Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7Z0Kejw8_8rTCpwG3FX4Tw-UWek.roa
File: 7Z0Kejw8_8rTCpwG3FX4Tw-UWek.roa (raw, json)
Hash identifier: Xhom9PHCT1MdCY6x7ciMm5yaLEN85DqAmZfkdKkLnm4=
Subject key identifier: ED:9D:0A:7A:3C:3C:FF:CA:D3:0A:9C:06:DC:55:F8:4F:0F:94:59:E9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F05DA7F96DF794D7B73CFE88D3C4C4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7Z0Kejw8_8rTCpwG3FX4Tw-UWek.roa
Signing time: Wed 07 Feb 2024 05:00:29 +0000
ROA not before: Wed 07 Feb 2024 05:00:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48818
IP address blocks: 2a0f:b241:113::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:5d:a7:f9:6d:f7:94:d7:b7:3c:fe:88:d3:c4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed9d0a7a3c3cffcad30a9c06dc55f84f0f9459e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0d:00:7c:04:3c:93:a1:fc:ea:5e:e6:03:31:
3b:90:a4:00:42:49:8e:3c:78:55:4a:9b:a8:e7:aa:
73:3b:95:b9:a3:f7:41:1e:97:f0:6e:f7:3d:67:2c:
1a:56:aa:3b:59:71:a1:c4:b7:ee:cb:53:d4:3a:a6:
83:e4:75:31:05:f5:c2:c3:90:6a:9d:55:fc:d1:b7:
d1:d8:5f:62:06:3a:30:27:34:f4:52:f6:9d:ae:fe:
98:18:f5:23:21:35:93:ac:c6:85:97:4d:15:dc:cd:
86:81:44:ef:20:ef:4c:d7:d3:11:26:be:24:84:d8:
e1:21:d4:65:85:9f:9d:32:16:3b:a7:3f:e7:99:3d:
44:75:22:7c:c8:95:ee:90:9b:41:9d:21:4c:f6:98:
98:5d:0b:ef:94:8b:b3:93:87:77:0d:de:86:59:b9:
a9:9a:37:d4:b5:27:af:ae:de:d5:dd:8e:4c:bf:85:
12:6a:ed:be:38:c9:72:a2:fd:ca:b9:46:8b:b5:2e:
aa:af:58:2c:64:19:ac:b9:a2:b6:a9:71:56:9d:64:
59:6e:c9:4b:01:9d:a3:be:d1:94:c2:b4:b3:30:7f:
5b:72:9f:9d:ad:15:e0:ea:0a:12:20:5c:e0:9a:ab:
41:c1:f9:b5:5f:0e:25:7f:fc:0b:a7:c6:54:22:de:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:0A:7A:3C:3C:FF:CA:D3:0A:9C:06:DC:55:F8:4F:0F:94:59:E9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7Z0Kejw8_8rTCpwG3FX4Tw-UWek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:113::/48
Signature Algorithm: sha256WithRSAEncryption
4b:51:c2:27:a4:53:7a:38:4e:56:a0:28:61:cb:d7:ae:81:25:
fc:84:89:c0:0a:a1:83:b7:0e:ea:10:36:b2:fb:26:c8:b5:60:
90:38:8b:a8:7a:a6:10:64:11:be:f3:a8:06:51:d5:c3:d2:b8:
d2:fa:26:37:66:e8:db:1f:b5:ce:a5:b5:58:3c:3c:b0:34:30:
e4:c9:48:79:39:59:b0:8c:83:54:23:db:08:ac:a3:09:eb:51:
c7:de:f6:57:92:5f:7e:05:aa:ec:30:bc:9a:a1:63:47:3a:a2:
d0:93:cf:63:4d:97:04:dd:cd:8e:56:51:9a:0d:20:bc:d3:a2:
4c:b3:b8:a5:62:43:64:d8:d8:ec:6c:0d:c5:d0:82:19:4d:d4:
58:37:77:74:58:3b:b6:e1:3c:7b:fe:9a:1f:59:d2:b4:92:0e:
0e:46:69:7f:f5:95:e4:60:cc:93:0e:f5:09:af:2b:bf:de:a6:
74:ff:1f:4a:fd:1d:cc:6e:50:09:5c:cc:1f:41:48:ee:9c:ce:
ab:c0:1e:54:2e:03:e4:a5:4b:87:06:79:0c:6b:c0:72:e8:f0:
ca:c2:66:1f:ac:fd:4d:6a:40:80:e0:2c:30:b8:dd:3d:31:13:
38:8f:91:6d:6c:5a:1b:85:ff:8d:34:f6:7d:9d:0d:3e:ef:a3:
b7:3f:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org