Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DhESVc93pxucINf9Q-yaTos7qrk.roa
File: DhESVc93pxucINf9Q-yaTos7qrk.roa (raw, json)
Hash identifier: ABftL33dyRKQSUc8G/m6CiobKWUBi+NzMGsOLjzr8QQ=
Subject key identifier: 0E:11:12:55:CF:77:A7:1B:9C:20:D7:FD:43:EC:9A:4E:8B:3B:AA:B9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96A9C38CE6E680DEC7705A8EF5D8CA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DhESVc93pxucINf9Q-yaTos7qrk.roa
Signing time: Tue 06 Feb 2024 18:03:16 +0000
ROA not before: Tue 06 Feb 2024 18:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215807
IP address blocks: 2a0f:b241:54::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:a9:c3:8c:e6:e6:80:de:c7:70:5a:8e:f5:d8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e111255cf77a71b9c20d7fd43ec9a4e8b3baab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3a:90:83:5d:6e:33:91:10:c5:46:dc:d0:ec:
d5:fb:e0:56:28:e7:89:5f:6a:3c:dc:c5:c2:62:90:
9c:9b:03:f4:24:b8:e9:ff:94:eb:3c:a7:f2:de:6c:
39:52:4d:55:af:3e:46:11:52:72:d2:fe:37:68:28:
f4:12:5d:c5:ec:34:4c:8c:91:d7:7a:fe:65:2e:21:
f0:18:42:f8:73:77:04:14:8b:71:2d:73:be:7b:ca:
fd:7a:f4:ab:3d:f5:84:6b:01:db:66:78:9e:35:f8:
ca:37:90:83:a5:5c:f3:84:51:7a:93:25:db:d5:d3:
1c:01:94:c5:6c:bd:66:0a:32:d5:9e:71:b8:4f:d2:
2b:e7:05:63:6f:92:fd:4b:5f:1d:e7:fe:cc:8c:d7:
5f:e1:5b:df:85:b9:12:52:74:7b:58:2a:58:d1:34:
7d:ce:a5:88:2b:02:20:9f:19:9f:bd:d2:1f:93:90:
b6:79:aa:28:35:1b:93:04:22:09:83:f1:1b:1f:a5:
a9:4f:e1:98:34:a8:d8:db:08:07:e7:54:05:d7:d8:
52:19:1f:f3:b1:c4:48:f0:a3:54:06:98:b7:cb:4a:
2d:43:24:30:d1:1b:1c:ae:57:cc:24:f4:d5:09:7d:
fd:00:e5:70:c0:91:28:da:f0:1e:2f:5e:0b:54:b2:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:11:12:55:CF:77:A7:1B:9C:20:D7:FD:43:EC:9A:4E:8B:3B:AA:B9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DhESVc93pxucINf9Q-yaTos7qrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:54::/48
Signature Algorithm: sha256WithRSAEncryption
1f:e1:c6:1a:fb:a5:a9:48:2d:8a:f3:de:29:e4:76:31:08:cd:
6d:db:07:72:5e:f7:1c:36:53:a0:e1:89:2a:79:e0:97:db:22:
62:e7:8b:e4:8c:fa:92:5a:14:0e:5b:69:eb:72:be:aa:9f:ba:
29:c2:e1:ce:a2:43:57:9b:63:3c:25:b0:66:76:df:36:f4:e7:
14:ee:c5:e2:8c:3a:eb:1c:9e:f2:5d:a4:7f:da:0a:3a:e2:34:
a4:b3:52:d0:8d:93:f9:d0:5a:d5:65:86:b3:91:22:2d:26:3d:
e7:3e:90:ab:42:fa:49:9c:f7:f0:43:71:da:e3:cf:6c:93:c0:
7c:d8:05:65:03:5d:5f:7c:71:79:01:d0:dc:74:9d:22:d0:7a:
54:7b:6f:87:23:25:f5:ed:8c:6e:4a:c3:a6:7b:a9:74:8f:c7:
83:c9:d6:ee:33:3a:66:9d:b9:a1:d6:50:8f:3b:a0:ab:33:13:
4f:6b:32:78:13:a5:37:6d:9b:d2:dd:f8:26:a7:f7:4f:0d:2b:
97:0a:12:b6:10:a8:14:eb:5c:0d:23:37:8d:1f:12:72:c3:d3:
18:c5:0d:77:a3:e9:87:7b:d5:f5:63:15:3f:ad:98:59:7b:e2:
a5:2f:2d:69:3b:51:81:67:57:7d:57:8f:ec:b3:71:fc:0f:b5:
fc:ed:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org