Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6sdTbJ_V0VWfpEhGPhFJpBU_-Pk.roa
File: 6sdTbJ_V0VWfpEhGPhFJpBU_-Pk.roa (raw, json)
Hash identifier: OEvfphxxm7+Dwum2M0Un6pE0OCDZBnYtRHiwIaBRbXs=
Subject key identifier: EA:C7:53:6C:9F:D5:D1:55:9F:A4:48:46:3E:11:49:A4:15:3F:F8:F9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAE76EEC88351CE40148C60CEA951A2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6sdTbJ_V0VWfpEhGPhFJpBU_-Pk.roa
Signing time: Tue 06 Feb 2024 18:29:16 +0000
ROA not before: Tue 06 Feb 2024 18:29:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49548
IP address blocks: 2a0f:b241:116::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ae:76:ee:c8:83:51:ce:40:14:8c:60:ce:a9:51:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:29:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eac7536c9fd5d1559fa448463e1149a4153ff8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:d5:3c:ce:bc:10:77:8e:54:9d:7e:a5:45:
ff:67:b8:02:d0:b8:f2:e1:76:49:84:77:5b:e4:f2:
b0:35:ce:ba:b9:6d:58:fb:8f:af:1e:0d:0a:ad:22:
5c:b5:78:96:ce:d6:74:c2:85:b2:e7:90:6e:54:c4:
72:5a:9f:6d:a8:e6:7f:ce:06:57:24:e9:ce:91:7f:
5c:f8:b2:a3:3f:94:53:5b:e7:fe:29:b8:fd:40:3d:
4e:d2:a6:bb:5f:1c:7e:96:3a:6a:6c:89:81:07:66:
98:ab:9e:84:be:df:a7:62:de:7e:66:1f:d1:b7:81:
f5:ac:f4:73:8a:e9:ad:66:42:14:e6:37:cf:fd:61:
fb:f8:e9:98:1f:cf:f1:15:c2:56:40:a5:15:fa:81:
59:48:dc:ae:ca:f6:75:c7:3c:1c:8b:4c:32:2a:39:
4e:eb:a1:f2:98:0f:2a:8a:07:cb:52:15:8d:88:38:
e7:b2:6d:87:0b:14:14:3e:22:39:c0:bc:25:86:5e:
6a:37:9b:9a:c1:55:7c:12:59:bc:e0:21:b3:c5:dd:
98:28:6f:54:73:81:dc:1d:1b:8b:54:39:45:2f:fd:
2a:b3:a1:81:4d:b4:8a:b6:99:2f:c9:c9:7f:28:48:
b0:9d:e0:52:62:09:c4:ec:68:f7:da:3e:fb:e3:88:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:53:6C:9F:D5:D1:55:9F:A4:48:46:3E:11:49:A4:15:3F:F8:F9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6sdTbJ_V0VWfpEhGPhFJpBU_-Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:116::/48
Signature Algorithm: sha256WithRSAEncryption
0d:bd:2d:01:eb:e3:16:02:9c:4d:b9:eb:6b:80:8a:be:7c:bd:
2e:83:17:f5:70:ff:b1:32:74:26:63:96:00:f6:10:fd:2c:64:
26:f9:1c:c6:29:ac:7e:4b:cf:bb:ab:46:6b:6c:66:45:f8:e4:
f6:23:43:a1:e3:0b:68:e2:5e:8f:04:28:c1:a2:0b:4c:15:1a:
71:93:05:5f:ad:39:c5:76:7b:0c:b1:5f:69:1b:1b:27:6d:4c:
ae:d4:7e:fb:b6:55:24:dc:ca:4c:46:17:ed:99:da:8f:5b:06:
6b:60:87:95:d9:8a:d2:42:5e:78:66:a6:5a:ba:d5:d6:bb:b2:
5d:a6:7b:9b:81:38:66:d6:36:a7:9b:4c:6d:6e:8f:57:0c:99:
5b:ed:31:01:a9:c6:54:4b:1d:36:27:69:13:1b:09:3b:02:3b:
c9:af:42:44:a7:dd:b3:b7:e7:06:00:bf:d9:24:0f:ad:b3:0b:
40:27:36:c1:b1:de:fb:82:09:66:8b:8d:a7:c6:8e:4d:a9:e5:
0f:02:00:11:48:ea:0c:7c:a3:3a:2b:70:c1:1d:a1:43:d4:a3:
4c:7f:94:5c:b1:41:09:ae:61:12:df:89:1e:9f:01:4a:c5:ee:
13:eb:5a:bd:9d:aa:03:86:5a:bc:ed:0c:9c:4d:62:8f:2d:22:
4e:5d:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org