Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7XQNFgcv82lU0xbladLLpuOGBRw.roa
File: 7XQNFgcv82lU0xbladLLpuOGBRw.roa (raw, json)
Hash identifier: 1IfV+Uqc+VJU9Q4v6zRbIVK6RE2gKtK0DRpyGTBCN7c=
Subject key identifier: ED:74:0D:16:07:2F:F3:69:54:D3:16:E5:69:D2:CB:A6:E3:86:05:1C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA80F905CC89F022738C71021363C18
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7XQNFgcv82lU0xbladLLpuOGBRw.roa
Signing time: Tue 06 Feb 2024 18:22:16 +0000
ROA not before: Tue 06 Feb 2024 18:22:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199925
IP address blocks: 2a0f:b241:90::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:0f:90:5c:c8:9f:02:27:38:c7:10:21:36:3c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed740d16072ff36954d316e569d2cba6e386051c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:07:7e:a3:df:f2:bb:a8:c6:86:89:70:09:
10:a0:42:1e:c5:30:da:15:ce:2c:68:bd:24:cb:45:
c2:91:ad:df:55:b6:71:dd:3f:ba:60:5e:9e:bd:d1:
a9:54:29:23:1c:ad:67:0f:85:82:da:2f:ab:ca:8d:
9a:80:e6:49:d6:5a:97:13:38:ce:9b:2f:c2:30:ec:
1e:a5:07:8f:27:6a:70:cd:f0:75:d3:53:2a:f5:87:
2c:c3:81:1f:60:97:e7:60:d1:db:8a:6e:0b:5a:29:
11:ea:31:d2:7a:bf:a5:89:c6:d3:ca:b2:c8:61:0e:
7e:0e:23:50:f8:9d:5b:15:f1:83:a7:62:6e:de:28:
5f:9a:cc:f4:f5:53:e0:63:d7:72:9d:5c:33:4d:58:
7c:0d:f9:e3:15:db:77:f9:6c:bb:5f:db:ec:45:44:
98:ec:0a:53:81:90:52:58:8a:19:1d:3a:11:3e:76:
4b:3d:fe:80:74:48:68:11:76:3e:c7:fc:d8:5b:d4:
91:24:e2:a5:7d:16:0e:2e:3c:35:91:d5:5b:b6:46:
ad:20:05:ef:a1:ef:0e:37:e5:79:cf:c2:b8:7a:c8:
63:af:c6:06:67:3c:8c:52:b8:a7:3d:c3:10:24:ad:
0e:90:47:30:8f:87:13:93:e6:ca:55:45:bc:45:dc:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:74:0D:16:07:2F:F3:69:54:D3:16:E5:69:D2:CB:A6:E3:86:05:1C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7XQNFgcv82lU0xbladLLpuOGBRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:90::/48
Signature Algorithm: sha256WithRSAEncryption
74:e1:65:ba:05:a9:c8:24:b7:e2:0c:0a:31:29:1c:50:9c:65:
71:4b:73:e0:bb:66:98:30:ae:5b:3f:17:5d:9a:6f:57:39:be:
8b:ba:05:7a:f6:19:f0:95:63:21:03:97:20:a8:09:63:69:90:
5c:0b:3d:1d:20:2d:5d:80:06:78:ff:cb:a3:79:f9:5e:b1:1e:
c7:73:21:98:fa:f8:5e:a6:82:09:af:f0:c8:7c:84:ff:c4:e2:
df:3c:5c:3c:5b:bd:09:da:6b:26:d6:0a:ae:c3:9b:64:bc:8c:
67:e8:87:52:12:04:1f:7b:a7:fb:30:38:fb:8d:ec:7b:25:1a:
0c:ed:8c:be:79:05:e5:42:57:af:79:8c:b0:52:1f:57:c7:b7:
81:1a:22:fc:0a:88:a1:dd:f9:be:49:79:5f:39:77:30:05:d1:
0b:56:26:b2:a6:a4:00:de:05:3a:fc:be:b9:1f:7e:d3:77:68:
31:4d:53:45:c3:6c:95:11:ba:ee:32:1b:9b:1f:73:39:13:50:
61:cb:41:f3:09:d8:69:a8:78:d4:b2:c1:1a:57:41:ec:69:73:
f4:af:a9:e6:36:b5:7f:c2:b9:cd:dd:c5:ed:04:6d:5c:0f:bf:
bb:fa:0e:51:50:3f:d9:87:1c:fa:ee:cd:aa:89:f7:e1:ab:82:
7f:9d:0c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org