Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9sARd5p0YkHIMcsrOool3Wc07nE.roa
File: 9sARd5p0YkHIMcsrOool3Wc07nE.roa (raw, json)
Hash identifier: HzCKGJpJsfmLeznH5XfKH2pkzj51Pptn/Kj45chSxnQ=
Subject key identifier: F6:C0:11:77:9A:74:62:41:C8:31:CB:2B:3A:8A:25:DD:67:34:EE:71
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0B0DF875F8B91215FCB43222323D2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9sARd5p0YkHIMcsrOool3Wc07nE.roa
Signing time: Wed 07 Feb 2024 05:00:51 +0000
ROA not before: Wed 07 Feb 2024 05:00:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213392
IP address blocks: 2a0f:b241:14d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:b0:df:87:5f:8b:91:21:5f:cb:43:22:23:23:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6c011779a746241c831cb2b3a8a25dd6734ee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:27:d3:5b:08:1d:48:4b:0b:95:f6:2e:6a:
38:f5:ef:ba:23:cb:11:d5:89:ba:4c:fb:80:ab:35:
2c:33:bd:1d:48:13:80:9b:eb:aa:eb:d4:06:7e:6e:
ef:8c:e7:64:92:3c:82:7b:e2:71:de:34:7a:63:bf:
31:c7:0d:27:dc:c3:ea:a8:99:73:24:f0:72:10:3b:
c8:0b:7c:fd:1e:34:28:7f:34:d3:4f:14:17:55:25:
bf:0a:c3:fc:85:d4:66:c0:da:fa:a0:4d:85:b6:fd:
ea:89:15:d0:6f:bd:48:be:e7:23:62:e2:2a:2c:bd:
6e:96:c5:d9:b9:28:0c:34:60:94:fd:2f:9b:77:12:
16:65:34:c0:1d:62:5a:cb:21:fd:09:90:40:81:2b:
41:5d:fb:a3:9a:90:8c:b1:fc:a2:6a:21:d8:3b:62:
1b:5b:dc:a5:5c:19:65:32:8d:12:42:a8:cf:9e:98:
b4:1f:df:4e:d1:51:2f:3d:0d:57:ec:d3:2e:4c:84:
bd:df:e7:79:1c:2d:1d:e0:0d:65:7d:55:04:00:1b:
23:4c:32:f7:ce:e6:91:46:01:27:b9:cf:ba:46:29:
e7:90:51:c7:b3:65:fd:8c:8e:97:97:21:07:d1:87:
65:31:54:f7:57:18:05:fd:39:83:a5:f4:ca:8b:b3:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C0:11:77:9A:74:62:41:C8:31:CB:2B:3A:8A:25:DD:67:34:EE:71
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9sARd5p0YkHIMcsrOool3Wc07nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:14d::/48
Signature Algorithm: sha256WithRSAEncryption
8a:d4:a1:d6:16:51:46:40:29:e7:3d:86:0e:64:08:e1:13:b7:
06:3c:53:3d:63:40:da:17:61:fa:01:0e:87:03:ea:62:eb:1e:
8d:86:cd:7d:72:99:10:83:23:bb:58:92:d8:be:df:97:a5:fc:
2a:72:6d:3c:15:9d:24:48:95:36:b7:7b:59:aa:9a:4e:b9:1c:
1b:4b:10:26:da:94:fe:bf:1c:f1:d5:c9:15:b2:27:e2:da:5c:
01:33:2e:82:4c:96:b7:81:dc:fa:97:50:6e:be:7a:e1:32:a2:
1e:75:4a:01:b6:47:24:08:ab:ba:29:f4:87:f6:ee:33:03:17:
7e:ce:28:17:d1:f3:2a:a5:05:14:79:63:30:42:9e:cb:78:58:
ed:90:19:51:67:38:86:83:1e:0d:9d:a1:3c:8e:39:61:72:d3:
a6:5c:4d:80:07:8f:9b:1c:c7:ae:63:9c:e1:59:91:98:6b:d1:
53:a0:c8:22:91:4a:b7:36:eb:b1:00:da:9f:de:83:09:92:00:
78:ad:61:8b:54:92:d8:10:57:c7:ed:67:c3:77:8d:83:b7:e2:
09:71:8e:a0:1a:2a:94:43:f3:e9:0a:e8:87:b3:22:60:6d:a4:
d1:10:2c:92:d6:b0:5e:83:1d:5c:79:91:ee:1e:d2:a8:d6:8a:
09:57:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org