Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FUqjdqXw76mXylyxC21ePAANYPg.roa
File: FUqjdqXw76mXylyxC21ePAANYPg.roa (raw, json)
Hash identifier: xRoD48LxywXnweY/KJk6ZxLbrAPIQXk4v7ihDujRgdw=
Subject key identifier: 15:4A:A3:76:A5:F0:EF:A9:97:CA:5C:B1:0B:6D:5E:3C:00:0D:60:F8
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F95BD57E915C0750329BE5C14B721A3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FUqjdqXw76mXylyxC21ePAANYPg.roa
Signing time: Tue 06 Feb 2024 18:02:16 +0000
ROA not before: Tue 06 Feb 2024 18:02:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209188
IP address blocks: 2a0f:b241:41::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:95:bd:57:e9:15:c0:75:03:29:be:5c:14:b7:21:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:02:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=154aa376a5f0efa997ca5cb10b6d5e3c000d60f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:3d:17:12:e3:cf:45:b5:37:43:e3:d0:80:
2f:f9:56:5c:5e:39:5c:8c:87:65:56:1a:69:cd:0f:
ea:3f:00:66:7e:2e:f8:0d:d3:82:05:37:a7:33:51:
b1:d2:3d:e2:83:92:c3:36:f6:80:be:f0:bf:59:b3:
fd:86:c0:9a:d3:eb:ec:ce:58:42:63:d9:d4:4a:da:
56:d8:c9:f9:65:4b:5d:8f:39:bb:7a:18:0e:f4:ef:
cc:61:73:b2:d1:8e:2f:30:06:6e:04:3e:ba:4c:c6:
c0:98:c3:29:1a:9a:f0:a8:36:8a:89:46:28:9e:56:
d5:bc:c6:69:1f:38:00:e4:a0:60:58:52:75:ab:26:
37:1f:da:e3:2a:0a:e3:01:e2:6f:b7:d7:a2:c9:28:
95:e8:fe:49:2a:3f:af:a2:66:2d:12:07:5a:47:fe:
fe:68:41:a3:89:25:7d:7b:30:7b:c0:a8:00:e6:4a:
4d:aa:ac:92:33:d8:11:84:e7:0b:70:d8:e6:c9:de:
58:92:e0:ae:45:f1:f5:43:74:f5:f9:6d:c4:45:1c:
35:46:1c:b1:92:f8:21:29:41:94:63:cc:90:d5:99:
b9:fb:95:e6:9a:23:d5:41:81:0e:40:90:2c:86:12:
a6:a4:d7:19:da:86:a0:86:9b:9a:ec:a9:21:25:22:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:A3:76:A5:F0:EF:A9:97:CA:5C:B1:0B:6D:5E:3C:00:0D:60:F8
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FUqjdqXw76mXylyxC21ePAANYPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:41::/48
Signature Algorithm: sha256WithRSAEncryption
08:7f:94:50:76:42:b4:2b:cc:25:a1:36:dc:01:bf:d7:4a:e0:
62:07:12:71:4d:51:37:60:92:4f:66:7d:23:b4:55:90:32:82:
ec:8c:4c:0d:bf:f5:ad:dc:36:02:5f:f4:98:6c:70:14:e1:01:
4b:fa:3a:fd:be:9c:9c:ef:1e:87:c0:cb:23:67:9b:ea:ba:ca:
26:53:07:09:2e:70:da:ab:49:ff:60:88:15:fe:b9:ad:50:43:
34:ce:4f:c8:8a:33:19:f0:70:32:e9:05:75:9f:1b:7d:ad:e5:
54:66:05:a1:45:2c:a6:b9:ca:37:02:45:b6:76:6f:e5:70:9c:
38:84:22:c0:ca:06:d8:2e:33:c2:f5:cf:f3:64:39:ad:64:d6:
96:16:65:9c:fb:18:81:ac:ef:90:ef:7a:84:ed:45:af:96:7d:
a7:80:8f:02:29:be:ed:aa:1a:77:63:9c:6f:af:a9:e1:c4:77:
f7:05:72:7e:63:dc:40:75:81:d8:fb:72:b7:a6:c7:9d:d9:c3:
0e:d5:52:8b:57:cf:58:6b:21:69:67:99:0f:ec:2d:4c:85:dd:
29:26:e0:37:51:a9:aa:40:66:74:cc:d3:80:a2:a1:93:e8:a7:
1f:79:ec:7a:57:a7:c7:3c:24:86:ba:79:30:cd:3d:20:d5:b8:
15:9e:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org