Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-x6vsOCOnjBSpAzodslK7e7wcP4.roa
File: 1-x6vsOCOnjBSpAzodslK7e7wcP4.roa (raw, json)
Hash identifier: d1I62sAnNFoCmSSihyJo1jpISzNguIYqWkP2xH5HfC4=
Subject key identifier: FB:1E:AF:B0:E0:8E:9E:30:52:A4:0C:E8:76:C9:4A:ED:EE:F0:70:FE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F09A2B2501478D551484D6D8ACBCC7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-x6vsOCOnjBSpAzodslK7e7wcP4.roa
Signing time: Wed 07 Feb 2024 05:00:45 +0000
ROA not before: Wed 07 Feb 2024 05:00:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207831
IP address blocks: 2a0f:b241:3f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:9a:2b:25:01:47:8d:55:14:84:d6:d8:ac:bc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb1eafb0e08e9e3052a40ce876c94aedeef070fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:6e:b5:e1:d9:0c:34:e3:fa:15:fa:7b:21:
42:2e:b6:7e:5a:3b:c0:ac:66:c1:75:9e:63:e6:d1:
06:8b:a8:63:7c:c0:88:82:3b:f0:41:74:d8:32:95:
0a:00:29:34:72:3d:58:db:ee:d6:7a:b2:00:e9:1c:
44:4a:21:8b:e3:2f:6e:25:6d:df:9c:df:5b:95:6e:
62:a9:6e:a0:ed:e9:be:f1:0e:0d:be:37:a1:3a:10:
8c:19:b6:f7:1c:fb:8d:21:b5:a3:53:53:56:7f:d9:
10:d5:92:3e:f9:af:81:ec:30:0e:78:7a:8c:2e:07:
53:96:a5:bb:14:39:39:a8:06:c2:ab:4f:5d:4b:ee:
0b:0e:97:db:5a:2b:9f:d0:b8:03:de:a8:a2:27:0c:
1f:ce:c1:98:eb:f6:0b:17:2f:db:e8:0a:93:60:89:
6a:f3:57:6c:38:a6:a7:ac:2d:3d:5a:8a:68:c2:86:
36:27:04:13:63:b5:64:42:9c:7f:55:eb:b0:99:84:
ce:11:21:16:25:d5:f6:3b:a1:05:e4:87:00:ef:1d:
24:a2:59:58:ac:4d:7c:7c:67:92:1f:9b:dd:7c:b8:
49:8b:35:66:c9:11:80:ae:83:95:77:78:37:6f:43:
5b:2c:e7:a8:b1:6d:70:bf:36:c0:2e:e9:52:9c:cd:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1E:AF:B0:E0:8E:9E:30:52:A4:0C:E8:76:C9:4A:ED:EE:F0:70:FE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-x6vsOCOnjBSpAzodslK7e7wcP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:3f::/48
Signature Algorithm: sha256WithRSAEncryption
34:01:e0:85:7e:e5:8c:28:b8:97:79:64:b5:6a:aa:4a:7a:d2:
22:f7:b4:44:de:e4:cf:2a:70:13:c3:f7:cc:7b:cf:52:ca:40:
7d:08:6d:32:6d:f0:c4:c1:87:f7:e5:fc:84:56:75:24:1a:74:
8b:4f:2d:00:0a:93:e8:d5:1f:9e:a4:62:6e:31:f7:e3:4b:69:
2d:cc:65:eb:a6:44:b7:5e:02:a1:37:46:80:15:0a:f6:ff:79:
47:05:ef:96:a9:aa:7b:c5:51:5e:e4:0a:16:10:44:8d:12:79:
e6:60:ba:24:7c:40:f7:14:d0:bd:f1:0c:18:52:73:9a:6e:d5:
7b:65:e4:38:17:cd:d1:7e:40:5a:b1:a6:2b:60:00:86:16:c9:
42:47:16:f3:b5:52:21:e4:50:9d:c8:23:3c:39:ae:cb:eb:5a:
2e:a8:dc:14:48:93:40:cb:41:44:31:2a:70:23:d7:d4:40:07:
7f:85:01:f6:3e:89:fd:67:8d:21:39:d1:31:d9:b9:d0:33:64:
71:fc:f6:8b:b1:69:24:4a:0f:2e:9b:e2:b0:9f:de:68:cd:3b:
cd:14:9e:6b:12:5d:a9:8c:f1:fc:58:5f:71:84:50:0e:31:07:
a7:6c:6e:21:74:28:c1:3c:27:05:bc:63:6d:1b:8a:ea:96:4c:
12:6a:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org