Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BIXqpDQCf6tC1x1y9U6QB7jb2E8.roa
File: BIXqpDQCf6tC1x1y9U6QB7jb2E8.roa (raw, json)
Hash identifier: w93zCKuVQjvR/n5+Pl/IHslpaysGeX43pnJY8HQyoOM=
Subject key identifier: 04:85:EA:A4:34:02:7F:AB:42:D7:1D:72:F5:4E:90:07:B8:DB:D8:4F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB5C9C7268CA5F99363D2C30A75FA9A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BIXqpDQCf6tC1x1y9U6QB7jb2E8.roa
Signing time: Tue 06 Feb 2024 18:37:16 +0000
ROA not before: Tue 06 Feb 2024 18:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197739
IP address blocks: 2a0f:b241:128::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b5:c9:c7:26:8c:a5:f9:93:63:d2:c3:0a:75:fa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0485eaa434027fab42d71d72f54e9007b8dbd84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b0:d5:d3:d1:fd:d9:f7:c1:dc:bc:a9:f5:c5:
3a:61:b4:a0:71:52:72:f3:57:e4:ed:75:43:3f:17:
60:2c:30:89:d9:02:5b:3e:bf:09:5f:90:35:c3:88:
5e:c0:f2:b6:4e:ac:c1:63:01:27:49:11:2f:f9:32:
b3:32:9f:f9:7c:5f:90:f6:f1:6e:17:d9:ea:76:ce:
53:ab:2e:fb:02:4c:94:00:63:2b:15:8c:bd:00:1e:
85:9d:40:60:19:57:e6:f2:d6:38:7e:da:c1:ed:bf:
44:ba:97:85:6d:01:e1:a3:5b:ff:6d:c6:07:d1:98:
bf:5b:fe:41:1e:74:c1:e5:c0:43:1d:bf:e6:67:75:
a1:48:9e:b3:4a:1b:2f:32:e3:08:74:ca:66:ff:1e:
f2:ba:80:06:3e:df:ea:ea:3d:24:10:14:1e:f2:ac:
70:f7:45:71:49:a1:0f:13:d6:56:38:47:14:41:e5:
0e:5d:d8:80:e2:6d:f6:6d:5b:26:e4:31:33:bc:9b:
ef:17:5f:d3:fa:64:4e:30:41:dc:68:7f:e0:37:83:
e4:27:ae:f8:71:90:85:cf:4c:e9:89:46:a6:40:26:
9a:43:66:6e:ce:08:18:8c:98:2d:63:dc:4b:10:8d:
ea:9d:f8:db:7b:4e:1c:9c:c2:02:8e:d8:68:2c:d6:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:85:EA:A4:34:02:7F:AB:42:D7:1D:72:F5:4E:90:07:B8:DB:D8:4F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BIXqpDQCf6tC1x1y9U6QB7jb2E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:128::/48
Signature Algorithm: sha256WithRSAEncryption
76:aa:68:88:df:c2:7a:90:99:03:7e:8a:23:8a:b1:37:2c:00:
13:1b:ed:45:04:e8:55:d0:9a:c6:69:49:68:f4:91:bd:60:92:
35:f0:35:29:eb:92:55:ac:bb:ec:b6:43:00:4c:a0:d5:56:55:
5b:e2:d7:ef:37:b3:b3:cf:60:ff:8d:40:f2:6f:67:b1:de:4d:
62:14:d0:6b:8a:b8:78:07:0a:95:af:1b:e8:a4:81:ba:9d:aa:
5b:d5:11:e6:27:f9:0d:1a:43:e1:7b:33:f2:8b:db:3b:13:94:
68:94:4a:74:16:f7:0c:cf:c6:52:13:b6:c2:49:1d:e3:5b:8c:
ff:c6:0f:7c:13:5b:b6:1b:61:c8:f1:88:16:c2:8e:51:da:fd:
da:82:14:c1:fb:a6:fe:ba:2c:8b:b6:ee:07:cc:17:dc:89:cd:
4b:66:af:0c:b1:14:7b:75:24:d4:dd:db:df:12:3e:03:3a:b3:
d1:88:ee:35:b4:ff:db:a2:4e:35:21:b5:cb:75:cf:63:bb:cc:
6e:aa:0b:af:ef:4b:80:fd:91:74:67:0d:21:2a:ad:eb:61:f9:
e5:cb:6f:3a:3c:cb:7e:ad:87:74:99:1a:c5:9d:42:5e:a0:ed:
da:dd:b9:fe:c6:4c:b5:ca:11:7d:79:c3:63:13:c6:e3:9d:95:
25:55:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org