Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wlXOA5aX9HmdGEujqNV7qtKiBpk.roa
File: wlXOA5aX9HmdGEujqNV7qtKiBpk.roa (raw, json)
Hash identifier: 7aPmQIMB0zgL1F4+8vj1UlhO5yjRNnC8wT+4CXi1WkQ=
Subject key identifier: C2:55:CE:03:96:97:F4:79:9D:18:4B:A3:A8:D5:7B:AA:D2:A2:06:99
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8D869F929367D040F387A38231B882
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wlXOA5aX9HmdGEujqNV7qtKiBpk.roa
Signing time: Tue 06 Feb 2024 17:53:17 +0000
ROA not before: Tue 06 Feb 2024 17:53:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216041
IP address blocks: 2a0f:b241:29::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8d:86:9f:92:93:67:d0:40:f3:87:a3:82:31:b8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:53:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c255ce039697f4799d184ba3a8d57baad2a20699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:47:7c:aa:96:e4:9a:cb:df:d5:1c:da:63:
ed:40:56:35:3d:17:65:07:8b:b3:1d:93:9d:fc:1f:
1a:79:85:2f:a6:0b:ac:e4:b0:73:97:18:6c:41:03:
71:72:f4:15:84:3e:6c:b6:af:75:e2:02:d5:70:2c:
1e:2b:15:2c:85:aa:16:f5:99:09:76:82:eb:5e:63:
90:cd:a3:bc:8b:69:0a:41:f3:5b:fe:46:aa:3c:68:
8c:c3:1e:83:28:75:a3:93:79:67:da:5c:f7:d1:c9:
05:8e:b2:9c:a7:ee:f1:6a:df:03:34:f0:cd:e9:4a:
43:c3:14:b8:2a:23:61:f5:67:bd:67:af:5a:84:04:
5c:56:77:ba:a1:18:c4:84:4f:75:4a:d9:4e:25:cb:
45:f9:0b:0e:ef:b6:c9:ce:03:d4:5c:cb:89:f8:f1:
36:bf:75:63:c4:a6:10:f8:9c:69:86:56:c2:45:8f:
68:ea:04:47:74:07:ed:6e:5c:38:17:3b:18:cd:b1:
50:40:1d:1a:24:06:31:d0:ad:96:a2:66:1c:05:17:
9f:b5:9e:52:1f:4f:ee:2a:7d:1b:b1:db:b4:ef:30:
e7:69:36:ec:98:55:00:59:53:45:58:75:e1:17:a5:
c2:6b:51:e3:44:77:2d:3e:81:9c:dc:db:a1:d0:ea:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:55:CE:03:96:97:F4:79:9D:18:4B:A3:A8:D5:7B:AA:D2:A2:06:99
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wlXOA5aX9HmdGEujqNV7qtKiBpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:29::/48
Signature Algorithm: sha256WithRSAEncryption
2f:e7:ad:1e:f7:e6:66:94:d3:ee:ff:5c:be:b4:5e:bd:5e:84:
5b:9d:35:f9:02:1e:31:d8:33:84:f5:9f:b3:39:e3:af:eb:be:
e8:f2:f6:8e:16:12:ac:a0:ae:f2:ff:b9:d9:c0:e7:87:25:3e:
0f:ea:36:c3:1b:2f:d9:ee:3a:62:06:26:a5:f3:6b:95:dc:4f:
ea:cd:f3:b3:49:d3:35:04:0f:96:4b:40:72:51:bd:98:b7:fc:
22:cb:26:80:25:ab:c4:fd:e0:01:12:21:47:57:0c:da:ec:e2:
ed:a2:ef:ae:0d:75:60:8d:0f:1d:18:5f:73:22:5d:32:d7:42:
80:4a:0f:14:69:06:a9:a3:50:6b:db:65:5e:f9:7a:04:7b:08:
4f:a0:c2:ef:d9:7c:81:01:c8:1a:ba:81:7d:d7:04:ff:48:ab:
b0:63:1a:3d:44:69:d2:db:aa:24:5b:c1:f9:9d:6d:6f:0e:02:
a1:58:5e:2b:d6:3c:b9:0f:fd:c4:22:24:a1:35:0b:c8:17:a7:
5a:e2:f5:d2:d4:f1:7d:eb:1f:2c:85:dc:12:21:25:72:03:8f:
f1:20:67:fa:bd:a5:a8:4a:e2:52:4a:46:fe:8a:63:1b:29:5c:
82:01:d5:27:50:a7:f1:e2:ae:92:d2:79:61:4e:51:dd:c9:b4:
12:51:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org