Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-e3JrIwpuuRvUJQ_XVDrNi4Hx_A.roa
File: 1-e3JrIwpuuRvUJQ_XVDrNi4Hx_A.roa (raw, json)
Hash identifier: VDSZA2EcuSV9/Nsx/boSsfld8wwLMIhdmfwWebnvuj8=
Subject key identifier: F9:ED:C9:AC:8C:29:BA:E4:6F:50:94:3F:5D:50:EB:36:2E:07:C7:F0
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB971679249815A476674A8160F7DA3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-e3JrIwpuuRvUJQ_XVDrNi4Hx_A.roa
Signing time: Tue 06 Feb 2024 18:41:16 +0000
ROA not before: Tue 06 Feb 2024 18:41:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48090
IP address blocks: 2a0f:b241:15b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b9:71:67:92:49:81:5a:47:66:74:a8:16:0f:7d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:41:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9edc9ac8c29bae46f50943f5d50eb362e07c7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:1e:3a:30:99:eb:fc:b2:cb:b8:3a:94:a4:
c3:02:ba:3f:90:32:54:3c:bf:9f:37:bc:73:77:77:
d0:56:69:30:ce:d7:66:8d:ff:80:8a:1b:1f:40:86:
89:4c:4a:a4:b5:81:34:fa:ac:42:e2:87:5f:fa:09:
18:37:48:a9:9d:7e:92:80:59:cb:3b:87:17:59:b0:
3b:03:49:6a:b6:b6:46:63:9e:de:53:76:55:95:ab:
08:2f:16:b9:45:c0:40:e9:35:9c:de:63:85:4b:41:
fc:da:97:96:c6:44:8d:e3:01:c7:41:e1:ad:7a:c5:
80:2d:f9:6b:f6:ec:5b:5d:94:5f:47:1a:65:cb:1a:
88:e4:8c:2b:4d:46:c5:45:da:30:3f:04:74:23:d8:
b4:18:0a:17:48:a4:ba:5b:a4:d5:e2:b3:56:40:d3:
80:33:ea:4f:9d:45:55:ab:91:f7:df:c5:83:3d:e0:
8e:2c:fa:84:2d:1d:f4:2b:46:90:71:86:79:0a:d3:
b0:ae:e0:56:7a:f0:97:9e:f8:1f:d4:f3:d5:aa:45:
91:bb:06:5f:de:7f:4b:eb:d4:2f:d3:36:70:84:b9:
d6:f3:a4:4c:15:e0:a7:3f:96:ad:4f:dd:96:f6:3c:
84:e5:55:c6:b4:60:8e:ff:59:f1:05:5b:42:a4:43:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:ED:C9:AC:8C:29:BA:E4:6F:50:94:3F:5D:50:EB:36:2E:07:C7:F0
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-e3JrIwpuuRvUJQ_XVDrNi4Hx_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:15b::/48
Signature Algorithm: sha256WithRSAEncryption
68:d8:52:90:b3:db:ce:dc:9d:c2:a8:41:15:5f:49:ba:54:3a:
1b:2b:5c:d5:c3:03:2e:e1:07:01:2e:78:d3:be:cb:49:ff:0e:
c0:22:7a:f1:c8:72:fe:84:03:f3:d3:40:af:1d:a0:b3:32:9a:
d9:7e:6b:e5:b6:09:de:d3:f8:17:d0:8d:38:39:84:6f:42:f3:
1a:82:bb:c6:a9:a2:0f:57:7e:98:64:99:db:9b:52:9d:7f:fb:
a5:f7:41:5f:37:47:3b:5d:cd:a3:5b:2d:d7:31:ed:60:6b:b4:
2e:a4:11:ba:fc:45:f6:49:6a:54:4f:e2:28:35:bc:b1:27:66:
a6:0d:26:f6:34:3e:cf:23:14:a2:0c:9f:76:f9:b1:01:90:d5:
81:e0:2e:a5:9a:72:9d:2e:58:10:23:8c:4e:32:1e:07:4e:fa:
59:76:9c:44:02:03:46:07:81:b2:83:cd:d6:4e:bd:e8:0f:62:
7c:1a:85:43:42:c9:5b:2e:e5:46:ce:db:c8:a3:a7:38:5b:e7:
a5:9e:5b:6c:d3:a8:d3:01:ba:c3:89:d5:46:99:d1:78:64:b3:
77:1b:ac:82:ad:d2:3e:4b:7d:23:ef:a3:d5:05:ba:dc:be:40:
ad:7a:f6:c6:d0:95:35:4b:5b:d8:b7:3b:51:7a:0e:7b:13:9d:
df:6a:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org