Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0O8T0ZVUg7o4czzytQtMOgds4z4.roa
File: 0O8T0ZVUg7o4czzytQtMOgds4z4.roa (raw, json)
Hash identifier: hbtyEZK599fVib56nMSNGEnEKnXbkhvPHMF8igiPFH8=
Subject key identifier: D0:EF:13:D1:95:54:83:BA:38:73:3C:F2:B5:0B:4C:3A:07:6C:E3:3E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB88BAB790C69438C0DD7464B8474E2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0O8T0ZVUg7o4czzytQtMOgds4z4.roa
Signing time: Tue 06 Feb 2024 18:40:17 +0000
ROA not before: Tue 06 Feb 2024 18:40:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215642
IP address blocks: 2a0f:b241:14f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b8:8b:ab:79:0c:69:43:8c:0d:d7:46:4b:84:74:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:40:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0ef13d1955483ba38733cf2b50b4c3a076ce33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:1f:a6:c2:3f:02:a6:83:74:39:93:28:6a:
d9:dc:80:f2:df:65:32:bf:ee:92:79:0d:14:ac:2c:
86:90:92:22:a2:b6:95:21:f9:e1:75:9b:66:33:cd:
f6:20:42:b9:72:cd:74:88:0b:67:51:52:62:50:b6:
eb:05:f6:cc:c5:eb:f9:ca:25:08:a2:fb:bf:44:f2:
ba:d3:c4:36:8c:4a:5e:ce:c5:85:de:da:2e:0c:26:
1b:38:c0:27:96:01:e6:ed:4b:ef:12:d3:c1:89:7b:
98:2b:9c:cd:42:d6:8d:a3:4c:ee:93:9c:c5:d3:25:
99:27:03:aa:68:72:ad:1a:d5:11:82:58:04:de:e6:
4b:f4:f9:41:44:bb:b2:60:3b:de:52:a1:12:4f:42:
18:b4:b4:75:90:52:7e:b6:6d:ba:2a:0e:b5:62:51:
39:0a:e0:05:82:d7:e0:56:c6:37:cd:de:3e:26:63:
be:09:a0:49:73:b6:70:1a:a5:d0:26:47:14:84:41:
c5:50:42:05:e0:9e:47:4e:2b:cc:63:b6:b8:1d:f6:
94:b1:3c:d4:11:60:41:d4:8a:f7:aa:56:be:ac:7b:
db:a7:d0:e5:6f:14:cf:ae:e7:cc:7d:80:4b:f5:6c:
28:01:a6:2a:e6:5c:3b:3d:3d:ec:7b:53:fc:c6:4a:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EF:13:D1:95:54:83:BA:38:73:3C:F2:B5:0B:4C:3A:07:6C:E3:3E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0O8T0ZVUg7o4czzytQtMOgds4z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:14f::/48
Signature Algorithm: sha256WithRSAEncryption
08:98:b9:62:fe:bb:47:74:2b:c9:20:86:c0:1d:b6:17:c3:9d:
d2:f7:17:29:9c:cb:fd:be:24:9b:ac:d5:6c:23:81:12:28:3f:
df:ad:0a:84:f1:b9:62:60:cf:1a:e1:d8:ef:50:05:33:ac:6e:
da:d0:a2:0b:33:87:96:d2:0a:93:93:c6:4b:b5:5f:22:d8:10:
e3:a8:4e:e2:7a:80:f4:cb:0c:f7:af:6a:73:0a:4c:1e:f8:6f:
dc:17:ae:53:67:71:c6:88:a4:7d:30:66:a1:f3:df:70:08:75:
13:88:98:fd:bd:93:d6:7f:0e:ea:b3:d3:1c:71:70:06:62:a7:
f1:a6:6b:e2:51:48:fa:48:da:a4:4a:eb:e3:41:37:19:17:2e:
1e:55:f3:2d:61:02:06:53:ab:46:f2:08:20:e5:d9:a2:a1:ef:
2e:ac:0f:7c:51:ec:02:f1:e1:1b:a4:f9:da:61:f6:07:65:07:
fd:4a:9e:a7:34:b1:7f:c6:b8:2b:ae:da:be:3b:a8:b2:35:e6:
98:e0:a7:b4:ac:d4:5e:86:2e:86:3c:03:a8:c3:af:c5:f1:fb:
a1:cf:f3:3f:02:c5:06:c8:6e:dd:68:e7:76:c2:b5:4c:d5:41:
63:9d:5e:df:2c:af:d2:56:1f:1b:f4:9c:f8:e2:80:ca:f5:a2:
30:29:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org