Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PbJuSOwCnr3iBLUOEuHAUTibPY0.roa
File: PbJuSOwCnr3iBLUOEuHAUTibPY0.roa (raw, json)
Hash identifier: LaQV0d2uNABh6UJeqOWiZFpymv/WDTOzitiHU4XaQCg=
Subject key identifier: 3D:B2:6E:48:EC:02:9E:BD:E2:04:B5:0E:12:E1:C0:51:38:9B:3D:8D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E518D8A55CB4DDBD89449B3107C3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PbJuSOwCnr3iBLUOEuHAUTibPY0.roa
Signing time: Tue 06 Feb 2024 18:24:16 +0000
ROA not before: Tue 06 Feb 2024 18:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200789
IP address blocks: 2a0f:b241:d2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e5:18:d8:a5:5c:b4:dd:bd:89:44:9b:31:07:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3db26e48ec029ebde204b50e12e1c051389b3d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:50:af:4c:35:50:7b:df:2f:ed:f7:56:71:
d0:56:22:d2:b1:1a:14:ac:4f:59:33:4b:7b:f3:5c:
8e:8c:a7:25:72:56:b0:71:cf:8d:4e:15:3c:ee:95:
0e:10:16:fd:80:b1:61:23:45:f0:d6:24:48:1b:f4:
3b:83:d5:b4:9f:d7:30:95:c7:a8:d2:85:71:44:8a:
77:a2:67:7d:07:93:d8:df:6b:4e:aa:56:32:c7:25:
1a:a3:f7:7f:07:f7:c1:5e:c8:49:0c:97:d2:7a:2e:
2f:d6:46:a5:90:8f:1b:8d:ad:77:cd:8e:be:90:81:
9b:a1:3b:77:88:c5:ee:94:04:cd:48:bd:de:95:45:
f0:70:97:b3:e2:16:28:31:a5:2c:66:80:af:51:89:
61:d3:a6:fc:5c:82:c7:d7:43:3d:b0:25:e7:a7:51:
09:45:97:ed:03:c7:b6:0a:e8:a1:b2:65:8a:67:f6:
57:70:2b:73:ce:45:00:ea:79:96:fe:16:58:68:83:
4d:e4:c8:59:79:9d:68:4e:1d:0f:72:84:b3:6f:11:
91:4d:1f:21:bd:b6:c5:2f:15:72:59:0b:1d:a9:8d:
d6:eb:1a:35:03:0f:20:0f:c1:50:0a:23:4b:95:39:
b4:4e:3f:8c:45:4d:19:36:6d:a1:ad:e4:be:76:8b:
e5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:6E:48:EC:02:9E:BD:E2:04:B5:0E:12:E1:C0:51:38:9B:3D:8D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PbJuSOwCnr3iBLUOEuHAUTibPY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d2::/48
Signature Algorithm: sha256WithRSAEncryption
1c:17:b6:15:68:c7:35:e6:4e:93:10:5e:52:a6:99:81:6a:00:
bb:08:4b:c4:fd:b4:d6:99:85:dc:4f:50:9d:db:97:4e:39:49:
d9:31:32:f6:40:59:f8:91:26:8f:d8:27:b7:65:a5:6e:dd:61:
56:8b:9f:8a:c8:79:49:7d:a2:77:e4:af:96:ec:6e:43:ea:e5:
d7:3d:c3:50:f2:d2:c5:4c:6c:bb:dd:c2:2a:e0:08:00:d7:65:
25:d0:ea:9e:07:6d:2b:a8:ed:84:20:a7:11:83:8d:d1:76:c4:
e0:81:f0:d1:aa:d8:50:59:7e:d0:d5:e3:4c:f7:bf:e5:5f:35:
a7:00:08:0c:eb:be:8c:c2:88:6d:f7:42:2f:c0:2a:77:eb:bb:
ba:b5:22:f3:d7:6e:b1:0f:02:4a:f1:08:a3:75:8f:50:f4:49:
bb:7e:82:c3:c3:c9:5e:96:6b:23:1b:94:9d:b2:4d:f4:0d:48:
a1:16:65:57:cd:31:c0:ea:4b:4c:f7:12:e7:61:5a:4c:84:7c:
d9:e6:0e:45:2a:f6:4f:ad:ce:4e:13:de:13:5e:ab:30:da:11:
4e:bd:c6:fd:eb:74:8b:52:39:98:a9:60:c8:5e:5a:cd:b0:19:
ed:1a:36:1d:df:2c:7d:72:93:4e:bc:ae:0a:0e:57:e9:d4:50:
29:e9:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org