Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kMKURY2BWvb3J24C1xJYqtef4IA.roa
File: kMKURY2BWvb3J24C1xJYqtef4IA.roa (raw, json)
Hash identifier: UvHCM2VQ+dbYIRBJiiQqOkhm+WBFq6CoQ+YaTfbpQqs=
Subject key identifier: 90:C2:94:45:8D:81:5A:F6:F7:27:6E:02:D7:12:58:AA:D7:9F:E0:80
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA80E6E0C0BAF04B31F43BAFAE0E287
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kMKURY2BWvb3J24C1xJYqtef4IA.roa
Signing time: Tue 06 Feb 2024 18:22:16 +0000
ROA not before: Tue 06 Feb 2024 18:22:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199767
IP address blocks: 2a0f:b241:8d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:0e:6e:0c:0b:af:04:b3:1f:43:ba:fa:e0:e2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90c294458d815af6f7276e02d71258aad79fe080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:17:40:21:0d:a7:92:54:51:5c:94:e1:ed:
7f:e9:c3:a7:32:63:f5:20:3c:87:26:4c:f8:c1:4d:
a6:b6:e2:ff:aa:40:e6:69:2c:6a:f8:1e:2d:52:12:
ab:72:cb:0d:b6:fd:a1:62:82:ec:1c:f4:8d:f2:64:
13:e8:cf:c3:ed:3c:19:eb:8f:50:1d:11:b8:0a:07:
54:fb:ad:89:ed:f8:e3:c4:45:23:0e:e7:0f:98:c6:
5e:d6:be:69:21:a7:57:04:f9:d3:8a:ac:5b:a0:ab:
83:b2:b0:9e:7b:b1:d0:ce:74:46:39:0d:a6:86:03:
09:1b:ab:9b:f6:62:99:90:0c:14:6a:1b:3e:93:cc:
fa:76:60:57:1f:b7:6f:da:cb:46:94:41:4d:11:7f:
cf:ff:bd:33:c0:6a:6e:36:7d:95:55:e1:5e:7c:67:
9c:22:4c:1e:5c:50:f0:8c:7c:6b:6f:a6:d2:d8:82:
8f:d1:68:11:da:2d:a2:4b:6c:12:b4:ca:e6:9c:0b:
91:05:39:a1:ec:50:0f:f0:f2:4d:7c:47:02:ce:a5:
32:f3:28:40:0b:34:55:ac:0d:d8:95:e9:87:a2:0a:
e8:e1:54:14:31:4e:cc:d4:38:33:ac:af:14:47:c8:
59:4b:28:27:11:7b:43:37:b9:91:07:76:1c:ea:8c:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C2:94:45:8D:81:5A:F6:F7:27:6E:02:D7:12:58:AA:D7:9F:E0:80
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kMKURY2BWvb3J24C1xJYqtef4IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:8d::/48
Signature Algorithm: sha256WithRSAEncryption
6f:2a:97:15:a1:36:fa:9c:5e:fc:36:7a:f4:b1:e8:00:d0:92:
18:f2:ce:dc:92:01:5b:16:75:29:91:f1:54:43:36:f5:c6:d2:
43:27:7b:05:2f:79:db:05:74:de:a8:25:66:a9:c2:23:26:78:
33:61:68:0e:10:60:86:09:8a:7b:7e:e9:c2:fe:ec:45:3c:07:
96:30:c0:60:2d:47:ce:55:47:43:fa:04:81:15:79:a1:47:50:
67:48:60:72:09:42:23:de:6d:f2:3d:5f:ba:f2:68:ca:b4:2e:
07:11:4d:29:b9:f3:3d:de:53:10:4c:e8:0f:2f:45:e8:fa:17:
39:44:3e:3c:af:4b:3a:4b:0c:a4:15:05:a8:24:2f:a7:d2:48:
83:f3:a3:cb:97:5a:30:a2:6b:c9:bc:c1:42:89:4d:c1:5a:ac:
cc:b2:01:b6:25:f2:c4:35:ce:29:fc:9f:44:4b:af:3d:61:b8:
fb:67:90:25:8e:d9:07:ae:79:25:c6:c5:cb:3a:2c:01:90:96:
13:23:d2:3f:30:89:be:97:ae:2b:5d:f5:3e:9b:71:e2:63:31:
86:2a:bb:56:41:d8:d6:32:ea:3a:f4:36:da:72:7d:36:15:67:
4b:f8:61:70:31:90:e3:35:d8:6d:a6:d4:9c:a7:a9:9d:9b:6a:
6f:2d:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org