Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8TSueshGc8fGBGLXTt08ld-7aCw.roa
File: 8TSueshGc8fGBGLXTt08ld-7aCw.roa (raw, json)
Hash identifier: vWlSzNJj51Lh8+E3qOEormR+vbyqdU7UytuhW2syJZ0=
Subject key identifier: F1:34:AE:7A:C8:46:73:C7:C6:04:62:D7:4E:DD:3C:95:DF:BB:68:2C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB88BDD5A8FA94AA9C2F60738BDCAEC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8TSueshGc8fGBGLXTt08ld-7aCw.roa
Signing time: Tue 06 Feb 2024 18:40:17 +0000
ROA not before: Tue 06 Feb 2024 18:40:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215650
IP address blocks: 2a0f:b241:14f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b8:8b:dd:5a:8f:a9:4a:a9:c2:f6:07:38:bd:ca:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:40:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f134ae7ac84673c7c60462d74edd3c95dfbb682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:79:92:d3:ef:8b:96:32:98:a3:a3:10:a9:
a8:f8:1d:06:24:7f:05:35:80:6a:8a:67:fc:99:7d:
f6:4e:aa:27:2c:07:94:ee:cb:12:aa:5f:12:22:d8:
88:91:04:fd:50:89:94:71:f9:0f:65:4d:83:a4:f7:
33:4b:bc:92:d6:98:39:64:9e:aa:27:14:a6:cb:3c:
44:ca:22:b0:a9:c5:41:3b:fb:b8:fa:ec:ac:7d:0c:
8d:4b:1d:fc:e4:14:31:85:cb:94:ca:02:2c:0f:33:
26:7d:4b:ee:b5:0d:7a:46:b6:db:c1:b7:d8:28:c4:
f1:b5:9d:e5:cf:ab:a7:18:ec:0b:9e:af:d2:87:49:
cb:3b:ab:99:b4:3f:d1:2e:43:d5:17:5e:c6:91:7d:
94:aa:cd:9f:7a:84:8c:7d:38:df:d8:b5:5d:66:c5:
b1:bc:55:4a:09:53:7b:ab:58:d1:d2:32:3d:18:f6:
fa:61:b1:8a:89:e3:49:8e:11:cc:c6:9d:5b:1d:cc:
b9:1e:7c:10:e3:2f:69:a5:6f:a1:4c:89:0e:d5:38:
67:3f:34:e9:73:91:1c:b9:db:78:78:da:85:02:1d:
65:84:b8:77:6f:d2:49:04:e1:82:e0:fb:4f:ec:2d:
26:eb:c4:87:56:97:94:ec:b5:08:3b:ae:ab:6f:04:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:AE:7A:C8:46:73:C7:C6:04:62:D7:4E:DD:3C:95:DF:BB:68:2C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8TSueshGc8fGBGLXTt08ld-7aCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:14f::/48
Signature Algorithm: sha256WithRSAEncryption
25:06:9d:e9:4f:05:8f:30:77:b2:ae:06:39:d4:57:e7:15:4d:
48:96:1d:ad:50:06:09:19:0b:74:ad:7a:66:34:ec:c5:8a:cc:
e8:86:92:8e:de:8d:fa:93:f2:16:bd:bc:a6:0b:1b:5d:f6:d6:
60:f1:44:c1:eb:59:b5:99:d2:41:63:11:7a:51:4f:5a:6c:89:
c1:63:af:69:82:ec:95:5c:71:2f:19:3f:72:a9:f5:91:a1:aa:
86:14:ab:ba:bd:43:1b:2f:11:42:89:6d:a0:c6:0e:a4:46:ae:
bf:17:3f:3e:6a:a6:b7:3c:f3:92:48:46:e9:55:2e:88:6f:f4:
bd:e9:0d:57:5c:b7:be:6e:3a:2b:b8:ff:49:26:4c:71:e1:30:
88:6a:75:b4:cf:2a:dd:2e:df:cd:a8:9c:20:11:3d:60:c0:63:
fa:f1:8b:81:30:3f:8d:95:58:4d:5c:87:09:17:9a:f1:e8:e4:
37:27:9d:2f:d3:15:21:d8:18:72:9a:d5:01:fa:98:d9:e8:e2:
62:26:7a:66:63:f9:f4:9a:d8:59:74:79:40:69:21:4e:b5:30:
ad:2b:48:77:ec:cf:89:8d:48:5c:1d:58:35:7e:9b:f5:64:9a:
fd:a7:2e:f1:17:37:fe:ea:dc:c0:15:90:38:3c:60:0c:67:72:
11:d6:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org