Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-cqhxVd9ZAN9h2hk1PvIYOOP-dM.roa
File: 1-cqhxVd9ZAN9h2hk1PvIYOOP-dM.roa (raw, json)
Hash identifier: 39rCpTa7gr6y+IbOtfYzPNX8OORzT8ZKumVCxBG9BFg=
Subject key identifier: F9:CA:A1:C5:57:7D:64:03:7D:87:68:64:D4:FB:C8:60:E3:8F:F9:D3
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8BA8D781E08BAD4ACFFCB8CC0E0211
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-cqhxVd9ZAN9h2hk1PvIYOOP-dM.roa
Signing time: Tue 06 Feb 2024 17:51:15 +0000
ROA not before: Tue 06 Feb 2024 17:51:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198989
IP address blocks: 2a0f:b241:18::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8b:a8:d7:81:e0:8b:ad:4a:cf:fc:b8:cc:0e:02:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:51:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9caa1c5577d64037d876864d4fbc860e38ff9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:b3:0c:f3:fa:5b:c8:f4:8b:f4:58:bc:bb:
b4:66:a5:d4:a5:27:47:ab:b1:82:2f:d1:c1:a2:63:
97:cc:98:6d:98:38:ca:e7:cc:26:41:e6:d5:69:c5:
e2:f3:82:36:ef:b3:9c:57:3f:44:3d:dc:ac:24:77:
3c:f6:41:c5:a6:a0:40:89:4d:6c:b4:11:ef:02:a5:
aa:ee:06:52:05:3c:6e:44:ab:12:28:67:5b:79:f3:
b1:f7:54:9b:5d:dc:8f:67:86:ac:bb:b4:82:b5:53:
42:8a:a3:65:2d:6e:ba:39:e2:13:0b:51:3d:9b:04:
30:4b:bc:e8:ca:39:84:17:70:52:b3:e4:52:54:40:
c5:e4:b7:62:c5:33:9b:0f:ee:cf:a8:6d:69:fc:63:
14:f4:b2:b1:bd:25:e8:78:9f:db:68:3a:06:e8:d5:
fa:90:cb:7c:d2:68:32:d8:cb:21:77:f8:62:d8:0f:
cd:2d:a5:8b:76:38:00:1e:9b:bc:ff:8c:ee:77:0f:
77:0e:58:13:ff:f3:ed:83:d3:e3:4d:e4:8a:a8:7c:
ad:3a:4f:eb:c2:fd:a2:99:a1:29:2f:31:b6:2b:ec:
ab:1d:78:c8:cf:be:86:94:8b:53:f5:9a:43:93:56:
27:3a:a2:18:52:ce:1a:b8:56:3c:af:f8:f3:95:13:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:A1:C5:57:7D:64:03:7D:87:68:64:D4:FB:C8:60:E3:8F:F9:D3
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-cqhxVd9ZAN9h2hk1PvIYOOP-dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:18::/48
Signature Algorithm: sha256WithRSAEncryption
35:67:9e:6b:66:dd:2f:97:ee:1a:79:8d:83:b0:79:eb:bc:8f:
61:b9:57:f7:46:cc:26:e5:8a:27:8a:dd:38:11:08:2c:22:15:
bd:ff:4a:77:cd:af:9b:e4:2b:ee:56:ac:77:1c:57:3b:36:9e:
55:2e:c2:be:1c:c4:cf:a1:9d:78:ff:29:2b:88:74:9a:76:41:
5e:ac:10:a0:cd:d1:32:0c:d4:b1:2b:87:37:3c:a1:7c:6d:aa:
13:cb:b4:07:e9:cb:04:36:4b:05:fe:d1:70:24:1c:2e:31:55:
87:d3:3c:91:49:23:3d:a8:af:0f:74:b0:b5:33:77:37:8b:d6:
aa:82:06:24:d9:6c:fa:60:fe:cc:59:4a:75:ed:70:90:f6:3f:
fd:9f:2b:28:fa:cf:b5:d6:92:32:a0:21:c4:dc:d4:03:d9:b8:
dd:47:ce:f1:1f:06:49:8b:25:9f:a7:4e:04:a8:dc:c2:ff:6d:
4b:4d:2c:1c:f7:19:97:d0:9e:76:c3:34:59:45:42:15:4c:3b:
95:3a:8c:f8:53:25:4f:60:c2:99:e9:d0:9b:c0:d6:ac:4d:a0:
74:61:cd:66:94:60:3a:a4:d7:87:9b:c7:1c:24:11:13:f3:89:
ec:7d:64:9e:41:b2:52:c8:47:dd:f0:88:b2:77:6c:5a:a5:07:
b2:2c:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org