Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7Kh1XelrIwqxYHeYfMqStqqxOrw.roa
File: 7Kh1XelrIwqxYHeYfMqStqqxOrw.roa (raw, json)
Hash identifier: r/1T7cVUfm7HDSKccLQ4kGyPI7pgaApZDbdjYD/JDtM=
Subject key identifier: EC:A8:75:5D:E9:6B:23:0A:B1:60:77:98:7C:CA:92:B6:AA:B1:3A:BC
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0B8E5EEA89018251C68277ADAA5DF
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7Kh1XelrIwqxYHeYfMqStqqxOrw.roa
Signing time: Wed 07 Feb 2024 05:00:53 +0000
ROA not before: Wed 07 Feb 2024 05:00:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215917
IP address blocks: 2a0f:b241:105::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:b8:e5:ee:a8:90:18:25:1c:68:27:7a:da:a5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eca8755de96b230ab16077987cca92b6aab13abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:82:7c:5d:1b:3b:62:28:1d:cf:2e:71:22:
dc:a8:22:2c:34:76:b9:40:00:b0:bd:4e:3c:4d:db:
5d:ed:b7:db:0e:3f:36:dc:cc:b7:0a:78:eb:37:84:
08:05:a2:16:23:bf:be:7f:a7:e8:dc:8d:e0:fb:29:
1d:6e:4a:1d:9d:8e:9d:13:85:29:49:8e:e5:6e:76:
37:19:24:1b:a9:ec:67:6a:b7:8a:3a:ab:c2:d1:fd:
f0:c4:a5:df:3a:da:e2:0e:aa:2f:54:a7:b0:c2:49:
ee:33:8d:a3:b9:64:f1:aa:79:5e:15:03:88:a9:ba:
fa:03:23:cb:77:35:b7:1c:5e:c8:b8:b0:3c:1b:df:
23:29:be:98:ec:d3:de:ed:8d:0b:1f:64:88:e2:56:
79:38:a8:b2:af:e4:21:c4:c2:72:83:4d:18:e1:7b:
4f:2b:59:a6:0e:76:de:59:b1:90:a1:fd:d9:a6:c0:
e3:3a:db:32:1c:92:a5:b8:9a:de:ef:26:89:c6:7b:
e1:f4:6d:16:9a:67:65:0f:87:60:9f:98:e1:72:5e:
cc:54:e9:69:24:fe:9b:f6:78:8b:2e:8c:61:2f:af:
0a:49:1e:2a:6e:be:39:e7:02:d0:f1:6c:1f:d3:e4:
55:01:cb:85:a4:83:3e:3f:f2:0f:59:f2:99:34:6f:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:75:5D:E9:6B:23:0A:B1:60:77:98:7C:CA:92:B6:AA:B1:3A:BC
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7Kh1XelrIwqxYHeYfMqStqqxOrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:105::/48
Signature Algorithm: sha256WithRSAEncryption
8e:7b:84:62:d7:21:b7:ab:da:26:bc:7e:42:92:31:d6:30:e5:
cf:ee:81:63:0c:fe:2f:66:cf:39:59:91:4b:0c:93:69:2b:65:
87:ab:2b:8b:61:d4:5d:40:d6:7d:a9:c2:65:e7:6f:47:95:a8:
de:eb:54:f7:16:c2:bf:70:6b:64:06:03:9d:2d:43:0f:04:bf:
ef:97:0c:d0:51:f5:18:cd:c3:26:98:31:2e:48:9a:2c:75:3e:
41:6f:53:96:03:6f:67:b7:35:16:5e:58:a4:27:8f:f9:8c:6c:
20:02:95:07:b2:fa:7d:8e:29:ad:f2:97:bd:37:f6:ad:08:00:
01:28:1a:c0:67:7f:ea:d8:cc:11:14:ed:27:7f:b7:eb:b7:68:
5d:e6:07:c7:a9:6e:00:97:4e:8a:f2:08:b8:5e:5b:63:22:4a:
68:83:0c:f1:55:aa:9e:99:fc:be:ee:51:ff:6d:6d:02:b7:04:
a1:30:99:4f:b9:9d:3f:21:9f:0b:42:ca:cb:5d:f2:cc:c2:79:
c9:cd:5e:3a:51:52:2d:60:12:1c:6e:d2:cf:af:73:fb:75:67:
90:a8:ed:f7:98:3a:73:86:dd:d1:5c:59:03:89:0d:a5:63:5d:
64:e1:6b:ab:d1:c3:71:e5:80:47:e9:ad:55:76:de:9a:08:88:
b1:50:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org