Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-6HL3zcbpMmAwZ3XS-Yqf6WUtlM.roa
File: 1-6HL3zcbpMmAwZ3XS-Yqf6WUtlM.roa (raw, json)
Hash identifier: CT4jsuyqAKW8JURdP45CI+QzqBTAxNTiB7+ov6A/zSY=
Subject key identifier: FB:A1:CB:DF:37:1B:A4:C9:80:C1:9D:D7:4B:E6:2A:7F:A5:94:B6:53
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6B6AD37065367B5CA0CCED75C79BC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-6HL3zcbpMmAwZ3XS-Yqf6WUtlM.roa
Signing time: Tue 06 Feb 2024 18:38:17 +0000
ROA not before: Tue 06 Feb 2024 18:38:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200708
IP address blocks: 2a0f:b241:133::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:b6:ad:37:06:53:67:b5:ca:0c:ce:d7:5c:79:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fba1cbdf371ba4c980c19dd74be62a7fa594b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:92:9c:40:cf:a9:85:7b:78:f1:bf:15:33:
86:3e:29:01:17:87:5e:3a:67:50:d7:df:ea:ab:61:
8c:95:a5:46:3e:ae:ea:e8:e4:39:34:22:f3:f6:4b:
5f:8d:47:81:e8:3b:5a:8c:aa:44:5e:a0:6e:d1:c8:
9a:34:c7:f4:11:2e:c7:b7:8d:d1:57:c5:bc:04:0a:
a0:bd:43:cc:7b:ce:cf:19:94:bb:3b:c5:12:03:08:
45:9a:ce:91:29:8b:7b:e5:bf:66:3a:94:22:d7:26:
90:11:0c:95:4a:c4:f0:2c:78:df:2b:d4:aa:0a:0c:
32:e4:a1:12:d6:12:83:bb:b5:9a:ee:2b:28:6c:ed:
9f:a2:76:ab:a6:89:ba:1c:82:5a:d4:aa:0b:8a:76:
ca:c8:9a:1f:27:4e:3f:d2:b7:39:d5:d4:30:a7:94:
81:aa:ea:d0:63:70:31:0e:86:94:ab:9b:ec:cc:6c:
9e:45:e9:2f:9e:d8:0a:8e:ae:5d:51:a1:6f:c9:5b:
d7:df:69:8c:b6:a1:6a:b9:3d:09:cb:c1:19:0a:89:
a4:dd:9d:87:c9:7d:c9:69:7d:0e:ba:b1:b0:1b:a9:
a6:d0:cc:78:44:f9:30:c0:c3:2b:9b:83:a3:36:41:
32:34:35:96:48:c0:99:3d:76:37:ef:80:4f:d7:a9:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A1:CB:DF:37:1B:A4:C9:80:C1:9D:D7:4B:E6:2A:7F:A5:94:B6:53
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-6HL3zcbpMmAwZ3XS-Yqf6WUtlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:133::/48
Signature Algorithm: sha256WithRSAEncryption
18:48:6a:04:31:e0:0b:16:58:63:6f:82:3e:d6:8d:15:f7:8c:
70:90:f4:bd:32:d8:31:26:9e:dc:e4:47:86:d3:94:cd:e5:70:
16:9a:e1:30:2f:eb:9b:93:ae:33:c5:f7:2b:31:ed:d3:34:7c:
b0:14:0a:18:66:76:05:b9:25:02:54:ef:e6:9d:9d:5a:8a:2f:
00:90:72:33:68:67:4f:7c:70:94:36:98:bb:26:01:d5:0d:80:
21:e4:46:1f:6c:1c:d8:64:99:e6:11:0b:61:ff:05:9b:29:f0:
5a:c3:bb:b6:ca:41:5c:14:e4:9a:bd:53:16:c1:bb:bc:5f:3c:
8d:02:c1:17:e2:61:5c:46:6e:08:f6:c3:cd:16:c4:58:e3:f7:
93:b3:ac:cc:ea:bd:95:4e:d2:4b:91:ed:87:40:80:6f:83:14:
97:cc:06:c6:17:2d:d3:e4:44:fa:9f:cc:6f:27:86:b0:8f:f8:
d3:43:50:7e:a7:33:4b:f7:42:81:4c:97:30:81:78:21:80:bb:
a6:85:eb:3e:19:fe:0b:3d:72:2a:32:34:ef:b1:4b:0a:6d:0c:
6c:cc:29:a4:39:2c:69:a8:c5:45:44:c7:02:41:b2:b9:1b:67:
34:cc:70:12:ac:da:9b:2e:19:b1:4a:c9:55:28:f7:d8:c7:ca:
22:0d:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org