Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/WmaJO4fnqZcYP92n7XdLY9Bjai0.roa
File: WmaJO4fnqZcYP92n7XdLY9Bjai0.roa (raw, json)
Hash identifier: XaKvEKTO1gsUUaoeOLno6q8pvezkO1f6KmCa3nRF9CI=
Subject key identifier: 5A:66:89:3B:87:E7:A9:97:18:3F:DD:A7:ED:77:4B:63:D0:63:6A:2D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F07155D8DF6373DC6DD117DD48ACF6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/WmaJO4fnqZcYP92n7XdLY9Bjai0.roa
Signing time: Wed 07 Feb 2024 05:00:34 +0000
ROA not before: Wed 07 Feb 2024 05:00:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198276
IP address blocks: 2a0f:b241:12b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:71:55:d8:df:63:73:dc:6d:d1:17:dd:48:ac:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a66893b87e7a997183fdda7ed774b63d0636a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:c0:b9:59:89:f7:3c:c4:5f:70:e4:fd:7e:
29:41:5d:5d:87:1e:d5:e3:62:36:58:fe:0d:17:3d:
cb:06:73:fd:c8:91:0f:39:9c:d9:66:37:08:81:26:
1b:63:4d:e2:d4:97:e2:b0:6d:3e:08:b7:2d:df:ce:
1a:b1:22:99:7d:a2:d4:f1:a6:82:d5:ee:e5:e9:a3:
46:d0:32:a0:50:a7:d1:62:79:f2:c5:d5:92:5e:ee:
15:e0:72:15:94:de:31:a4:3b:05:6c:10:f9:57:1a:
de:12:b2:fd:a4:d7:72:a5:4e:b7:13:82:60:64:b4:
75:a9:92:2b:f2:e9:5d:c4:be:82:d3:2a:26:c3:a9:
ad:e4:37:73:32:f0:4d:1a:5d:71:ff:8e:2a:98:b1:
41:79:24:1c:88:2c:2b:6b:1b:06:97:1e:51:53:1d:
4c:e1:48:04:88:3e:94:ea:b9:2e:2d:a4:51:59:c5:
99:ec:38:f2:01:dc:3f:7e:12:18:21:69:11:0a:cd:
2f:3b:7b:20:c5:e8:0f:33:4d:a4:85:38:9f:28:0d:
68:c5:cd:43:a2:4b:a7:ca:2f:05:df:1b:84:96:df:
a4:dd:27:ee:7c:36:6c:18:7a:c7:24:8a:27:a8:08:
4a:fd:ec:91:8d:ec:db:be:7b:49:90:6d:5a:c6:b6:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:66:89:3B:87:E7:A9:97:18:3F:DD:A7:ED:77:4B:63:D0:63:6A:2D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/WmaJO4fnqZcYP92n7XdLY9Bjai0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12b::/48
Signature Algorithm: sha256WithRSAEncryption
8c:c1:bb:fa:a8:56:f7:35:f9:ca:16:83:a8:30:9e:08:d3:a3:
64:ee:72:16:b6:cd:8e:8c:05:c3:e1:b2:13:8c:fc:c3:1e:15:
39:5f:ce:35:a7:73:f6:c8:61:4a:75:69:6f:ee:de:71:50:88:
40:84:5c:35:b3:de:4d:d9:bf:0d:60:2a:65:10:e6:76:a2:7d:
ee:b4:bf:ad:10:32:23:3a:f2:53:45:8c:5c:38:28:1b:7e:be:
e9:26:cd:df:ab:5c:f5:10:ea:3f:7f:59:f1:4b:69:8a:e9:6a:
e9:c8:1b:10:1c:d0:73:0d:f0:a4:45:3b:1c:a3:d3:ab:30:3f:
3a:c8:3b:23:b5:1e:29:85:fe:df:c1:2b:f4:d6:aa:e5:13:50:
58:16:ec:88:36:28:a8:b8:1a:e8:03:d5:42:ed:e0:a1:cb:bf:
6a:82:57:ce:94:2e:43:c2:db:cb:7b:b2:65:25:cc:c4:93:dd:
8b:a9:8a:f2:2f:4d:38:77:be:c8:48:1f:b3:ef:db:ac:6a:29:
04:0f:48:62:58:ba:30:9b:4d:5b:69:f1:dd:c7:fb:42:48:3b:
31:a4:b0:c7:7e:46:75:84:6a:1b:b4:da:3b:41:89:cc:c1:aa:
97:86:b7:39:50:eb:a1:66:25:a8:44:de:4b:31:1f:12:d0:ad:
a6:1d:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org