Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8v_-Fcln8GJgfVoWXcskoctGJOU.roa
File: 8v_-Fcln8GJgfVoWXcskoctGJOU.roa (raw, json)
Hash identifier: LPLavzdI33thafkWkeeIivfUxRAbh7OEpfwY11bjrqo=
Subject key identifier: F2:FF:FE:15:C9:67:F0:62:60:7D:5A:16:5D:CB:24:A1:CB:46:24:E5
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F07F833B51A5BD70B7867F04E890BE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8v_-Fcln8GJgfVoWXcskoctGJOU.roa
Signing time: Wed 07 Feb 2024 05:00:38 +0000
ROA not before: Wed 07 Feb 2024 05:00:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200082
IP address blocks: 2a0f:b241:35::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:7f:83:3b:51:a5:bd:70:b7:86:7f:04:e8:90:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2fffe15c967f062607d5a165dcb24a1cb4624e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:b5:1c:e1:48:a7:d0:2f:f1:4d:f1:c3:f2:
93:66:ab:ea:fd:ba:3f:ca:e2:c8:4b:36:bc:75:b4:
33:05:e9:e3:9c:9d:51:97:c0:a9:ec:6b:43:3d:3a:
54:ea:bd:a9:90:f2:31:c5:8c:7e:81:df:62:c9:f1:
6e:41:de:ad:ca:7b:21:91:c1:d1:4d:e0:43:6d:a0:
2b:07:1d:64:e0:ff:6d:e1:09:8e:f5:c0:fd:1e:fd:
ff:e1:ef:4b:55:4b:fb:e8:5f:53:bb:fe:65:8c:01:
a6:99:b6:89:5b:8e:46:c7:fe:e0:b4:48:19:15:91:
a6:73:e8:f5:3d:24:02:08:ca:35:9c:72:43:cd:78:
86:17:d9:f5:d8:81:f0:18:25:b0:aa:d9:58:56:73:
78:90:ab:5c:c5:9e:50:bb:f3:79:45:b5:a7:53:e7:
7c:a4:d5:98:67:2b:c6:b8:2b:b4:fb:c3:ff:65:ae:
07:d0:82:a8:5a:d7:c8:82:8d:76:a6:3e:6e:93:9a:
47:ff:a3:bc:1b:40:58:53:20:7d:39:47:1a:ed:46:
98:1a:4f:76:74:04:e8:cd:55:19:10:c6:a4:21:0b:
db:0d:96:d2:95:87:8f:69:cc:38:1a:c9:18:5c:a9:
03:e8:35:65:b5:6a:34:59:26:e1:79:43:ad:a8:3b:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FF:FE:15:C9:67:F0:62:60:7D:5A:16:5D:CB:24:A1:CB:46:24:E5
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8v_-Fcln8GJgfVoWXcskoctGJOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:35::/48
Signature Algorithm: sha256WithRSAEncryption
26:b7:8c:07:61:fc:9f:05:f9:97:8d:71:71:33:0f:93:5a:ac:
66:a1:d6:57:09:02:6b:ab:9a:5b:9e:56:53:10:75:b8:d1:ad:
3c:85:ce:22:45:72:10:41:c0:ac:bd:f3:91:7f:7f:62:ab:60:
81:b4:cf:c3:33:8c:20:27:5d:51:0c:2b:87:5a:c6:75:7b:01:
f6:88:1d:98:96:d9:4b:14:c5:b3:bd:16:fd:07:73:ff:34:37:
d2:0a:6f:d4:75:6c:f0:fa:e2:42:af:a0:b1:13:7b:a6:fb:93:
35:e5:00:31:9e:ba:c6:15:98:fe:9f:25:0e:11:48:df:17:86:
b4:c2:e4:af:50:98:d0:b3:b0:a0:a3:7a:30:3c:09:15:f1:d6:
73:ca:6b:d2:bd:84:19:93:91:2a:8d:bc:3e:a4:57:c1:0f:6f:
a3:e9:ce:b2:e5:87:94:6b:bc:46:11:9f:04:20:9c:8a:7a:14:
d0:7f:83:cd:9a:10:3f:1c:35:ad:21:0d:f6:f3:35:26:5a:81:
2c:29:5c:dd:69:3f:63:67:df:53:ef:0a:4d:de:c2:95:13:f1:
76:4b:d8:ed:c4:1c:f3:b3:f4:9e:d2:01:b8:2f:1f:34:ac:b6:
d7:54:ab:86:2e:84:d1:75:3a:3c:81:7c:fd:07:8e:ba:73:3c:
1e:e6:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org