Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/84-O4aIO-qg5ZxbI8ge46TetSVA.roa
File: 84-O4aIO-qg5ZxbI8ge46TetSVA.roa (raw, json)
Hash identifier: b2K1Wvci/ZMtONe6mjlrDkZOC5h5nbTSENBXhCMBIdk=
Subject key identifier: F3:8F:8E:E1:A2:0E:FA:A8:39:67:16:C8:F2:07:B8:E9:37:AD:49:50
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAE7667190BA24C617AC71D389D9C54
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/84-O4aIO-qg5ZxbI8ge46TetSVA.roa
Signing time: Tue 06 Feb 2024 18:29:16 +0000
ROA not before: Tue 06 Feb 2024 18:29:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49286
IP address blocks: 2a0f:b241:115::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ae:76:67:19:0b:a2:4c:61:7a:c7:1d:38:9d:9c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:29:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f38f8ee1a20efaa8396716c8f207b8e937ad4950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:ec:be:40:d8:44:92:17:e8:33:19:90:58:
a9:84:8e:51:ff:d9:21:d1:b3:78:c3:4e:eb:c2:d7:
3d:7c:92:3a:ed:47:8b:77:16:d0:0f:ee:e8:e1:db:
3b:b9:37:14:05:28:1e:1b:a7:fb:b1:fd:c7:a2:22:
b9:09:9d:01:f0:f4:0d:b0:26:6f:2e:00:23:5e:f6:
c1:cb:b7:09:c7:61:b8:45:62:f4:1b:b7:63:3d:8b:
ab:c4:2b:60:e6:54:d6:7e:41:a7:c5:c6:2c:e0:dc:
6e:e0:2c:e7:44:0c:0b:86:a5:ed:d0:ba:05:55:0d:
69:00:e9:db:b7:e7:cc:b1:3d:bd:7a:4d:92:29:01:
7e:9c:5d:a2:7d:de:ca:8e:ed:65:20:24:88:1d:cb:
10:5a:0c:c7:64:a4:d3:b1:27:7e:68:93:4b:29:f2:
63:f3:69:8d:54:4b:a9:5d:6e:99:70:50:f0:5f:64:
24:e2:d4:af:35:ea:7c:df:69:7c:6d:b7:d2:f8:ed:
86:61:38:7e:28:e9:cc:d5:95:ad:37:63:da:2f:84:
0e:b2:8a:8a:24:c6:77:35:53:9c:45:a6:3f:a1:2d:
95:4d:30:8c:de:be:88:dc:b9:4d:f1:56:e7:39:ae:
bb:3f:33:60:c2:70:29:e9:2e:14:80:ed:7e:86:69:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8F:8E:E1:A2:0E:FA:A8:39:67:16:C8:F2:07:B8:E9:37:AD:49:50
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/84-O4aIO-qg5ZxbI8ge46TetSVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:115::/48
Signature Algorithm: sha256WithRSAEncryption
82:6c:00:b7:84:85:53:e5:04:cc:5d:6e:e7:06:49:4a:56:bc:
f3:ee:d2:a5:a0:32:3e:e1:06:23:84:03:1a:e7:a6:90:b2:0b:
77:a0:97:51:81:4d:0f:83:d7:7c:73:9d:db:c8:ee:01:80:e7:
7e:1c:0f:3d:a1:9e:00:20:6c:2f:64:ea:12:fb:e7:ce:09:05:
56:c9:86:db:5f:6b:30:c1:eb:66:11:8f:5d:b3:f4:c8:fc:b3:
4c:e8:25:c9:6e:3b:3f:d8:c7:85:02:99:68:6d:20:3d:7e:cd:
42:2b:25:3d:4e:41:9a:1a:9c:72:69:31:b3:f2:87:29:7e:dd:
17:43:30:a1:33:d6:dd:4f:99:19:71:0d:c2:57:7e:fc:c6:e8:
ce:08:1f:6b:a6:4b:28:f5:f8:09:6d:be:0f:4d:3e:8c:08:bc:
c5:d2:02:a9:d0:ab:cf:46:64:37:b1:80:b4:aa:47:b6:a9:c4:
e8:73:3a:05:14:94:3d:d9:22:19:a3:e9:c7:4b:50:be:f6:6a:
b3:27:fc:a1:5b:54:63:cb:f6:5b:23:c4:78:25:3b:c2:0b:e0:
54:25:80:ac:6e:3b:db:fe:77:61:34:1b:c3:7c:df:ac:0b:5d:
58:85:3d:1a:b5:09:c8:3d:dd:34:ae:50:b5:73:f0:ad:cc:ed:
4f:8f:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org