Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EOGtDDEXUO38z9bPoaNDJzAAKJg.roa
File: EOGtDDEXUO38z9bPoaNDJzAAKJg.roa (raw, json)
Hash identifier: elM9JRSTedn8dgfhPlLRIiKPVbpWUYHRxPSIp3AhMrQ=
Subject key identifier: 10:E1:AD:0C:31:17:50:ED:FC:CF:D6:CF:A1:A3:43:27:30:00:28:98
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAD8B48B6D575905C42F085C4D84458
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EOGtDDEXUO38z9bPoaNDJzAAKJg.roa
Signing time: Tue 06 Feb 2024 18:28:16 +0000
ROA not before: Tue 06 Feb 2024 18:28:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48215
IP address blocks: 2a0f:b241:111::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ad:8b:48:b6:d5:75:90:5c:42:f0:85:c4:d8:44:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:28:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10e1ad0c311750edfccfd6cfa1a3432730002898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:1f:41:73:ce:71:a4:24:53:47:09:86:67:
3f:f4:42:7a:79:c8:9e:2c:3a:8c:8a:68:67:a6:93:
9f:0e:c6:80:b1:7d:de:4a:03:f5:3d:d2:8f:2a:d2:
73:8e:90:35:c2:e2:73:2f:93:45:b5:89:60:5b:2a:
58:e2:37:e8:5d:70:cd:70:a3:a9:58:1b:8d:eb:07:
f6:9d:77:f8:a4:0d:45:bb:e7:e1:ee:55:f5:b2:35:
c6:88:c7:07:87:b0:ab:b1:db:e5:82:f7:2c:78:6f:
22:fb:6e:f1:35:37:fe:6d:9c:87:57:85:a3:62:7e:
5a:88:63:3a:30:2a:32:aa:d1:1f:1e:77:01:4a:31:
55:c3:de:6c:ab:3b:f5:aa:de:57:29:72:99:f5:a1:
0a:a4:8e:f4:d6:0f:71:f1:ea:f6:b8:78:b1:54:ed:
29:7a:f6:a7:ee:3f:da:6e:a6:52:99:55:1f:c1:84:
53:71:0e:83:90:95:bd:38:28:a5:e1:9d:05:2d:3f:
07:3b:63:14:b7:a5:a6:90:10:94:34:94:7b:f3:d6:
5d:e1:ed:3c:4c:f9:ca:f5:f2:b6:d1:7e:13:95:32:
65:79:1a:b8:21:15:8b:eb:a2:22:9a:6a:3e:61:3a:
d3:e6:5c:f6:86:9a:67:a8:e9:80:cf:3e:17:f9:df:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E1:AD:0C:31:17:50:ED:FC:CF:D6:CF:A1:A3:43:27:30:00:28:98
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EOGtDDEXUO38z9bPoaNDJzAAKJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:111::/48
Signature Algorithm: sha256WithRSAEncryption
0a:30:24:de:ae:d5:78:9a:0f:82:05:af:bb:27:01:37:f3:38:
43:0a:c6:f4:e9:d2:a1:28:48:dc:b3:39:dc:d9:44:d6:99:4f:
56:1d:16:96:ba:18:9e:f2:c4:68:31:33:09:26:c4:25:1d:2d:
9d:b9:fa:ce:5d:d1:84:96:0a:60:a4:ec:49:c0:28:d6:00:6c:
2a:6a:3a:5e:2b:08:28:a0:59:dc:3b:e5:ca:e3:21:58:86:43:
86:67:0c:b6:59:b9:ff:50:d7:d7:9d:39:b8:f5:4c:6d:88:c0:
2f:ac:68:c0:2a:42:05:2b:ee:e2:a1:60:c0:c3:d5:43:8c:f5:
bd:43:8d:80:2e:87:ff:86:40:38:b2:73:83:e6:36:e7:4b:f8:
77:bc:d1:f8:29:89:ef:a3:c6:3d:78:95:a6:db:58:a6:14:64:
33:b5:2a:b0:c3:22:62:1c:b8:92:d0:9f:c7:61:e1:06:a4:ed:
2d:ac:ea:6e:85:2f:b7:7a:6f:a3:79:9d:a0:6f:35:e2:f1:23:
e1:1b:a2:51:16:e2:ad:3b:f7:00:18:2b:88:83:fc:09:7a:ab:
80:ba:a7:11:11:e5:2b:d5:5a:51:52:f8:b5:e0:23:ab:2f:99:
51:0e:a1:84:54:ab:6e:67:bd:6b:ba:30:1c:04:b5:a3:33:f5:
71:e3:41:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org