Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7fRJpPKZKge8mVuvgLszwVrEPl4.roa
File: 7fRJpPKZKge8mVuvgLszwVrEPl4.roa (raw, json)
Hash identifier: WaziJWJkPHuuef6sFxxy+3NnRxYeb+1NfrHbYI7okwQ=
Subject key identifier: ED:F4:49:A4:F2:99:2A:07:BC:99:5B:AF:80:BB:33:C1:5A:C4:3E:5E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA814215880356832359879978670F4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7fRJpPKZKge8mVuvgLszwVrEPl4.roa
Signing time: Tue 06 Feb 2024 18:22:18 +0000
ROA not before: Tue 06 Feb 2024 18:22:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200210
IP address blocks: 2a0f:b241:97::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:14:21:58:80:35:68:32:35:98:79:97:86:70:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edf449a4f2992a07bc995baf80bb33c15ac43e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:c7:07:91:67:53:a1:22:d7:ec:9d:d2:fd:
48:50:e8:c5:23:3d:88:e4:cc:e4:63:e4:22:82:54:
80:9e:be:82:16:12:e7:85:97:66:1f:ed:6a:1b:4e:
07:00:aa:a3:0b:23:6e:a5:d2:a9:32:9a:06:06:50:
2c:44:7c:56:f7:43:26:1c:a0:82:e1:a3:88:c4:88:
4a:08:6a:9d:9f:10:e5:6b:a8:75:77:11:7d:ee:ee:
46:4b:ae:d7:9a:7c:70:54:b5:7c:8b:af:a9:bc:8e:
14:7e:6f:24:23:2b:f5:c2:81:59:53:59:6a:b8:04:
8b:a6:20:20:48:95:3e:65:96:7e:fd:24:e3:32:74:
84:36:31:42:ef:2a:a9:3e:f6:92:5f:cd:9a:86:07:
8a:dd:16:94:45:18:91:60:15:d2:6d:7d:b9:08:6b:
65:66:f8:1b:69:12:68:d8:4e:e3:46:b3:a1:5d:8b:
65:cc:d1:26:16:d6:dc:c9:3d:e0:03:e5:60:fe:55:
3e:60:b9:48:df:13:f6:9e:33:02:da:34:02:df:3c:
27:ba:fe:2c:2a:85:31:2d:5a:a8:52:e3:2c:e2:3a:
d6:51:1f:23:a3:b0:2e:45:86:3e:7d:e3:98:c2:ba:
a0:0a:de:30:61:68:ad:e6:f4:75:49:c5:aa:a6:f2:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F4:49:A4:F2:99:2A:07:BC:99:5B:AF:80:BB:33:C1:5A:C4:3E:5E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7fRJpPKZKge8mVuvgLszwVrEPl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:97::/48
Signature Algorithm: sha256WithRSAEncryption
7e:eb:c6:c6:33:fe:f9:bc:c9:66:0a:e2:a4:1b:2d:4d:e6:59:
e1:76:fa:7a:f0:38:67:32:67:50:91:ab:2a:84:6d:6f:5f:ad:
cc:0f:10:6d:4d:04:90:47:63:48:12:87:ca:71:6f:af:d3:73:
04:39:e4:85:ed:8d:e3:53:ce:19:6f:81:27:2c:85:04:cd:86:
12:4b:e9:f5:b5:ab:3e:70:f6:82:2c:13:93:d2:be:f6:17:3b:
23:7d:7f:a0:e4:88:3f:d4:fb:78:de:08:ee:39:c0:a8:18:e1:
33:63:63:07:c4:fe:9b:5e:45:da:2d:c0:7e:19:df:b8:98:41:
b4:a3:89:9b:c5:a1:68:c9:a3:40:d0:06:93:1b:30:ae:c0:0f:
83:78:1d:58:8d:49:ae:1c:e4:b6:1d:7b:86:ea:8e:32:45:cf:
6e:21:44:af:91:83:02:6e:ff:b6:60:4e:0d:51:60:f3:fa:c5:
81:b6:07:98:64:e2:3a:a1:84:c1:f3:b2:31:56:88:6a:09:95:
12:6f:03:43:e5:43:2c:fa:d4:6b:1b:c0:38:42:cf:6a:7a:31:
b8:88:fd:82:e3:b8:ca:f9:33:0b:28:be:63:99:68:56:7d:d1:
7b:e7:0d:f9:a0:da:37:79:9b:51:c9:bd:1a:1c:38:38:42:1d:
b1:5f:ba:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org