Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8LPcit98B5kxr-6hMhhF7DXA3h8.roa
File: 8LPcit98B5kxr-6hMhhF7DXA3h8.roa (raw, json)
Hash identifier: 51lnW184xYL0J3m4Bj6B2lbIbQL5ZpYu3ja/OZEsiN8=
Subject key identifier: F0:B3:DC:8A:DF:7C:07:99:31:AF:EE:A1:32:18:45:EC:35:C0:DE:1F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA812DC136921CEFBD5D00CD39BBFF7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8LPcit98B5kxr-6hMhhF7DXA3h8.roa
Signing time: Tue 06 Feb 2024 18:22:17 +0000
ROA not before: Tue 06 Feb 2024 18:22:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200141
IP address blocks: 2a0f:b241:95::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:12:dc:13:69:21:ce:fb:d5:d0:0c:d3:9b:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0b3dc8adf7c079931afeea1321845ec35c0de1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:3a:f1:86:1c:08:98:2b:14:03:b9:e7:dd:
57:f2:18:c3:fb:48:ec:69:59:e2:01:57:aa:9f:fc:
bf:a2:9e:8f:ca:d3:b5:29:28:d7:7b:86:fa:23:a1:
54:48:dc:c5:86:71:7a:ca:6b:fd:73:84:1e:f7:97:
c5:13:40:4c:c3:9c:ea:a3:4b:60:05:cb:10:e7:f0:
77:da:a1:a2:c4:e2:e0:6b:47:b6:fb:e8:89:03:73:
5d:58:b6:98:ad:37:7c:c0:9f:cf:e6:34:f7:39:81:
a7:3e:82:30:93:6a:8d:8d:82:da:7b:11:f2:b4:90:
1c:40:e5:e9:f2:eb:56:66:b3:b7:e2:93:77:34:f2:
35:af:b8:12:35:fa:57:be:f8:2f:a9:df:34:d1:d0:
ff:ef:cf:5f:fd:54:a0:d1:bc:dd:ee:4e:12:b8:78:
d8:80:5b:f7:ba:6b:66:1f:9a:3e:2e:c0:8c:86:e3:
76:18:02:b2:01:14:0b:ca:e9:19:95:33:0f:22:1c:
62:10:8a:0b:c4:42:13:48:e2:7c:9d:64:30:6a:1e:
39:d5:52:99:33:f6:2d:8d:67:f2:bd:79:2c:de:31:
9a:9a:3f:f8:7d:14:f8:92:93:9a:e8:c5:d3:91:89:
b1:83:6e:84:3c:c2:21:35:c1:ce:77:ce:d5:f3:a3:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B3:DC:8A:DF:7C:07:99:31:AF:EE:A1:32:18:45:EC:35:C0:DE:1F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8LPcit98B5kxr-6hMhhF7DXA3h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:95::/48
Signature Algorithm: sha256WithRSAEncryption
24:d4:fe:aa:75:b3:a8:2c:74:f2:0c:23:1a:e1:3a:ba:2e:79:
3f:5f:ef:9a:3d:7e:c2:ac:6b:19:27:a4:4c:56:be:59:a8:a2:
f2:69:a0:c7:16:c6:39:47:e6:a6:c1:71:8d:c8:a0:c5:12:1f:
58:83:ae:dd:15:d8:fd:ea:76:58:38:c9:91:33:4e:d2:14:0d:
e4:e0:51:07:b0:f8:f8:00:a9:06:ca:68:f1:ca:79:e0:a7:48:
2a:30:b1:44:71:75:fd:3e:c7:17:a1:07:45:25:19:4e:89:e2:
10:68:4d:b2:f1:26:fd:92:70:d5:f5:15:3b:0f:a9:2d:11:a2:
49:4b:3f:ac:5f:8c:d0:62:3d:81:81:e5:bb:85:79:f8:c1:71:
e1:c4:aa:e8:9c:ca:28:be:59:a7:ae:f9:cd:74:29:a1:a8:85:
24:0b:4a:2f:98:4f:ba:f2:00:36:ec:87:48:d0:fe:a0:9d:3e:
aa:75:ba:19:74:76:31:b5:96:33:da:33:56:ca:9b:3f:39:0d:
37:c1:e7:b4:d3:5e:b3:0f:9e:40:6f:1b:e1:51:e4:4e:8d:63:
8c:ee:2e:65:15:4d:4e:e2:9e:ae:f0:e4:25:c9:cc:57:d1:04:
a4:7e:7f:f1:74:4a:5d:b3:0c:35:90:01:74:85:70:88:44:08:
e9:10:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org