Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6ExCP3Z9v3Zbm4piUcNNRDBNQO4.roa
File: 6ExCP3Z9v3Zbm4piUcNNRDBNQO4.roa (raw, json)
Hash identifier: DqJHIPVeg9MvGTzxK1+8mH2CNCqyjk1alMQVv+0/Rj8=
Subject key identifier: E8:4C:42:3F:76:7D:BF:76:5B:9B:8A:62:51:C3:4D:44:30:4D:40:EE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9010F7D8197FA6F528C0A551099EC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6ExCP3Z9v3Zbm4piUcNNRDBNQO4.roa
Signing time: Tue 06 Feb 2024 18:23:18 +0000
ROA not before: Tue 06 Feb 2024 18:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200556
IP address blocks: 2a0f:b241:bf::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:01:0f:7d:81:97:fa:6f:52:8c:0a:55:10:99:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e84c423f767dbf765b9b8a6251c34d44304d40ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d0:5f:ad:d5:fd:1b:13:7a:14:5e:90:7b:8f:
33:da:0d:da:bf:8b:d5:48:c8:1c:b7:a7:6f:73:f8:
57:9c:16:c2:60:96:68:a9:4e:96:3f:c5:69:9d:29:
fa:45:cc:65:4f:fa:0e:66:3f:53:96:ce:a1:53:ad:
de:b5:4f:bc:e5:dc:3e:e9:17:ab:88:12:af:a4:14:
fc:29:dc:1d:4c:e5:79:36:99:bf:26:3d:0e:67:94:
d5:12:31:19:f5:a8:94:ce:cd:08:f8:11:3a:2e:8c:
45:f5:e2:50:0a:39:fc:0a:47:a3:f8:cd:b8:65:d4:
2b:5e:06:be:49:73:da:c4:d3:c1:c4:be:79:da:e1:
f8:1b:83:40:d6:9a:2d:35:1a:26:e7:06:b8:dd:66:
5d:89:d2:8d:00:16:99:bb:96:ff:d5:59:7b:83:33:
3e:f2:9a:5d:06:5f:d1:cf:e2:1b:91:97:a3:72:98:
1d:aa:b6:35:37:1f:72:35:61:20:76:64:b5:b9:c0:
39:c1:46:c2:cd:78:31:58:e6:1b:7f:98:84:82:45:
0c:a6:f3:ed:75:42:fa:4e:30:64:3f:68:26:b6:2f:
5d:b7:a5:cd:2a:e4:eb:df:72:56:9b:a8:6f:4a:3b:
66:af:3d:8b:04:6f:b1:ef:e9:24:f1:cf:da:c4:1e:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:42:3F:76:7D:BF:76:5B:9B:8A:62:51:C3:4D:44:30:4D:40:EE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6ExCP3Z9v3Zbm4piUcNNRDBNQO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:bf::/48
Signature Algorithm: sha256WithRSAEncryption
36:da:1b:95:bb:13:97:e0:df:c7:98:a2:73:fb:9b:8f:28:0e:
19:58:24:02:2f:1d:fc:80:ca:98:3b:b4:8f:3f:eb:68:44:fe:
8b:fd:76:ca:b8:80:d9:57:ff:ba:d6:e4:19:52:c8:30:af:13:
d6:1f:aa:7c:46:34:86:0a:27:09:11:8a:31:fc:c2:c6:23:19:
4b:e1:85:18:4b:40:df:46:e0:fd:83:cb:10:87:28:9c:84:3b:
58:30:be:33:79:6b:df:bd:e1:53:6a:2b:bf:54:e4:bb:31:50:
68:ae:11:9f:b5:10:62:eb:d3:82:92:5c:e4:fd:b6:cb:61:f6:
17:b3:ce:fe:b9:57:ce:08:ad:33:49:f5:1d:3e:91:aa:c7:50:
d3:75:25:f9:92:ea:53:90:0a:7a:1a:6c:eb:30:2b:2b:2e:10:
f4:ed:a5:a1:46:3c:63:0b:c6:b9:b0:69:e2:25:b8:ab:52:d4:
06:61:c0:c4:10:a2:fa:5b:01:15:d0:44:f1:14:d9:a2:77:58:
97:32:0b:a1:b7:56:d9:0d:0a:35:6d:fc:5e:a7:a8:9d:47:d8:
c9:f4:a7:9e:93:c0:56:7a:13:c2:20:31:95:b8:4a:f9:05:b2:
72:ba:b3:dd:69:fc:8b:f4:15:c9:99:1c:3a:71:73:b4:09:bf:
4c:62:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org