Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6JxTj-dyAuK3D6I9vH3XYdDm30Y.roa
File: 6JxTj-dyAuK3D6I9vH3XYdDm30Y.roa (raw, json)
Hash identifier: oysPmvJtmnOe8aExPaf6tOsOWrY602UsrvFsryLim5M=
Subject key identifier: E8:9C:53:8F:E7:72:02:E2:B7:0F:A2:3D:BC:7D:D7:61:D0:E6:DF:46
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F09A7EF876DB5E05A558F597AF505C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6JxTj-dyAuK3D6I9vH3XYdDm30Y.roa
Signing time: Wed 07 Feb 2024 05:00:45 +0000
ROA not before: Wed 07 Feb 2024 05:00:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208078
IP address blocks: 2a0f:b241:f4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:9a:7e:f8:76:db:5e:05:a5:58:f5:97:af:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e89c538fe77202e2b70fa23dbc7dd761d0e6df46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8c:88:2d:10:a4:33:d7:18:a7:8b:a6:e6:27:
76:a0:9f:9a:ca:dd:b2:95:ca:3b:89:dd:26:3e:5e:
d4:2e:63:91:58:50:7d:f4:ba:28:30:be:8b:6f:56:
bb:d1:6f:96:cd:29:12:c5:a6:07:1d:f4:a1:83:94:
e1:43:0a:35:d9:23:90:f3:6a:09:1b:68:a6:87:46:
05:7b:61:05:da:a4:84:1b:d1:25:5e:47:88:cc:58:
9f:b1:bc:46:eb:f1:91:cc:96:dd:c6:a7:e5:4d:48:
7c:81:1f:25:94:9d:10:bd:00:5c:57:c0:99:b1:34:
0e:2b:a5:1a:c9:ed:72:77:8b:13:f6:9a:92:4f:85:
7f:67:8a:88:65:5e:18:95:d6:24:d0:47:e7:ce:db:
91:f6:e8:f2:85:71:c8:93:6f:00:9c:22:fd:2d:04:
e0:50:36:80:d9:eb:d1:6b:71:57:75:8f:99:7b:6e:
e5:19:84:23:af:0f:15:d6:60:1b:d9:e3:f4:bc:4c:
0b:47:28:3d:f4:05:5b:26:5f:3d:80:a3:de:ae:d9:
09:1d:a2:76:bd:c7:81:08:0a:75:6d:b2:d4:11:ac:
3d:46:92:55:2a:ac:b7:7c:11:d0:45:f0:dd:06:ea:
09:e7:bf:c7:b4:65:0b:54:36:eb:6d:9b:77:03:04:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:53:8F:E7:72:02:E2:B7:0F:A2:3D:BC:7D:D7:61:D0:E6:DF:46
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6JxTj-dyAuK3D6I9vH3XYdDm30Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:f4::/48
Signature Algorithm: sha256WithRSAEncryption
46:c9:9e:4d:25:66:4f:b0:37:71:ab:58:9b:25:d2:10:4d:8f:
8e:9a:d1:2f:d8:91:da:db:d0:7b:26:d2:75:63:43:b2:9f:db:
e5:6d:62:dc:b0:1f:e1:6e:c9:5a:68:51:f6:ee:d5:23:46:ab:
43:3a:45:88:37:7d:a8:d6:d3:aa:c0:65:9f:10:94:cb:eb:18:
a7:29:f4:01:b7:1b:d5:dc:c3:3c:81:4e:98:ab:7c:28:ab:2a:
69:0d:58:96:13:cd:bc:81:55:9c:e0:03:dd:fc:4c:71:bb:da:
0b:c8:cd:a3:43:15:5a:73:0b:4e:e2:e8:8c:af:09:13:4a:4f:
a7:1e:b3:ad:7f:ea:ad:92:f3:ed:50:78:aa:79:0b:da:38:0e:
e4:32:f9:c2:73:9e:9b:88:33:ac:97:d9:74:b2:06:1d:e5:05:
e5:bd:d0:d7:c2:0b:0f:ef:db:a5:08:6c:75:b8:82:7a:43:ca:
8a:ee:27:d7:63:ac:9d:09:11:eb:99:55:ff:07:7d:2e:5f:75:
5e:70:a3:b1:7d:73:9a:83:ba:8c:db:e4:a6:3c:9e:3a:2e:05:
f0:b8:fe:6e:7d:cf:d4:7d:cf:41:ba:e0:b8:f4:5a:e2:48:0b:
cc:9f:0a:d4:ce:c2:2f:06:4c:62:8a:56:79:ab:d9:9f:88:6b:
06:29:01:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org