Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ABuxaiqPq1pOurF6EAONi7L6l9c.roa
File: ABuxaiqPq1pOurF6EAONi7L6l9c.roa (raw, json)
Hash identifier: OimgHp2JKwgwaJNF9eJj5v7VayJOjXpe/tDwQHeWfGY=
Subject key identifier: 00:1B:B1:6A:2A:8F:AB:5A:4E:BA:B1:7A:10:03:8D:8B:B2:FA:97:D7
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F95BB9EA75EC6150858C4B908E4EB93
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ABuxaiqPq1pOurF6EAONi7L6l9c.roa
Signing time: Tue 06 Feb 2024 18:02:15 +0000
ROA not before: Tue 06 Feb 2024 18:02:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207842
IP address blocks: 2a0f:b241:3f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:95:bb:9e:a7:5e:c6:15:08:58:c4:b9:08:e4:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:02:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=001bb16a2a8fab5a4ebab17a10038d8bb2fa97d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:90:99:ad:8e:bd:9d:9a:52:25:97:3a:b6:9b:
53:04:77:6d:6f:03:aa:55:92:55:a8:0b:82:3d:91:
08:cb:2f:31:4a:36:e0:38:22:e9:58:13:5d:66:3b:
eb:35:69:42:23:8c:3b:68:00:37:11:4a:ad:9e:86:
81:1a:e3:11:5d:66:a9:e8:81:4d:89:3c:72:c0:67:
e9:6f:bf:0b:5d:88:72:fc:96:0f:06:2f:61:71:9e:
09:ff:c9:58:fa:c5:c3:59:92:bc:55:08:fa:4c:05:
3a:4c:69:1f:d6:80:1f:f0:5e:aa:af:37:d8:86:15:
d9:d1:5a:e2:23:91:a6:91:5d:53:ca:87:a7:d3:0c:
b7:6f:42:e8:f5:d6:f4:2d:4f:76:41:72:71:57:51:
af:0b:6d:93:7d:dc:a6:3b:95:82:d0:ec:48:c4:25:
c1:91:f0:14:2f:28:91:f0:ff:5f:2a:db:b3:58:05:
21:05:fe:3e:d8:b1:48:cc:c6:e1:19:7a:e9:95:a2:
71:9e:f7:7d:f4:e6:45:b4:53:5c:07:f4:5b:1d:ec:
41:72:3c:09:e9:3d:14:27:53:99:98:b8:95:7e:31:
83:43:b6:62:49:85:4b:13:35:70:e3:69:76:32:14:
7e:b1:e3:b0:63:31:9e:cb:41:98:6c:77:2d:c5:ef:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:B1:6A:2A:8F:AB:5A:4E:BA:B1:7A:10:03:8D:8B:B2:FA:97:D7
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ABuxaiqPq1pOurF6EAONi7L6l9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:3f::/48
Signature Algorithm: sha256WithRSAEncryption
4e:e5:fe:68:f3:b1:c1:c9:02:c0:63:56:31:8c:82:bb:5f:9c:
13:52:b9:7e:bc:c5:77:bf:aa:41:b0:4b:07:6a:ce:9c:1f:d2:
eb:9c:d6:47:f2:dc:9e:47:17:f4:f6:c9:06:32:f1:f7:23:e4:
c3:0f:21:c5:e2:da:a7:2d:55:eb:87:d9:c8:13:7b:e2:fd:81:
ed:dd:c6:e3:e3:f3:e6:c2:6c:15:00:e7:74:05:0e:b0:2b:50:
4b:73:26:6e:56:e3:bf:2f:a2:6a:f9:96:73:9b:42:ed:f3:29:
08:1a:d9:01:50:56:f0:8e:5e:ab:33:3d:46:79:a8:69:72:0b:
fa:89:97:39:c6:08:0d:32:71:23:2a:4b:97:49:15:39:f1:43:
00:79:69:bb:7f:9e:fd:72:8f:99:1c:ad:0a:e2:c1:2b:4b:40:
2e:23:83:58:46:af:1f:28:27:8a:63:f8:0b:f2:49:19:6f:b8:
b4:25:e0:3d:ff:d7:4c:90:da:f7:49:62:b7:2c:4b:23:19:27:
fb:c3:01:5d:85:ee:29:0e:10:ba:4d:6b:f5:75:0d:0a:d8:d8:
20:bb:74:cb:d8:f5:50:59:f6:19:f6:f7:e2:f6:8c:eb:a8:a0:
24:c2:4c:1f:91:05:ad:24:af:9d:31:6a:fc:d1:db:ab:f4:3d:
a7:a3:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org