Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/A-xHl31N5gKPoIga0XZgtfuhLeU.roa
File: A-xHl31N5gKPoIga0XZgtfuhLeU.roa (raw, json)
Hash identifier: Wmm3SBjPlao//guV50HazF3GB2YzJ/W6IbJ5x5YFrvo=
Subject key identifier: 03:EC:47:97:7D:4D:E6:02:8F:A0:88:1A:D1:76:60:B5:FB:A1:2D:E5
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F05BE54969724130BEAEFB5C11895E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/A-xHl31N5gKPoIga0XZgtfuhLeU.roa
Signing time: Wed 07 Feb 2024 05:00:29 +0000
ROA not before: Wed 07 Feb 2024 05:00:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44733
IP address blocks: 2a0f:b241:15b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:5b:e5:49:69:72:41:30:be:ae:fb:5c:11:89:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03ec47977d4de6028fa0881ad17660b5fba12de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:73:ad:51:40:f4:a8:04:7e:10:8c:e2:ff:
30:e2:c7:4f:1b:05:7a:dc:28:96:6a:ea:f6:c1:ab:
12:dc:59:01:2a:77:6a:0a:37:21:65:2a:98:6a:87:
96:2e:45:7d:59:23:7c:d3:4c:ee:34:7d:b3:df:cc:
45:71:40:2f:72:e7:0c:c1:b0:03:71:d3:9a:01:f2:
56:10:c1:30:38:8b:85:b5:1a:28:45:25:01:1e:9f:
3f:70:ec:26:60:19:cb:ec:3d:e7:69:d0:e4:cc:81:
8c:07:d8:9e:cb:a7:85:76:f2:5d:53:0e:52:8f:4e:
c2:d6:c4:3f:db:ec:44:4c:65:6e:12:5c:ab:50:a6:
a2:df:4f:f4:4c:95:0c:2d:ef:59:38:da:7c:ba:63:
75:79:3b:3a:da:58:09:4e:a1:90:63:ed:10:03:35:
d5:f6:54:1d:85:98:b9:fc:1c:ab:40:c4:fd:c0:1e:
3a:af:8b:a4:1e:3e:fd:7a:0d:7e:64:1e:e3:2b:ee:
bc:05:7f:37:06:ac:d4:01:80:ab:5c:9b:fa:53:39:
d2:11:4f:86:b6:57:9a:e3:f2:cf:3f:39:24:61:dc:
e3:3d:be:dd:a4:5a:f1:9e:74:1e:85:46:b8:73:69:
a2:49:8b:8b:60:2e:1c:dc:ed:f8:8f:4d:50:8a:6e:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EC:47:97:7D:4D:E6:02:8F:A0:88:1A:D1:76:60:B5:FB:A1:2D:E5
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/A-xHl31N5gKPoIga0XZgtfuhLeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:15b::/48
Signature Algorithm: sha256WithRSAEncryption
73:21:90:6c:6c:f0:76:1e:59:63:8b:64:57:0b:ef:ec:19:fc:
ca:b4:c8:3b:6d:8b:2d:7b:fd:34:81:84:3f:77:bc:cf:81:2f:
8d:6d:27:fe:ad:0e:55:9e:c1:1c:1e:45:4b:b0:e2:7e:50:ae:
8e:69:b1:56:3a:63:68:9c:00:50:f6:a5:0e:92:24:66:e7:d4:
a1:b4:ef:db:e1:fc:51:95:2c:e9:12:86:f2:d5:ef:d3:83:5f:
6c:d0:ea:58:68:42:4d:2a:18:86:dd:85:a2:4e:45:c0:71:93:
a7:92:6f:e0:a6:45:f2:9c:bd:ce:8e:34:3a:bd:85:1e:1a:7a:
29:96:8e:08:d5:b9:4d:43:a1:6d:b7:11:d8:71:b6:07:d9:af:
f3:70:48:5f:e0:c5:7d:ec:93:0c:08:c5:e6:61:ab:ec:01:15:
ae:e9:a3:a6:ab:7f:25:e8:e3:84:31:0a:d0:1d:c8:1d:ba:3b:
52:63:29:f2:39:b9:1f:85:cd:d0:50:a3:7d:49:1e:19:26:b7:
7e:7d:2f:50:e4:c8:87:66:1b:0e:7d:7f:d9:95:e7:27:8b:e8:
87:1f:de:c4:7c:12:03:30:ab:dc:06:56:2b:32:57:26:a0:76:
0d:8d:97:5e:39:49:f7:bd:58:fe:64:f0:c2:f1:08:1f:65:6f:
21:ee:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org