Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/U7BX0CrN5gQ0qo0-L6elXuvxB50.roa
File: U7BX0CrN5gQ0qo0-L6elXuvxB50.roa (raw, json)
Hash identifier: tgUm/Cy3zXrJ8e4hF+qi007OBckCNsMVCdXe9GgRfbg=
Subject key identifier: 53:B0:57:D0:2A:CD:E6:04:34:AA:8D:3E:2F:A7:A5:5E:EB:F1:07:9D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAACD739758196AA228FEE9B056D194
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/U7BX0CrN5gQ0qo0-L6elXuvxB50.roa
Signing time: Tue 06 Feb 2024 18:25:16 +0000
ROA not before: Tue 06 Feb 2024 18:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200992
IP address blocks: 2a0f:b241:dc::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:cd:73:97:58:19:6a:a2:28:fe:e9:b0:56:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53b057d02acde60434aa8d3e2fa7a55eebf1079d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e5:80:62:72:9d:f5:3d:6e:d0:4b:d0:7a:44:
c6:61:5a:03:27:e8:f0:9c:71:0c:8f:44:15:38:1c:
fc:89:ae:e0:d1:19:80:05:e8:f1:42:68:4d:ca:2f:
50:ef:fe:d6:cf:61:c9:72:3b:02:7a:84:e0:38:ec:
d4:84:8b:28:a1:4c:02:2c:69:80:8f:d6:26:25:3c:
a5:7b:25:19:92:ca:3e:26:8c:78:b8:4d:37:2b:48:
1e:39:20:7d:6a:fe:78:78:a9:26:95:7f:15:24:ca:
2f:12:e9:2c:ee:aa:42:5f:02:95:c3:1f:5e:78:28:
bb:6a:33:c1:c2:03:e2:98:67:33:e4:a6:de:f6:39:
65:77:fd:74:25:b7:0d:53:26:6f:19:68:1d:e7:6c:
88:06:64:e9:1e:67:72:67:81:4b:06:e1:3b:f6:d3:
e5:5e:4c:8c:72:80:1b:c5:39:0a:b2:0f:fe:12:eb:
85:cb:ec:e3:ef:30:7d:ef:5b:d6:2a:e7:25:16:c4:
4c:2a:f4:c6:ea:bd:b4:75:4f:6a:96:68:3f:b4:f5:
db:28:57:8c:3c:31:69:5b:82:b1:00:17:87:e0:62:
0c:78:6b:87:b7:0e:40:1c:d3:85:e5:16:78:89:1d:
f1:f0:ed:62:bd:47:b4:33:26:50:74:dc:ca:ee:b1:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B0:57:D0:2A:CD:E6:04:34:AA:8D:3E:2F:A7:A5:5E:EB:F1:07:9D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/U7BX0CrN5gQ0qo0-L6elXuvxB50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:dc::/48
Signature Algorithm: sha256WithRSAEncryption
48:96:25:96:df:5c:46:4b:6a:74:8b:68:03:43:9f:be:2d:ed:
a5:79:dc:70:b0:ca:4f:bf:3a:0f:d4:e9:63:4d:77:a3:f5:94:
59:cb:d8:b5:ce:a3:a7:0d:72:09:a6:c2:d0:7c:c7:13:69:35:
63:1a:d4:e0:bf:34:90:1d:67:65:4c:60:b9:b2:1a:0f:25:3d:
31:52:ae:77:a2:90:93:fa:58:d7:82:10:28:3c:36:0b:dd:da:
2e:07:e6:4c:d9:4f:4a:2a:35:72:44:d4:f9:6a:5a:ed:ae:af:
38:96:f0:6e:cc:ce:ce:68:f9:d7:45:c6:4f:76:b7:2e:bc:39:
3c:d2:10:09:95:0a:c8:c0:c5:51:ee:55:2e:ed:3f:16:a0:2d:
c6:83:41:93:c0:4f:3b:e6:81:48:65:ed:37:ff:b5:18:ea:42:
24:23:9e:9c:a0:be:d5:4c:7a:e2:f1:82:86:9f:bd:cc:ad:54:
3d:83:45:3e:9f:2c:c5:9f:8f:2a:78:6a:7f:ea:3c:7d:9d:1d:
15:bf:77:73:01:ae:da:cd:8e:47:71:64:89:41:d3:d4:89:45:
37:8f:21:ce:4d:fb:1b:1e:59:de:14:45:86:5e:b0:24:f3:14:
cf:88:32:85:8b:33:d7:b7:b2:d7:9f:21:24:c9:a1:4d:97:55:
68:08:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org