Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FmPowCzZDZHkhj_7-HIsyFb6YsE.roa
File: FmPowCzZDZHkhj_7-HIsyFb6YsE.roa (raw, json)
Hash identifier: 0ZeoXZyG0O5hE8s7VjvI/yhOng3rdPif1P8shRFIx9I=
Subject key identifier: 16:63:E8:C0:2C:D9:0D:91:E4:86:3F:FB:F8:72:2C:C8:56:FA:62:C1
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F08450B1B031E199B25DA4BC065BD6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FmPowCzZDZHkhj_7-HIsyFb6YsE.roa
Signing time: Wed 07 Feb 2024 05:00:39 +0000
ROA not before: Wed 07 Feb 2024 05:00:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200536
IP address blocks: 2a0f:b241:be::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:84:50:b1:b0:31:e1:99:b2:5d:a4:bc:06:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1663e8c02cd90d91e4863ffbf8722cc856fa62c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:cb:47:13:a7:ab:ad:31:a3:91:b6:8a:f0:
07:c3:e0:56:21:fa:6f:7e:86:50:4a:52:91:8c:b5:
c4:a4:28:4f:e0:04:6a:60:b9:84:60:09:28:71:f2:
90:fa:45:df:3e:5b:d7:b2:5c:4e:bd:aa:33:1c:0d:
df:23:b5:6e:4f:78:08:25:db:76:15:6e:de:59:55:
1b:44:1d:8d:c4:6a:f9:5b:3b:f3:42:cf:9d:37:54:
98:ba:d1:e6:06:3a:06:c6:25:d0:cc:0a:ef:8d:7c:
b9:76:ac:44:aa:58:90:d7:a9:64:0a:05:ec:4a:3f:
fc:d4:78:32:b1:d2:6b:bf:a1:86:be:33:97:1f:e6:
e5:c2:fa:95:cd:65:c1:21:02:ba:42:da:97:be:cb:
d1:10:cf:cf:9c:6e:46:cd:c5:dd:0a:a7:ff:ed:ad:
51:1f:45:6b:15:1d:a3:5f:30:99:ca:97:33:8f:b0:
1e:68:db:82:0d:0e:f1:d4:ed:28:82:4c:67:54:87:
0d:e4:00:27:fb:c6:51:1e:d1:9e:e4:6b:35:c4:d3:
ce:c3:11:fe:d4:c2:48:81:c4:fc:8f:af:2b:20:76:
a7:65:fd:dc:a7:ed:2d:9d:07:3a:c8:b1:ca:2c:4c:
a4:25:d0:8d:05:3e:c3:2e:43:8a:5e:f7:d7:fd:7c:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:63:E8:C0:2C:D9:0D:91:E4:86:3F:FB:F8:72:2C:C8:56:FA:62:C1
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FmPowCzZDZHkhj_7-HIsyFb6YsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:be::/48
Signature Algorithm: sha256WithRSAEncryption
76:31:42:f3:76:80:e4:f1:50:c9:26:6e:c0:9a:e5:86:7e:68:
a5:f8:a3:fb:b5:3b:27:8b:0f:07:74:04:19:1f:65:31:00:9f:
fe:af:41:82:f0:0b:60:5f:b5:3f:a7:de:cc:a1:c2:58:fd:89:
d3:46:44:6f:08:73:6a:1f:3a:95:78:24:80:0b:83:81:a0:ca:
7b:f1:3a:49:71:73:bb:61:e7:29:14:9c:61:a6:39:31:db:d3:
09:ad:1a:80:06:a6:ba:fd:63:80:7f:44:d5:54:6c:aa:45:a1:
6a:9b:5f:ad:ea:f2:0d:f4:ca:5b:2e:40:cf:f8:c9:0c:f9:f4:
0f:e2:60:ad:c3:94:72:ce:c9:03:da:6a:cb:ef:3e:10:a0:63:
b2:39:91:87:86:37:2a:8e:89:ea:7d:d5:ee:8c:84:02:e1:f8:
3c:19:d9:1e:57:45:18:27:f0:4c:cf:1f:1f:af:74:01:0b:7f:
07:e3:26:65:b4:44:be:e6:46:e6:09:94:53:96:fd:a1:01:42:
6b:00:12:df:0e:dc:c2:f1:90:2d:f5:84:73:73:63:9f:86:8a:
1d:ea:df:24:56:34:79:ad:0a:35:28:2e:c5:b6:17:6d:37:fe:
5f:6c:dc:cf:f9:e8:dd:21:8e:b2:06:aa:fb:48:17:d6:2c:bf:
63:9e:9d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org