Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YTyPNMlwrHLmu3IL7g5HUmfC-Dc.roa
File: YTyPNMlwrHLmu3IL7g5HUmfC-Dc.roa (raw, json)
Hash identifier: qMSD+O+Z8nACys09Dt1E6dAsPwuEoeTNk3NdQIef7Zo=
Subject key identifier: 61:3C:8F:34:C9:70:AC:72:E6:BB:72:0B:EE:0E:47:52:67:C2:F8:37
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACA6B26853A7053D54780CCC72F29B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YTyPNMlwrHLmu3IL7g5HUmfC-Dc.roa
Signing time: Tue 06 Feb 2024 18:27:17 +0000
ROA not before: Tue 06 Feb 2024 18:27:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211679
IP address blocks: 2a0f:b241:fe::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:a6:b2:68:53:a7:05:3d:54:78:0c:cc:72:f2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=613c8f34c970ac72e6bb720bee0e475267c2f837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:1f:2d:4c:97:c5:e3:17:92:db:bd:fb:40:
be:23:7c:40:00:7a:b7:e3:d9:4e:43:5c:74:03:06:
61:16:d1:16:26:2b:79:00:be:36:54:2f:61:a1:b3:
d8:a8:b2:a3:66:2e:53:30:b9:3c:fb:8a:0d:90:d6:
e7:46:a1:49:39:de:df:62:03:19:b4:6f:7d:a6:3e:
19:3d:ba:51:20:99:e6:6c:02:d5:b7:75:60:9e:99:
4e:e6:f1:a0:86:1a:2f:28:ed:a5:a3:78:d4:0d:31:
29:dd:79:19:a0:45:b7:d8:cc:cc:6c:ae:da:6b:be:
e3:65:a0:c0:f1:c7:35:a8:9a:97:7a:2b:a5:e2:b0:
c2:40:3b:18:0b:6a:94:10:10:b2:3b:5f:34:f4:87:
9d:15:0b:66:98:6f:9c:ae:30:0f:4e:be:3b:46:71:
48:88:60:89:41:f3:28:54:c1:bd:ee:44:c5:0b:a1:
a0:0d:f2:e5:7f:b5:c2:4c:b1:ce:d6:31:21:2a:51:
88:8b:d7:49:0e:c6:dc:67:fa:47:26:e5:63:04:db:
21:f5:d8:f3:da:de:26:61:42:90:40:28:bc:1c:44:
01:56:35:70:45:45:51:c9:0f:ea:61:d7:8e:1d:ad:
58:99:93:32:d0:5e:3a:0f:33:b8:83:4f:bf:61:97:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3C:8F:34:C9:70:AC:72:E6:BB:72:0B:EE:0E:47:52:67:C2:F8:37
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YTyPNMlwrHLmu3IL7g5HUmfC-Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:fe::/48
Signature Algorithm: sha256WithRSAEncryption
05:61:42:51:ef:3c:ce:51:70:70:f1:ed:88:60:a2:9f:e9:49:
dd:b8:69:48:d8:eb:37:5e:51:cc:11:76:99:ba:71:a2:cf:bf:
07:e3:a0:a1:c4:0e:2c:eb:95:6f:4e:4d:7c:34:10:bc:00:75:
7c:05:cb:5f:0a:5c:22:19:9f:ef:7a:e4:fe:87:a3:77:55:36:
37:ec:e9:15:39:6b:56:1c:4a:51:90:67:fb:be:d6:77:d4:d3:
b2:d4:77:b2:d1:e0:ff:4e:63:df:2e:18:88:86:26:a3:19:d6:
2b:8f:f8:56:7e:77:f0:61:cb:91:6f:54:e3:68:30:aa:d0:7f:
8c:9e:85:a9:6c:ae:2f:f0:7b:18:a7:b5:3c:38:85:84:9a:95:
8d:0b:f5:46:09:4b:9c:5e:8c:74:9b:7c:36:b4:16:fe:cf:08:
78:f1:43:29:62:a3:ce:1a:b8:fd:e2:74:b2:41:0e:36:82:e4:
b3:c7:cb:df:cb:2a:b3:66:7e:aa:07:16:e3:cf:37:de:98:e4:
dd:4b:66:3d:bc:76:30:98:dd:40:26:30:c2:6e:77:36:4b:f0:
c3:1f:db:aa:e0:57:d0:98:d7:18:bd:15:88:a2:f5:29:c0:cc:
1f:96:63:d3:1c:26:63:da:54:a8:3b:0d:d8:e9:ba:68:6f:ce:
7a:ce:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org