Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9PrJsYsWPoaORWy-DLfft7GODZ4.roa
File: 9PrJsYsWPoaORWy-DLfft7GODZ4.roa (raw, json)
Hash identifier: 6fIz/hVZZ8VtmGXBm8Ng8/uRGYbULfDiwIsxvX5CZoI=
Subject key identifier: F4:FA:C9:B1:8B:16:3E:86:8E:45:6C:BE:0C:B7:DF:B7:B1:8E:0D:9E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6BBDFD376269F2A9E86FA9993B02F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9PrJsYsWPoaORWy-DLfft7GODZ4.roa
Signing time: Tue 06 Feb 2024 18:38:18 +0000
ROA not before: Tue 06 Feb 2024 18:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204982
IP address blocks: 2a0f:b241:13a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:bb:df:d3:76:26:9f:2a:9e:86:fa:99:93:b0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4fac9b18b163e868e456cbe0cb7dfb7b18e0d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:4e:2b:df:5e:f8:b9:5c:fa:61:f0:1a:f9:
aa:bf:e9:56:ae:99:81:fc:1a:86:d8:9b:5b:ba:bc:
03:8d:6a:e7:b8:d4:0b:ca:99:58:a6:d1:be:71:81:
3c:a3:7d:d1:5b:c8:7f:68:f3:29:7c:d3:05:6b:d6:
8f:4f:43:dd:a9:db:ef:f3:fe:f3:24:52:6e:6e:ae:
86:82:49:a3:1f:d9:0f:96:23:c1:8a:dd:68:79:37:
81:aa:30:e2:a5:3a:24:e0:a7:4f:72:33:59:e6:7a:
fe:57:2c:70:1c:09:a6:37:6f:3a:c9:9c:34:38:ea:
95:a0:2d:0e:71:65:d3:1c:0d:20:9f:9a:e5:16:8f:
f0:27:2d:cf:2f:b9:26:f6:e9:ad:a4:d3:75:4a:fc:
60:8e:b4:57:11:a3:e8:88:3c:9c:df:5f:a5:dc:a5:
5a:66:40:22:16:c4:31:86:ae:ff:eb:e2:0b:6b:ab:
3f:18:bd:ff:a2:53:86:21:04:6f:ba:96:9c:3d:33:
86:99:19:bd:18:ec:79:22:f9:c3:4c:8f:8e:e2:df:
49:ce:69:d3:db:0c:99:df:17:45:85:12:eb:34:f2:
ad:8e:40:93:4d:4b:52:87:ab:d3:49:e4:d8:d2:8a:
31:ee:c6:a1:3b:d5:3d:89:f0:02:7d:77:0e:20:46:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:C9:B1:8B:16:3E:86:8E:45:6C:BE:0C:B7:DF:B7:B1:8E:0D:9E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9PrJsYsWPoaORWy-DLfft7GODZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:13a::/48
Signature Algorithm: sha256WithRSAEncryption
8c:77:97:da:a1:e1:3a:8e:a9:7b:1f:c2:a1:ef:a5:ce:e5:87:
3c:1a:15:20:9d:21:03:59:12:88:62:aa:70:c9:4b:13:a0:e1:
3e:20:e5:b6:65:73:e6:7d:6b:49:09:72:2e:03:3c:fa:2b:6d:
a3:7b:b3:b3:eb:ab:80:88:fc:dc:3b:32:6c:80:cd:6e:24:a1:
e6:38:70:0a:d1:16:95:28:ad:de:55:3f:1a:0e:29:77:62:b8:
79:55:e1:f7:de:e3:95:42:ac:87:39:d2:a1:da:62:f9:0c:66:
58:5f:16:e0:c4:84:13:f8:28:4b:12:21:53:e0:6e:46:a7:72:
0b:c1:80:3f:bf:0c:9f:b7:4d:20:ff:96:ec:16:6f:97:b0:a9:
ed:e6:88:fd:c3:e2:9f:48:86:aa:95:01:e1:49:10:d0:b7:9d:
e7:79:bb:7b:ea:ef:8f:4b:d6:a2:9b:0d:6b:7d:67:ac:cd:45:
0b:50:94:20:a7:92:d0:23:37:8a:68:9e:b1:d9:33:54:a8:56:
1f:f7:22:2f:7d:0a:cd:7f:8a:93:d0:c8:3c:11:56:64:93:e6:
9a:50:e4:6e:91:ad:84:3d:67:63:e3:29:c2:48:00:cf:5c:64:
8a:44:d0:6a:0d:71:43:73:01:59:65:b2:3e:f4:81:51:b7:eb:
91:ee:80:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org