Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0JNCxeUxjmwGS2eWoP-z9Shc4ow.roa
File: 0JNCxeUxjmwGS2eWoP-z9Shc4ow.roa (raw, json)
Hash identifier: pnZBpc6MN9yRfyzFFT5DAoQW3VYhipw17O7C9wb8ckQ=
Subject key identifier: D0:93:42:C5:E5:31:8E:6C:06:4B:67:96:A0:FF:B3:F5:28:5C:E2:8C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0C113FF2073653AED231C4FF9F1DA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0JNCxeUxjmwGS2eWoP-z9Shc4ow.roa
Signing time: Wed 07 Feb 2024 05:00:55 +0000
ROA not before: Wed 07 Feb 2024 05:00:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216242
IP address blocks: 2a0f:b241:10d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:c1:13:ff:20:73:65:3a:ed:23:1c:4f:f9:f1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d09342c5e5318e6c064b6796a0ffb3f5285ce28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c9:18:f9:76:9e:1a:f5:9f:3e:cd:bd:8a:bc:
02:c0:20:7a:be:fd:5b:e1:31:18:f6:9a:cc:35:b1:
4a:90:20:9a:b3:22:9d:5f:6b:a2:70:e9:a1:50:64:
36:59:a6:66:cd:9c:af:be:d5:7f:7f:2a:88:d5:81:
df:e7:bb:0f:4f:ff:6f:3e:72:e9:a6:89:1e:fe:63:
92:79:ef:db:ec:07:bb:c4:d5:e7:d4:b7:fb:b4:82:
ed:7f:c4:e1:5a:21:53:59:7b:7f:7b:9d:17:b2:7e:
c0:90:a1:51:02:8b:e6:a8:bd:10:19:d0:66:a6:f9:
59:a6:33:21:22:57:32:a4:18:0e:e6:f1:34:16:b5:
bd:94:13:f4:b4:9f:a5:81:c5:d2:6f:0a:b2:0d:ce:
7a:db:95:ad:07:d7:a5:67:d8:7e:7c:70:c5:95:01:
4a:c9:fd:5c:41:44:19:ce:56:1c:20:f9:bf:05:f0:
ad:2f:96:bb:e2:d3:b8:50:19:e9:40:da:aa:39:96:
d3:65:26:8d:e4:e8:1b:81:f1:ea:25:fe:fd:bd:c1:
f2:df:ef:9b:2c:53:6e:93:69:57:1c:68:62:d0:ab:
8e:24:4b:46:a1:04:03:c4:bd:5f:d2:d2:1a:67:2e:
b9:cd:ed:f0:1e:27:1c:c1:7e:bf:1a:28:a0:d6:8d:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:93:42:C5:E5:31:8E:6C:06:4B:67:96:A0:FF:B3:F5:28:5C:E2:8C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0JNCxeUxjmwGS2eWoP-z9Shc4ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:10d::/48
Signature Algorithm: sha256WithRSAEncryption
8b:c5:15:3d:31:f9:bd:8c:9a:b0:82:fd:cf:14:4d:f0:54:29:
78:f5:ca:de:8f:eb:42:31:7a:63:27:11:ef:9f:ef:8f:c8:07:
54:ce:a7:78:4b:6d:3d:74:4b:f4:30:b8:87:1c:9e:de:b0:79:
ba:d4:15:27:2b:72:3c:94:4d:ce:47:db:77:ea:e3:d1:91:03:
fa:f8:b1:ab:6f:22:26:ba:48:c8:0c:31:04:06:36:63:51:de:
8d:90:ba:7c:b2:4d:5b:6c:db:a4:47:27:e3:ae:ba:5c:22:74:
d4:ed:14:47:33:e8:f3:49:27:f8:2a:bc:73:2f:dd:69:88:cb:
7e:2c:9f:28:12:27:a3:19:1a:41:93:f0:e8:8e:b2:d1:65:2b:
ab:cf:f8:1e:ca:d0:bf:70:ad:0a:3e:cf:76:6f:4f:2b:71:27:
3d:43:56:e5:ab:0a:37:6f:bf:48:81:c1:2f:92:26:a0:08:34:
e9:b4:35:f4:36:4e:c9:80:1b:24:da:f5:39:c3:a5:f1:5b:39:
c8:d0:0b:f4:35:f1:28:d8:6b:35:2a:0e:e1:54:d7:84:f4:76:
39:6f:44:15:89:d0:1e:d3:42:17:83:52:8b:ac:44:e1:fb:3c:
b4:3f:ac:56:c9:68:6b:9f:01:42:49:72:c1:8c:ac:c7:87:92:
b3:2a:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org