:64:76:5F:E9:7E:01:99:DB:BC:D9:C0:63:B3:49:41
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/KUN8DeRkdl_pfgGZ27zZwGOzSUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:135::/48
Signature Algorithm: sha256WithRSAEncryption
1d:d6:2f:45:5d:05:9b:11:15:cb:7e:e2:0f:1d:71:2c:3d:e4:
41:bd:df:44:c5:e1:4b:0f:65:f0:2d:a5:d3:86:80:e5:bb:47:
cf:19:ce:72:89:44:61:b0:1e:f1:c3:fd:c6:5c:5f:2b:c5:52:
82:37:3a:42:e5:2e:ef:34:83:c8:2c:3d:1d:d7:3c:23:82:6b:
56:3d:56:6d:29:a8:0a:65:01:06:d1:38:24:96:b5:e3:d5:73:
83:5c:63:cc:53:79:8b:0c:07:ce:b7:9e:1e:b2:37:b0:20:b8:
0e:b7:1b:c7:c6:83:91:bd:df:10:69:ab:3d:f9:ce:ca:22:b3:
af:b0:93:12:46:cc:a9:93:54:03:3d:3d:0a:71:9a:b3:81:e5:
73:33:29:41:71:66:3f:29:08:0c:0a:77:52:7b:de:1f:ad:ec:
d0:8c:a4:69:5b:94:64:fe:58:0f:d0:a1:5f:4f:eb:e9:69:fc:
2f:4f:91:74:d3:73:0b:20:7a:a9:8e:38:e3:51:d0:44:aa:a2:
04:18:c9:6b:2c:44:12:79:bb:7c:35:da:0c:46:ea:94:99:6f:
99:9f:2b:5f:ef:5c:33:df:c1:e6:b2:7e:41:b8:ba:58:44:5e:
66:b6:47:c6:5c:2c:6e:17:1e:8e:20:a4:0a:78:52:4a:92:a9:
9f:bd:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org