Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rb-mennLuaI2DRkJ-j6vy0FYbTI.roa
File: rb-mennLuaI2DRkJ-j6vy0FYbTI.roa (raw, json)
Hash identifier: 3sMZZ3NvdtenRr86X7lHHgTUOMChN9VmDkPepaTkZXA=
Subject key identifier: AD:BF:A6:7A:79:CB:B9:A2:36:0D:19:09:FA:3E:AF:CB:41:58:6D:32
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7DF8D382EE6171745197A54A9C4B5E9E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rb-mennLuaI2DRkJ-j6vy0FYbTI.roa
Signing time: Tue 06 Feb 2024 10:31:15 +0000
ROA not before: Tue 06 Feb 2024 10:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197532
IP address blocks: 2a0f:b241:b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:f8:d3:82:ee:61:71:74:51:97:a5:4a:9c:4b:5e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 10:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adbfa67a79cbb9a2360d1909fa3eafcb41586d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:01:c7:7e:2b:42:47:ed:79:37:06:fc:d9:c9:
4f:93:c4:d8:5d:3e:1f:a5:5e:70:a5:0a:d6:00:30:
84:b9:62:f4:ae:20:9a:73:33:1d:a8:58:27:54:8c:
9c:0b:5c:9f:36:22:af:9d:43:c5:6d:79:dc:6d:30:
0f:1c:9a:38:e4:dc:1e:35:91:37:60:2e:9c:14:f3:
84:cc:8b:0b:58:f4:f7:e7:8e:08:95:90:24:ed:9c:
a3:43:f5:56:0a:38:4d:5f:8e:2a:74:5a:63:ec:a6:
75:ef:dc:fd:14:4e:f2:6a:5d:06:35:00:96:2f:e2:
a3:66:4f:de:4c:d0:41:0b:aa:00:7c:95:65:31:16:
f1:65:a5:ea:10:c6:2f:d1:43:8a:56:c1:d6:f9:fa:
f4:d0:44:03:02:eb:bf:79:2c:71:b3:01:dc:38:4f:
68:38:34:d5:ae:74:07:06:17:4e:9a:a2:24:ee:60:
ff:ac:b7:bc:cb:9c:38:55:27:37:40:e2:ef:c2:b3:
fc:21:29:7d:83:1a:9d:de:65:22:c4:67:7c:d6:bb:
cc:3a:8a:87:1c:2a:1b:7b:13:eb:7a:0c:82:55:84:
85:d4:f2:c0:cd:ae:b3:a2:49:5e:5d:5b:46:eb:0f:
a5:dc:4f:2b:ba:22:d8:d9:ee:bb:24:da:5b:46:d8:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BF:A6:7A:79:CB:B9:A2:36:0D:19:09:FA:3E:AF:CB:41:58:6D:32
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/rb-mennLuaI2DRkJ-j6vy0FYbTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:b::/48
Signature Algorithm: sha256WithRSAEncryption
19:f4:4c:f6:f5:9e:28:2d:a4:7e:a2:de:8e:fd:f1:d1:70:ad:
e1:46:92:8e:43:51:68:1b:4f:5b:6d:db:7b:f6:da:57:ba:f6:
b4:41:a9:66:6d:45:15:2f:e4:78:43:c3:8f:95:07:b1:12:e6:
e3:b4:8a:9e:af:49:b2:e1:ce:2a:59:90:65:3c:2c:d8:be:97:
1a:56:dd:ce:35:67:c8:06:71:6c:35:a8:65:96:b5:dc:15:06:
2d:62:8d:0b:6b:59:58:c1:4f:2a:c2:69:37:8e:38:31:df:83:
3c:87:16:67:d4:82:d6:de:38:ef:a7:7d:e6:c5:a8:56:58:a3:
d5:2b:67:7d:15:ae:8d:ee:a3:d6:e7:22:74:6d:28:05:e2:b4:
a7:b0:e3:0d:f1:00:ac:a9:ca:39:44:e2:85:9d:c1:ee:47:56:
75:e7:f6:c9:08:de:92:97:79:11:b4:f1:22:f3:9c:e0:01:88:
20:c2:22:e9:45:b1:4a:44:28:62:5c:4d:cd:fb:1f:95:80:58:
6c:c5:bd:f0:9a:d4:a2:48:f9:47:4f:d7:88:d8:70:9a:72:af:
4d:3b:09:d7:90:68:c1:83:41:dc:f7:c7:a3:75:c6:7f:22:95:
ef:4c:29:f9:05:e4:8e:41:93:08:60:db:ea:07:b9:05:1c:7f:
3e:0d:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org