Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7vi14WdntuVjvinmPdRXNE3E46o.roa
File: 7vi14WdntuVjvinmPdRXNE3E46o.roa (raw, json)
Hash identifier: iQm4kIkB62xTEhabu3AuH35bmX97YFlBIRURo3Tnqz8=
Subject key identifier: EE:F8:B5:E1:67:67:B6:E5:63:BE:29:E6:3D:D4:57:34:4D:C4:E3:AA
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA72170F34B7791895EC3443D094112
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7vi14WdntuVjvinmPdRXNE3E46o.roa
Signing time: Tue 06 Feb 2024 18:21:15 +0000
ROA not before: Tue 06 Feb 2024 18:21:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198663
IP address blocks: 2a0f:b241:7a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a7:21:70:f3:4b:77:91:89:5e:c3:44:3d:09:41:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:21:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eef8b5e16767b6e563be29e63dd457344dc4e3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:80:65:23:64:ca:5a:32:9e:08:4f:48:50:
0a:9b:cd:e3:5a:86:16:21:ca:5f:98:a9:ad:5f:ee:
ea:4f:59:14:34:9c:a6:84:3b:49:01:27:cd:c6:e7:
e8:e8:2e:82:96:9f:60:b8:9e:e5:1b:b8:4a:33:f2:
1c:8b:2e:32:9f:6f:ba:03:66:de:16:4d:b8:8b:1c:
62:6a:52:7f:d3:71:dd:e3:44:d8:6f:79:c6:18:63:
2d:a3:3b:eb:27:97:ba:31:f7:dd:f5:00:c9:75:e8:
5f:b7:a7:75:d3:d1:1e:89:24:00:b7:96:c3:3c:84:
52:0e:20:ad:38:07:a8:7a:ad:33:94:02:f1:e7:81:
81:a0:cc:44:bd:ed:53:f1:83:79:00:6a:50:8a:c1:
1b:c5:6e:47:07:ce:c2:50:8e:7c:8a:83:6d:92:eb:
14:47:46:b0:09:da:a3:eb:a0:c2:5d:70:b2:f7:78:
fd:23:b2:d0:d8:63:a6:ce:fb:37:c7:fe:b7:2a:26:
b4:1c:ac:87:42:1c:49:15:cf:c3:b9:27:88:fa:b9:
6d:f2:e0:95:50:3c:64:f8:7d:a6:80:0f:d4:c8:df:
d7:32:62:21:96:77:39:27:69:88:3b:ee:3c:ce:cc:
ea:e9:05:71:60:c1:1e:2e:b4:a3:f6:97:76:0a:a4:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F8:B5:E1:67:67:B6:E5:63:BE:29:E6:3D:D4:57:34:4D:C4:E3:AA
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7vi14WdntuVjvinmPdRXNE3E46o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:7a::/48
Signature Algorithm: sha256WithRSAEncryption
6d:10:17:ba:fb:3a:30:97:c4:ba:08:03:48:08:9c:16:67:b0:
af:52:c1:53:d0:f6:56:cc:d0:31:85:19:d5:df:20:c6:52:b5:
5d:9b:65:ad:e4:6f:0f:1b:0a:65:b1:df:ff:31:b2:e3:bd:ca:
0e:fa:91:30:82:94:1c:e8:75:81:f1:92:d8:29:24:6f:71:38:
c7:65:51:7b:cb:18:23:34:63:b0:6d:b3:5d:9e:00:8d:a5:22:
04:c3:6c:c3:ee:03:2b:78:a6:6f:bc:a8:f9:5d:57:5c:4e:71:
ed:17:66:6d:94:7f:b7:d5:38:80:da:f3:34:23:81:cd:1a:80:
3e:6b:9c:7c:29:4b:b3:5d:23:ed:52:a8:2b:72:15:29:79:3a:
a7:b0:52:09:88:3a:9e:28:af:72:dc:26:3e:0d:65:36:cf:43:
67:64:47:da:05:e3:2e:2c:95:30:1c:3b:d4:0d:cb:d1:db:f7:
d1:ae:4d:e9:5d:41:7d:00:bb:d9:0e:d8:46:66:ac:d8:c1:a4:
a7:e2:74:e0:5e:ce:d2:78:f6:52:0c:7d:87:12:94:b8:9d:f4:
6b:80:5c:39:a5:70:79:59:e6:0c:27:65:b5:62:78:17:9a:6e:
8f:6b:d8:92:72:a4:e4:4a:6d:08:8f:52:da:e8:38:b7:da:ea:
ae:86:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org