Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YdoZzTjLZyNz9oqnGVjVgadhE-Y.roa
File: YdoZzTjLZyNz9oqnGVjVgadhE-Y.roa (raw, json)
Hash identifier: +KPPZlzGMn5YhIiKiNmGipL9JT4OTydN+kalfXSJ9T8=
Subject key identifier: 61:DA:19:CD:38:CB:67:23:73:F6:8A:A7:19:58:D5:81:A7:61:13:E6
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F95BE200B9FF7E3A47B8D2FD9E6761E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YdoZzTjLZyNz9oqnGVjVgadhE-Y.roa
Signing time: Tue 06 Feb 2024 18:02:16 +0000
ROA not before: Tue 06 Feb 2024 18:02:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209267
IP address blocks: 2a0f:b241:42::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:95:be:20:0b:9f:f7:e3:a4:7b:8d:2f:d9:e6:76:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:02:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61da19cd38cb672373f68aa71958d581a76113e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:55:40:71:65:36:7c:19:73:9b:da:b3:f8:
9b:04:49:21:0a:6c:3a:6c:25:74:9c:35:e3:3c:4a:
bc:c7:90:2f:61:f4:9c:60:1c:cd:e9:c2:57:e4:35:
91:11:43:ae:fc:f7:ac:fd:f1:31:1d:78:0b:c5:57:
11:d1:f5:5d:a2:f6:29:fd:f7:6f:64:c0:eb:ab:a2:
19:d2:25:f8:bc:3c:f0:57:d4:ad:85:9a:bc:cc:ed:
71:02:6a:d6:f0:d4:25:9b:57:0e:b8:b2:4e:bd:ff:
3a:3d:42:d0:92:5a:1f:ca:06:d4:83:1d:b1:86:fb:
0e:5b:19:6a:be:44:4d:51:7d:81:58:51:21:83:5c:
15:77:cb:3c:5c:13:24:15:b7:97:8f:43:3a:62:57:
a7:e1:d9:74:13:23:71:4e:a8:65:45:0c:dd:e1:c5:
b0:ce:51:ab:22:e7:8b:bf:3d:59:49:cf:e9:96:ae:
e6:c5:c5:d9:dc:e5:81:62:ce:a2:19:2a:42:c9:c2:
55:35:4f:d5:7c:99:c4:96:e9:da:d4:bc:ab:c1:e0:
bb:cf:f7:75:f2:a7:7d:2f:2a:d7:75:a6:aa:22:09:
b3:3e:b9:2f:50:2c:78:9e:2c:46:7e:e4:32:0d:64:
bd:7c:0f:a0:01:52:06:99:33:26:d4:71:69:20:45:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:19:CD:38:CB:67:23:73:F6:8A:A7:19:58:D5:81:A7:61:13:E6
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YdoZzTjLZyNz9oqnGVjVgadhE-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:42::/48
Signature Algorithm: sha256WithRSAEncryption
53:67:78:9d:e7:3b:d3:e3:e7:df:91:8c:76:8e:40:d5:2c:0d:
51:51:03:59:32:70:af:1a:1c:71:55:ba:c4:99:a4:4a:df:4c:
84:86:d3:cb:4a:11:42:dd:03:ad:6b:06:14:eb:43:3b:eb:6e:
d9:8c:c8:2d:e4:c9:3e:ce:ef:ee:7b:0f:00:b1:ca:23:87:ea:
35:0a:43:8c:03:ff:35:87:55:e4:9d:42:ce:e7:68:6b:37:af:
83:59:3b:38:cb:e7:c6:3b:b8:00:e9:f3:45:f0:6c:24:42:4e:
ec:37:a8:e2:5c:01:29:fd:14:e8:1b:5d:f1:a0:84:3c:83:9e:
1c:bf:0b:31:fb:82:47:fd:96:4b:2c:0a:d3:ea:f5:75:9f:b5:
4d:95:1d:50:a4:44:ec:1d:22:e1:f5:7a:07:d4:e5:df:db:ac:
87:44:d2:69:3e:e2:fb:b3:a4:50:8b:0a:9d:2d:40:65:a7:bc:
18:2f:17:87:9b:78:94:57:ea:92:3f:46:e7:98:2c:f5:3d:a0:
90:85:00:19:70:8d:ac:60:3e:85:33:97:96:d0:78:d1:50:6a:
9d:b1:26:d0:ed:00:4c:d5:c4:e0:dc:4b:44:a3:ff:97:7d:92:
1e:c2:8d:f1:c8:8f:1a:85:38:0c:01:36:de:08:b9:3f:d5:15:
37:32:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org