Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/833AV_QLmh-5J_vvQLaTyiXWj6I.roa
File: 833AV_QLmh-5J_vvQLaTyiXWj6I.roa (raw, json)
Hash identifier: DX9YIGs4bDzMatMiqWyCp4iTfapsRQBPK8bmPwglKaE=
Subject key identifier: F3:7D:C0:57:F4:0B:9A:1F:B9:27:FB:EF:40:B6:93:CA:25:D6:8F:A2
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0B5DB1DFC3C50A5B61EAA239D1B12
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/833AV_QLmh-5J_vvQLaTyiXWj6I.roa
Signing time: Wed 07 Feb 2024 05:00:52 +0000
ROA not before: Wed 07 Feb 2024 05:00:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215749
IP address blocks: 2a0f:b241:55::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:b5:db:1d:fc:3c:50:a5:b6:1e:aa:23:9d:1b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f37dc057f40b9a1fb927fbef40b693ca25d68fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:79:8c:e9:ee:a3:23:2d:30:2d:f0:76:78:
f1:5e:2c:86:fc:13:25:f4:16:93:78:d4:52:ed:16:
87:f4:65:61:b2:6e:c7:81:bb:ab:fb:bd:94:48:af:
b7:42:ff:43:c4:53:d3:68:82:39:c3:d7:4b:88:0c:
5d:81:f8:d1:20:4c:03:03:7b:36:71:33:3d:48:36:
4d:8f:90:c2:14:01:3d:ff:dc:f1:42:f1:38:df:5c:
ff:8f:31:ed:85:2a:f6:7f:6e:d9:b5:dd:7a:db:1a:
ad:0b:fc:02:c4:8f:ab:cd:90:90:d5:37:a7:d2:a4:
39:bd:c9:08:c6:7b:a9:21:13:da:0e:28:63:38:95:
3b:ff:e7:ad:46:26:63:bd:3b:a5:35:e1:ce:2a:5d:
16:47:71:5d:6d:a2:11:0d:b9:c6:82:f0:36:64:c4:
60:15:47:94:25:1e:bb:d0:c4:09:d5:a0:01:43:8d:
c7:15:f0:7e:c3:4d:d7:e5:7e:14:f1:44:2c:71:d7:
2c:67:93:4f:7c:f7:00:6d:c6:33:11:c6:16:06:9a:
08:49:de:16:2c:97:62:8c:ed:c0:ea:15:d9:14:7f:
d9:c0:83:ae:da:e4:39:38:fb:d8:ab:45:0c:1b:ab:
3b:03:eb:99:19:dd:3d:fb:14:09:0a:7b:b4:db:6d:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7D:C0:57:F4:0B:9A:1F:B9:27:FB:EF:40:B6:93:CA:25:D6:8F:A2
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/833AV_QLmh-5J_vvQLaTyiXWj6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:55::/48
Signature Algorithm: sha256WithRSAEncryption
4b:ec:56:22:2c:3b:cf:7c:33:18:f4:d0:6e:c9:93:79:09:f5:
ba:49:f3:c4:5b:8b:f0:ca:0a:6d:34:19:bf:50:4a:fa:ed:21:
4c:e5:00:aa:2a:8b:02:da:d4:4c:20:f8:09:8a:be:76:81:10:
f0:3b:19:91:3c:62:0c:e8:11:29:5a:cd:bb:a9:01:18:8e:7b:
2d:50:1f:0f:3b:51:80:4e:94:e7:39:66:ba:de:15:5a:b2:69:
f5:d7:c4:51:2e:c1:a3:54:dc:41:82:22:58:79:b1:bd:c9:95:
63:a1:98:7e:09:32:90:f2:38:23:b0:24:c8:13:ae:c6:5e:09:
da:20:2d:35:46:fe:0b:54:07:c5:b4:ad:fc:ba:2e:e6:6f:aa:
12:95:6a:7d:67:c3:fe:91:29:9a:93:63:0c:dd:e5:a6:5c:55:
87:17:86:f2:fd:73:49:e2:f5:c5:d7:a2:d5:f0:ba:06:5a:11:
5a:5d:e3:5f:28:2e:3c:fb:a7:46:68:c5:9c:d9:70:6b:16:a8:
96:e9:71:3d:a8:16:6e:b5:0e:5f:82:79:2c:c5:80:30:47:59:
d1:c6:9a:b3:5c:5b:1d:92:4c:a9:f0:a8:db:7f:2a:c6:0e:79:
c1:6e:6b:5d:88:96:27:c9:25:c3:a4:54:33:3f:2c:80:12:8c:
55:59:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org