Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/x-SUV_KBHKJiM8sbnd4xH1RUo54.roa
File: x-SUV_KBHKJiM8sbnd4xH1RUo54.roa (raw, json)
Hash identifier: GktkiP6sL8AMXcE8WiOBRMTunVEyafdYgfbizdN1ocA=
Subject key identifier: C7:E4:94:57:F2:81:1C:A2:62:33:CB:1B:9D:DE:31:1F:54:54:A3:9E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAACC01FE0EF13DDA397BD805FA5617
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/x-SUV_KBHKJiM8sbnd4xH1RUo54.roa
Signing time: Tue 06 Feb 2024 18:25:16 +0000
ROA not before: Tue 06 Feb 2024 18:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200959
IP address blocks: 2a0f:b241:da::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:cc:01:fe:0e:f1:3d:da:39:7b:d8:05:fa:56:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7e49457f2811ca26233cb1b9dde311f5454a39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:15:e4:81:4b:2b:d4:1b:1a:18:d6:8d:c9:
fd:28:c3:b0:98:16:21:94:99:2e:77:ea:d6:73:74:
83:24:dd:78:7d:0f:16:d2:ba:d8:d3:8c:97:e2:78:
ca:d4:3a:69:cd:9f:ac:26:72:5c:a4:52:65:07:4d:
fb:30:08:64:97:4d:0e:16:67:f1:ac:7a:ef:d7:2a:
f1:84:d8:62:b2:bc:80:1d:e6:30:80:6a:a7:ad:63:
f5:ac:6b:5c:e0:ce:d6:53:dc:a1:48:1b:b0:d3:1f:
0c:53:a0:8b:1e:da:37:e4:95:95:46:9a:71:82:28:
73:9f:22:24:6f:8b:75:07:d0:3d:5b:2b:90:b6:83:
5e:05:2d:72:1a:86:9d:f8:7e:a6:63:99:01:93:38:
f7:b2:76:43:7c:90:3c:3b:1e:c6:f1:82:45:72:6a:
cf:2a:b4:4e:32:3f:30:fa:0b:72:93:03:a3:67:de:
8e:84:95:8e:20:38:f9:68:f9:1c:d4:40:d5:de:3c:
81:6a:33:c9:c9:fd:47:16:a0:84:99:0f:48:b7:df:
a6:69:bb:17:bf:96:43:94:b0:63:38:46:95:83:08:
49:69:86:3f:f3:d4:eb:65:b9:eb:6e:a1:b7:55:5a:
d6:22:55:87:45:ef:6a:23:a0:64:7e:a6:c7:16:3e:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E4:94:57:F2:81:1C:A2:62:33:CB:1B:9D:DE:31:1F:54:54:A3:9E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/x-SUV_KBHKJiM8sbnd4xH1RUo54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:da::/48
Signature Algorithm: sha256WithRSAEncryption
4e:8f:cd:11:59:83:09:d5:6c:31:6b:ff:04:51:db:a9:f1:30:
f2:cc:8c:c1:2a:89:d1:67:18:24:83:13:a5:b1:a8:5a:af:29:
14:66:05:2a:68:b3:8b:1c:67:ee:25:b9:68:85:77:9f:a6:7b:
14:4b:44:15:2f:17:d2:52:36:13:49:e0:23:2c:07:c9:44:47:
22:18:d0:3e:01:f7:54:8c:11:68:06:85:9a:fd:0f:01:c3:1d:
b4:0c:94:b4:3d:dd:04:29:0b:06:04:d7:e5:8a:51:14:b8:2c:
6f:15:a8:e5:26:5c:c1:35:49:e4:d7:b3:27:4e:c8:20:a6:7d:
1b:72:82:e6:f9:a4:47:1c:c5:87:77:97:51:16:7f:ad:48:c7:
94:c5:ef:f5:03:60:7b:4f:c2:f2:6c:09:09:c6:08:29:8e:eb:
c0:67:40:e5:26:54:bf:5d:95:6f:08:7e:ee:78:33:cc:98:e0:
a9:97:7d:7a:3a:b3:c0:08:7d:8c:f2:c0:1d:1d:0c:72:4f:75:
9c:8c:7f:b5:3c:12:4a:94:44:33:c5:00:0f:c8:72:3b:48:39:
a3:d9:b1:a1:19:71:b4:1b:fa:7d:ae:a2:0e:de:de:4e:4b:96:
94:dd:be:e6:87:2e:ae:1a:15:5d:6a:4e:a7:0a:5c:f1:6d:8c:
ee:3d:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org