Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-G63uUibhRW8ZmhqPAEXvCiK8JI.roa
File: 1-G63uUibhRW8ZmhqPAEXvCiK8JI.roa (raw, json)
Hash identifier: ql9Lh9U1udFM762N2TDFbwZBL/0kAKBotqhjiokfAgE=
Subject key identifier: F8:6E:B7:B9:48:9B:85:15:BC:66:68:6A:3C:01:17:BC:28:8A:F0:92
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB5CDA132FAB021ACAE09F3AAB7EF5F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-G63uUibhRW8ZmhqPAEXvCiK8JI.roa
Signing time: Tue 06 Feb 2024 18:37:17 +0000
ROA not before: Tue 06 Feb 2024 18:37:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198679
IP address blocks: 2a0f:b241:12c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b5:cd:a1:32:fa:b0:21:ac:ae:09:f3:aa:b7:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:37:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f86eb7b9489b8515bc66686a3c0117bc288af092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9f:d4:3b:27:33:c6:7e:a1:11:7c:7a:46:50:
7c:09:d0:3c:f0:9d:02:9c:73:eb:22:87:af:01:a3:
bb:c2:a5:27:3f:27:53:f0:21:61:59:e3:36:ab:c9:
49:4f:be:d3:c3:d9:40:4f:71:96:b6:55:74:be:e9:
35:fa:b2:41:4b:9f:a0:f5:95:1b:38:bc:99:da:ab:
28:f8:88:e6:1c:3c:a0:c8:bd:ad:0e:fe:bd:b0:b7:
52:14:0f:5d:86:49:be:47:f3:6a:9e:8b:d1:2e:6b:
8d:18:5a:14:bb:9b:e2:4e:d1:ea:fa:e5:a0:22:4a:
76:4d:5b:50:98:47:f5:97:46:1f:4a:9f:28:5b:14:
75:5a:2a:c5:d3:48:1d:7a:8a:03:d3:9d:12:20:4d:
55:7f:04:d6:0a:6b:99:b9:f4:14:03:bc:45:7f:5b:
2b:03:4a:94:ff:9f:34:af:06:d3:d5:05:32:0a:ef:
0c:f3:0f:ab:84:cf:17:10:ca:52:fe:23:c5:c8:56:
73:d6:a5:22:f2:b2:e1:f1:cf:25:13:48:19:ba:97:
f4:56:2b:65:5c:fb:70:00:62:f8:d4:d1:25:6e:6c:
7a:25:b3:bb:43:9d:26:f5:54:24:9b:db:d4:5d:69:
42:8c:f8:ec:dd:1a:ff:52:f3:89:74:72:c1:c9:fe:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:B7:B9:48:9B:85:15:BC:66:68:6A:3C:01:17:BC:28:8A:F0:92
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-G63uUibhRW8ZmhqPAEXvCiK8JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12c::/48
Signature Algorithm: sha256WithRSAEncryption
40:04:55:97:74:e9:88:20:08:05:16:34:59:6c:63:97:6e:28:
2a:f6:57:13:e3:9f:c4:4f:db:24:a5:74:1f:56:24:d9:59:77:
19:cd:c7:e2:0e:e4:54:0c:72:92:64:69:2a:a5:b7:db:68:5d:
c9:f8:38:c2:ae:52:4d:3f:62:a1:25:0f:04:10:95:c1:1e:e8:
23:92:d4:00:b8:c5:56:bb:e1:21:77:ae:f7:d6:74:f0:b5:0a:
40:01:82:5d:6b:2d:35:47:ce:7f:dc:73:e6:e3:a2:d3:9c:0f:
d8:de:31:25:a8:2b:5e:80:70:e4:af:06:e8:38:f1:11:c6:32:
7f:5b:bf:19:d9:37:2e:41:da:41:87:32:19:2e:bd:70:35:36:
d4:e0:8e:50:9a:c4:10:82:38:01:a4:b1:bd:22:58:30:fd:c1:
a2:0b:7e:8b:48:d1:15:df:d0:24:3f:3b:73:66:29:66:f6:56:
df:0a:d6:2f:25:95:b8:bc:88:2c:6a:3b:7a:b1:9a:a9:3a:34:
df:17:3a:3e:ab:74:f0:25:81:05:54:4e:f8:fb:0d:63:84:34:
69:85:2b:b4:07:3b:87:dc:95:ab:16:88:53:eb:fc:6f:95:50:
f2:24:74:8e:af:46:57:7e:bb:d0:6c:ea:2a:25:58:63:19:69:
03:14:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org