Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lUH9W0Srd7UfvgWSGZSyXQXDxbo.roa
File: lUH9W0Srd7UfvgWSGZSyXQXDxbo.roa (raw, json)
Hash identifier: PW1WU/f5h09id0wX4cTlLtBm3tGnfs4/RGUDfs7HZ4Q=
Subject key identifier: 95:41:FD:5B:44:AB:77:B5:1F:BE:05:92:19:94:B2:5D:05:C3:C5:BA
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA72918744AA569B3267C6ED167A325
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lUH9W0Srd7UfvgWSGZSyXQXDxbo.roa
Signing time: Tue 06 Feb 2024 18:21:17 +0000
ROA not before: Tue 06 Feb 2024 18:21:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199497
IP address blocks: 2a0f:b241:83::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a7:29:18:74:4a:a5:69:b3:26:7c:6e:d1:67:a3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:21:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9541fd5b44ab77b51fbe05921994b25d05c3c5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:12:d5:a5:1e:f6:d4:1d:8e:68:d5:02:91:
53:da:1a:ec:b6:f2:1a:02:52:bb:b5:40:59:6e:cc:
5c:f6:1a:bd:ec:95:62:80:21:ae:4d:2c:65:03:02:
f6:e8:89:46:a5:84:1d:49:ab:55:85:c7:a2:b7:5e:
40:e0:21:a3:4d:5e:fd:df:64:6f:1a:fd:94:1e:cb:
66:30:e1:3a:8d:0e:ef:5a:f5:62:cb:3b:c7:24:90:
fb:c0:fd:be:a8:59:9b:3c:0a:1a:b8:97:20:2a:10:
62:01:8a:dd:eb:14:fd:ed:ca:da:eb:f0:4e:52:8f:
db:60:c0:01:d5:f0:df:b5:c8:77:61:98:df:18:39:
a4:02:e6:88:20:b0:48:3a:f3:b0:e7:17:b2:50:35:
9b:66:99:98:57:f6:f8:70:23:77:57:98:00:45:cd:
4a:7c:fe:c6:fd:02:1d:7d:00:21:77:a3:ca:f9:30:
2a:6d:5c:ee:b5:19:33:a9:69:c4:2c:9c:65:b9:cb:
71:bd:2f:d4:e3:18:57:b2:35:e1:50:b5:c1:46:d3:
69:62:58:7e:b7:cd:7c:27:38:29:17:63:b5:b8:a2:
40:0b:53:66:65:bb:44:f6:42:21:85:b4:c0:48:23:
6d:8d:e8:57:ab:91:f0:51:b3:89:d5:c2:ac:e4:b9:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:41:FD:5B:44:AB:77:B5:1F:BE:05:92:19:94:B2:5D:05:C3:C5:BA
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lUH9W0Srd7UfvgWSGZSyXQXDxbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:83::/48
Signature Algorithm: sha256WithRSAEncryption
8e:f9:7b:34:9a:a7:95:42:5b:17:d2:c9:22:09:09:e8:4d:58:
93:d2:8f:f8:08:fb:1b:6e:e2:7f:0f:d6:5b:8e:24:4b:2b:0d:
98:f0:c5:3c:f3:8d:8c:24:89:97:f4:0d:5d:26:be:df:ae:45:
ac:16:8f:a4:0a:0c:df:0b:5f:77:94:1b:d7:7c:70:d3:77:82:
85:c7:88:bc:e4:a2:2f:30:bb:64:4b:45:0b:18:ae:44:78:5b:
ac:b6:7e:b6:b6:5b:cf:8a:1e:d8:73:87:af:0e:17:ad:14:58:
75:ee:f1:65:2a:33:b3:fb:b6:5a:af:88:cf:ae:b7:5f:07:bd:
5a:85:b3:23:e8:93:07:6f:b6:e9:b9:f2:21:90:1d:59:fb:b2:
56:bf:18:66:95:6b:06:d7:ff:99:ad:78:1a:79:4f:4c:b2:33:
f4:22:b2:3e:49:1c:e6:e1:e0:fc:64:fe:1a:13:7a:08:7a:6d:
8c:16:b2:2a:88:28:ab:23:de:4c:8a:75:15:83:53:0a:10:35:
d7:88:b2:ec:df:e6:09:6f:40:18:d0:6b:1e:72:2e:7e:0f:87:
f5:82:85:ec:7d:e2:d9:cc:48:49:f9:56:9a:29:b2:52:97:72:
22:7b:67:fd:3d:d8:b8:3e:2f:46:e8:64:2d:6a:53:30:dd:f1:
3f:57:17:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org