Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6HQWreoh_3wcMZB6Qo9eVGDDOp4.roa
File: 6HQWreoh_3wcMZB6Qo9eVGDDOp4.roa (raw, json)
Hash identifier: JRRzj/hKFbrfonbnmLCRwiHc7801UKNb5DY+sflwdqo=
Subject key identifier: E8:74:16:AD:EA:21:FF:7C:1C:31:90:7A:42:8F:5E:54:60:C3:3A:9E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F07F44F9992566AC8E2023F5C9795E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6HQWreoh_3wcMZB6Qo9eVGDDOp4.roa
Signing time: Wed 07 Feb 2024 05:00:38 +0000
ROA not before: Wed 07 Feb 2024 05:00:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200080
IP address blocks: 2a0f:b241:92::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:7f:44:f9:99:25:66:ac:8e:20:23:f5:c9:79:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e87416adea21ff7c1c31907a428f5e5460c33a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:d3:cd:9f:7d:8d:3d:cc:01:f8:2d:3d:c2:
c6:77:cb:78:42:62:3a:e5:a0:6e:02:bd:03:d6:00:
61:26:e2:9e:0e:a9:3c:da:9c:f3:b5:a1:e2:53:a4:
96:6b:55:ab:da:cf:6b:5e:c5:e9:29:ae:29:bc:31:
88:18:29:af:b8:98:f0:aa:af:dc:28:a1:56:f5:7c:
fc:86:f7:55:4e:9c:cd:5d:a6:71:96:94:c7:4f:19:
68:d2:eb:8b:17:fa:40:73:79:3f:0c:14:72:41:39:
d3:31:bf:39:fc:51:0a:a2:17:3a:a1:14:7b:dc:ee:
cd:f7:70:e8:79:41:f9:c6:bc:64:67:3c:02:43:db:
69:93:8b:b8:d3:e3:a9:15:f1:94:5b:d3:6a:62:0f:
2a:b3:74:48:f3:b9:80:02:d6:9d:bb:cb:7a:e6:01:
19:84:6e:d6:7c:4a:6a:be:cc:ca:ce:7d:d4:09:c0:
40:6b:b8:48:d9:17:2f:74:02:c5:78:71:9b:e4:3c:
d7:6a:a9:c7:47:11:32:58:5c:b2:5d:5d:d8:a3:a3:
85:c7:df:56:c6:f8:36:3b:22:8d:14:09:04:b3:43:
00:77:e9:dc:d3:54:75:b6:48:48:52:47:f6:13:81:
19:d0:a2:f6:53:c8:5a:44:12:1b:cd:5d:41:6c:45:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:16:AD:EA:21:FF:7C:1C:31:90:7A:42:8F:5E:54:60:C3:3A:9E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6HQWreoh_3wcMZB6Qo9eVGDDOp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:92::/48
Signature Algorithm: sha256WithRSAEncryption
3a:68:6e:eb:0d:64:db:47:27:12:12:33:9a:cf:ab:d3:91:f5:
29:27:b5:9f:43:ad:df:c9:d1:d1:15:b5:d9:a2:75:67:e6:f4:
17:23:5d:66:27:21:ba:92:a6:7f:e9:a9:f0:83:8e:21:20:76:
f2:72:38:2a:8c:94:82:a5:06:68:e5:09:78:e3:93:40:4c:fc:
6d:6a:de:4b:1e:3a:31:c8:63:ce:d9:73:2e:46:4f:47:6b:a1:
1a:d1:80:b0:e0:66:44:4f:da:d9:59:be:db:d5:4f:60:44:a5:
db:15:27:ba:08:4c:84:37:bb:ae:ad:55:d4:9e:6a:68:2f:df:
37:a4:0a:21:2d:34:1e:a8:ca:45:b6:d2:85:4a:55:e2:51:d2:
4c:6a:16:c1:28:38:ae:5b:54:1d:c7:82:49:0d:4b:96:59:ea:
ba:96:cf:7e:fc:3c:f9:13:73:5d:c5:5a:a8:27:18:8c:67:1d:
5e:e2:21:86:2c:62:83:0e:b1:d3:f9:6c:ca:eb:a5:a7:68:a3:
ab:a2:e6:5a:80:d3:ef:1b:06:65:3b:4d:48:25:e1:fa:8e:ab:
b1:ac:4b:68:db:db:cb:ad:f4:b3:a6:fc:ec:df:0a:e5:ea:d8:
85:ac:63:6a:dc:ee:e0:22:eb:1b:aa:c0:11:5e:c0:d5:d2:70:
23:42:96:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org