Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FJZ3xgkPgBh_5cqOpUEi-naHwm4.roa
File: FJZ3xgkPgBh_5cqOpUEi-naHwm4.roa (raw, json)
Hash identifier: LHf4opGg/E4FWcsGYn4B7kMdx/I/XSsnpSBGI//Pv1k=
Subject key identifier: 14:96:77:C6:09:0F:80:18:7F:E5:CA:8E:A5:41:22:FA:76:87:C2:6E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F080389809334214CDCDB883611BAA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FJZ3xgkPgBh_5cqOpUEi-naHwm4.roa
Signing time: Wed 07 Feb 2024 05:00:38 +0000
ROA not before: Wed 07 Feb 2024 05:00:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200122
IP address blocks: 2a0f:b241:94::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:80:38:98:09:33:42:14:cd:cd:b8:83:61:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=149677c6090f80187fe5ca8ea54122fa7687c26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:d0:1c:18:4d:b4:a0:a3:34:3f:2e:29:77:
4c:7d:30:40:24:17:53:25:6d:5e:29:b6:f6:95:8e:
8a:9e:98:98:43:c9:f7:05:a0:99:8a:b0:f7:20:1a:
5a:88:d4:10:5d:26:b2:81:f2:c1:ec:76:ce:31:4d:
21:37:2b:f2:c7:c8:8d:08:78:ba:b8:a9:6d:e1:e6:
e2:a2:89:a4:c0:3a:6f:e6:99:b8:f2:bd:86:2d:f5:
fc:23:32:90:a9:80:e1:2c:b3:84:ed:ab:23:da:5f:
41:0f:08:06:36:fc:d8:41:83:49:70:f4:54:fe:a8:
bd:19:01:5e:96:08:09:f6:cf:1c:b8:62:23:a9:32:
ca:d2:98:05:d7:7a:07:f3:f7:f0:32:cd:b0:ea:ae:
31:1c:9a:3c:38:31:03:4b:6f:22:1e:4f:f9:43:1a:
1f:35:70:ec:7a:7f:22:d0:69:3f:ff:ef:59:3a:8c:
06:f5:f5:c5:54:cc:eb:bc:95:75:30:3a:d5:fb:17:
fb:ec:83:64:1f:71:a4:8e:4c:37:c6:17:11:9a:ff:
41:ca:88:b5:da:7a:76:fe:be:4a:f0:a0:83:f6:5b:
d2:bb:b5:ed:f2:78:a9:a5:0c:b3:fc:4a:63:13:c9:
4e:da:5e:2f:92:01:ba:41:63:5d:01:f0:5e:c1:65:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:96:77:C6:09:0F:80:18:7F:E5:CA:8E:A5:41:22:FA:76:87:C2:6E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FJZ3xgkPgBh_5cqOpUEi-naHwm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:94::/48
Signature Algorithm: sha256WithRSAEncryption
64:9f:c2:0e:b3:d6:00:a8:71:53:ee:af:41:10:27:14:9b:f3:
b7:f3:0f:7e:89:ef:04:d8:af:7d:38:3c:fa:47:c0:8a:6b:ec:
54:38:89:e9:61:61:2e:d9:1b:c1:50:c9:fb:18:f9:42:97:c5:
73:1f:3f:93:3e:2b:ea:5b:ae:d2:77:02:3e:fa:27:aa:28:d3:
5b:4d:91:bc:ea:9b:84:66:e9:e6:7a:57:35:8d:e8:a7:b0:eb:
3b:b5:e5:4e:da:0d:07:e9:9d:7c:27:93:e1:ab:82:5d:09:0f:
54:48:6d:cc:e9:32:44:e1:5a:32:4b:a9:ea:9f:6e:f4:8e:47:
88:2d:4b:9e:98:1f:14:e8:56:1c:fd:66:ec:bf:6e:5b:52:45:
85:cc:0c:53:96:1d:83:66:1e:41:ef:93:f1:3e:d0:c8:ad:05:
ca:98:49:15:40:cd:18:f8:74:ae:1e:f9:cb:1d:41:fd:52:23:
5e:11:47:5b:7d:33:fb:af:cd:9e:57:2a:4b:ec:4c:3e:9a:7c:
f2:e4:44:7f:83:65:df:6a:6b:d3:ab:5e:79:0e:0d:4a:49:bb:
bb:d4:75:c8:10:fa:4e:4a:1d:a8:50:52:ba:39:af:5b:a1:6e:
9c:5e:6a:f5:fa:42:df:15:62:fc:c0:7b:83:a3:50:db:e5:d9:
15:87:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org