Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-4f-3d4t-NjSP6OYqj1pI9MyUWA.roa
File: 1-4f-3d4t-NjSP6OYqj1pI9MyUWA.roa (raw, json)
Hash identifier: f+d1c61II1VAhiyXFW/y+/5loNWDuDURFTqgV5HkCsk=
Subject key identifier: FB:87:FE:DD:DE:2D:F8:D8:D2:3F:A3:98:AA:3D:69:23:D3:32:51:60
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA8FD2568D99A730C68EA6866EA7B29
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-4f-3d4t-NjSP6OYqj1pI9MyUWA.roa
Signing time: Tue 06 Feb 2024 18:23:17 +0000
ROA not before: Tue 06 Feb 2024 18:23:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200283
IP address blocks: 2a0f:b241:b5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:fd:25:68:d9:9a:73:0c:68:ea:68:66:ea:7b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:23:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb87feddde2df8d8d23fa398aa3d6923d3325160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:61:fe:40:fb:09:9c:28:89:36:d0:f1:7b:
87:28:32:63:d9:87:66:0e:1f:eb:51:3c:5f:26:dc:
2c:72:95:09:e3:e5:4a:ec:30:f4:ef:d8:a3:66:64:
1f:3d:b4:13:87:38:b2:71:8d:60:16:ae:20:b0:67:
25:e5:af:99:49:76:bb:62:c9:bd:ad:37:81:3e:c4:
76:8d:b4:d9:a3:6d:ff:f0:2a:55:43:01:de:3b:90:
79:b5:17:2f:22:85:06:ca:89:f2:a8:99:d3:c2:17:
83:13:51:11:18:44:6a:dc:cb:f7:25:e8:37:44:52:
a5:4c:66:69:6f:b7:e1:3d:11:44:07:67:2b:2e:81:
f9:51:5d:b4:68:1e:9c:92:bb:19:1b:8f:40:88:c7:
e1:c8:1f:8a:5c:84:3c:f5:29:22:93:75:c3:8a:94:
dc:b5:45:ff:d8:cd:e2:db:9c:b5:10:a1:9a:4a:14:
6c:12:da:45:ed:44:f4:3a:af:f5:5a:d6:e9:d8:cd:
87:a7:5c:07:e0:34:96:d2:3d:6e:c5:95:ec:f9:5a:
bf:5a:ba:9b:6e:90:32:44:81:a9:9d:59:1c:c7:ca:
96:56:a4:1d:7d:eb:15:0a:3e:0b:37:a7:9d:64:29:
e7:79:78:fe:2b:4c:e6:3f:f2:e6:98:34:f7:92:08:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:87:FE:DD:DE:2D:F8:D8:D2:3F:A3:98:AA:3D:69:23:D3:32:51:60
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-4f-3d4t-NjSP6OYqj1pI9MyUWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:b5::/48
Signature Algorithm: sha256WithRSAEncryption
7d:e0:0b:e0:72:b9:9b:93:39:ce:e7:0c:21:94:4e:c7:30:3a:
84:dc:06:bc:70:46:46:c0:d2:d8:98:1b:bf:fd:8f:40:f0:9f:
ae:e7:04:63:77:a5:7a:79:51:96:71:ed:e7:d4:00:0b:28:8c:
bb:82:aa:3e:10:4d:a6:8d:08:d7:d1:ef:ad:75:7f:30:40:6b:
c6:1c:1a:8e:b4:2e:51:23:04:e4:8a:76:73:a3:7a:fe:c6:6f:
7b:7a:63:57:bd:32:57:77:0d:5f:3f:ef:d1:10:c0:2b:bc:10:
c5:d0:e6:6f:40:7e:f4:05:f8:2e:9b:dc:21:4d:44:b9:12:91:
08:4e:47:b5:70:9a:3d:ec:eb:ac:73:0e:99:59:97:85:b0:42:
1d:70:60:82:18:26:bc:c4:31:d0:f8:53:0a:1c:86:55:c8:fa:
56:14:64:9d:08:08:66:39:bb:81:fe:ea:a9:03:86:17:86:6f:
f2:91:b2:46:fc:e6:cd:68:d1:80:85:f7:9a:a4:eb:65:ff:89:
e2:62:1f:22:98:74:ef:56:73:54:05:2c:1e:2a:6f:47:33:e2:
a9:a6:ca:4c:7b:1a:00:52:30:79:c9:d2:01:f8:9e:30:dd:23:
de:05:e5:b5:cd:42:a7:c5:9b:a4:ed:69:ea:a6:09:55:4a:d6:
00:62:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org