Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FbKxAbcPqmQEaX8ock_T9xmlVq4.roa
File: FbKxAbcPqmQEaX8ock_T9xmlVq4.roa (raw, json)
Hash identifier: 5o1iy4bp49+97XsZrhRsJjlPxz9JMU8dzl0CAQ6HYdY=
Subject key identifier: 15:B2:B1:01:B7:0F:AA:64:04:69:7F:28:72:4F:D3:F7:19:A5:56:AE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA8FFE1850FE002B8841AC964C58A98
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FbKxAbcPqmQEaX8ock_T9xmlVq4.roa
Signing time: Tue 06 Feb 2024 18:23:18 +0000
ROA not before: Tue 06 Feb 2024 18:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200535
IP address blocks: 2a0f:b241:bd::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:ff:e1:85:0f:e0:02:b8:84:1a:c9:64:c5:8a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15b2b101b70faa6404697f28724fd3f719a556ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:15:0c:8b:bd:43:c8:2a:63:2c:76:a4:76:
bb:da:67:2b:08:da:5c:19:87:18:78:d0:af:5b:b0:
9c:18:cd:a9:af:8b:be:15:c5:a0:ce:a8:80:ab:4a:
5f:9a:c7:32:3e:46:68:c4:dd:e7:62:a6:e0:dd:e0:
43:d3:8e:07:d6:7a:d7:6e:9d:f3:f7:b0:7f:c5:83:
ec:b0:a5:a2:2d:6a:63:98:f0:54:9d:18:5c:4b:6b:
f9:cd:d6:a9:30:94:59:03:3d:c4:1c:c2:cc:56:f5:
6c:2c:ec:3d:e2:9c:26:a0:98:ac:14:f7:55:35:99:
de:94:bd:de:91:f5:4a:fc:13:54:50:2e:fd:88:f4:
a5:53:d8:f7:56:42:24:e4:6e:92:50:77:e5:f7:49:
c4:67:33:54:28:ec:a7:42:c6:12:a9:fd:8c:1b:41:
3e:61:ed:b7:8d:29:19:1c:00:dc:fb:f2:e2:b4:e6:
bf:65:93:a0:62:ac:ae:4c:45:47:7b:5c:8e:b6:cb:
94:e9:7a:35:c1:d5:0e:fa:0a:8a:39:fd:50:56:43:
57:f7:28:17:a3:3d:22:86:fe:51:c6:eb:11:56:7b:
2c:2d:1b:41:f6:39:2f:f4:ac:dc:bc:d1:a5:f6:63:
f0:c9:5b:3f:85:4c:35:93:48:87:0d:2a:d7:fa:c8:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:B1:01:B7:0F:AA:64:04:69:7F:28:72:4F:D3:F7:19:A5:56:AE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FbKxAbcPqmQEaX8ock_T9xmlVq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:bd::/48
Signature Algorithm: sha256WithRSAEncryption
38:2e:f3:8c:1f:72:c9:24:28:5e:0c:eb:5b:be:33:e3:01:bb:
bc:7d:af:d0:7e:14:f6:91:d7:9b:ee:34:b6:9d:6e:e9:5c:09:
9b:88:13:31:f5:41:4a:84:4e:32:9b:09:0e:3e:17:86:34:c3:
f5:93:51:5c:6b:9f:6a:9e:01:06:69:9e:d9:4a:26:5c:04:26:
c0:eb:29:b6:88:80:c2:52:0d:be:23:75:bc:35:27:0d:f9:28:
ff:c0:d8:6e:cf:35:7f:fc:82:1a:30:f5:65:16:07:7c:9c:a6:
91:93:08:d4:ed:e9:44:5e:37:43:da:ae:2b:35:19:eb:6d:42:
e0:21:7a:0d:f5:97:bf:73:e1:c1:a6:5b:60:41:1e:62:79:d9:
c9:32:b9:84:f8:2e:15:b2:0f:6e:9b:6b:f4:e2:4b:3d:42:4e:
79:f7:29:f4:ee:fa:63:8a:98:f9:ba:6b:48:da:fb:e3:90:d0:
dd:bb:81:c8:97:df:31:d7:e9:3f:43:83:ac:bc:13:38:25:38:
05:fd:01:f9:5b:cf:13:be:0b:7b:0f:55:6e:21:9e:c2:a0:6b:
b0:4c:4e:13:b8:ba:33:e3:85:7d:0e:5b:f7:8d:59:20:ba:76:
f3:55:05:4f:0b:48:e0:c0:f3:27:47:79:7c:58:a0:fa:e9:7d:
fe:ce:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org