Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7OasMNNGnmAlgFLENvxaYc9lMmA.roa
File: 7OasMNNGnmAlgFLENvxaYc9lMmA.roa (raw, json)
Hash identifier: aNUi04Kssa8a75ci/H7vRFSyjDvFhxKwr+Nt1vdiHVU=
Subject key identifier: EC:E6:AC:30:D3:46:9E:60:25:80:52:C4:36:FC:5A:61:CF:65:32:60
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB5C8B50D67394A3BFFD922D6A77756
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7OasMNNGnmAlgFLENvxaYc9lMmA.roa
Signing time: Tue 06 Feb 2024 18:37:16 +0000
ROA not before: Tue 06 Feb 2024 18:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139321
IP address blocks: 2a0f:b241:127::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b5:c8:b5:0d:67:39:4a:3b:ff:d9:22:d6:a7:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ece6ac30d3469e60258052c436fc5a61cf653260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:88:12:6f:2a:4b:c0:6b:ce:6b:41:20:69:94:
e8:9c:fc:19:72:65:74:f6:a6:58:07:b6:71:0c:19:
e8:c5:58:3c:f4:01:f5:2b:bc:22:0c:8b:af:8a:e9:
2b:a1:27:89:f4:ac:76:6c:4b:6f:b7:8d:b1:98:53:
9b:01:2c:84:df:29:1a:1e:d2:78:b3:b9:74:92:cc:
5d:c1:aa:1d:93:5f:0b:8b:b5:fd:f8:9c:29:79:66:
ea:67:68:3d:40:a3:ea:dd:66:d5:eb:ab:f8:d8:1d:
1e:5d:25:25:f0:b9:cd:02:13:73:4c:6a:72:f7:49:
2e:92:60:ab:56:22:43:a9:3f:3f:26:9f:b6:a8:58:
d0:f4:ed:81:90:76:01:13:17:2d:50:46:48:51:f8:
a2:fd:1f:b0:d0:d7:d2:8b:7e:6e:d9:88:9f:2f:ac:
79:22:f8:6d:fd:1e:5e:13:47:5e:10:75:ab:8d:24:
39:66:60:89:6b:fb:ee:e6:d3:a7:e5:12:d5:4c:00:
0b:2f:34:19:d2:b6:6d:4a:cc:80:ec:3f:4e:f5:68:
bb:a4:46:ca:33:98:e7:b7:a6:9e:ee:33:7f:e1:b0:
4d:41:9e:2c:39:3c:d2:42:7a:23:bf:31:cf:6f:af:
af:aa:9d:e7:d9:54:7e:6f:0b:9e:aa:1f:61:8e:68:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E6:AC:30:D3:46:9E:60:25:80:52:C4:36:FC:5A:61:CF:65:32:60
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7OasMNNGnmAlgFLENvxaYc9lMmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:127::/48
Signature Algorithm: sha256WithRSAEncryption
53:0d:43:7c:34:14:04:a6:5b:cc:50:de:67:e3:4a:7b:80:55:
5c:d9:50:b5:35:e3:08:f0:e4:c1:04:54:91:e2:0a:35:e2:a8:
75:31:e2:24:1d:8b:f8:60:53:ac:cc:f2:02:43:7a:75:55:02:
f6:b6:3f:d0:aa:81:fd:00:1a:39:a5:17:f6:2a:6f:17:f5:14:
87:9a:e4:77:a5:13:b6:8b:2d:9c:1a:e6:e8:94:16:04:f8:2e:
a1:06:90:f5:2b:6a:bd:58:36:18:9a:ea:d6:57:78:6d:60:58:
7e:6b:e2:61:8b:ca:46:53:9b:44:48:03:6e:f4:bd:3c:e9:30:
76:34:33:0d:e6:b7:53:60:89:53:a6:dd:67:8f:6b:38:b6:04:
a4:43:d0:46:43:86:34:23:e6:44:f2:e6:16:2d:0e:85:df:b8:
70:b4:f2:7b:06:ad:54:1d:92:b0:7a:96:5f:0e:74:42:61:78:
5f:e4:13:29:a7:78:5c:7d:10:91:d8:3b:07:f4:54:72:7b:52:
28:1a:e4:71:93:fd:e6:39:9a:c9:38:0c:9e:b6:2b:3d:76:64:
b7:9c:bd:0f:e9:78:53:52:f6:cf:92:f4:22:73:57:81:78:90:
14:71:75:2c:0b:2a:6c:ae:fd:be:bf:93:f4:44:7f:48:c2:bd:
3d:6c:ba:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org