Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FxhugBtqNEbehakbpUgcwYCPHfA.roa
File: FxhugBtqNEbehakbpUgcwYCPHfA.roa (raw, json)
Hash identifier: pBeoaUcBQwZrQDHAq9X6R6ZVRt5+bVuqqjHzCK45IuE=
Subject key identifier: 17:18:6E:80:1B:6A:34:46:DE:85:A9:1B:A5:48:1C:C1:80:8F:1D:F0
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABBDB84DC3539577334342F28F419F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FxhugBtqNEbehakbpUgcwYCPHfA.roa
Signing time: Tue 06 Feb 2024 18:26:18 +0000
ROA not before: Tue 06 Feb 2024 18:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208076
IP address blocks: 2a0f:b241:f3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:bd:b8:4d:c3:53:95:77:33:43:42:f2:8f:41:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17186e801b6a3446de85a91ba5481cc1808f1df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:4f:93:0c:13:29:a6:32:c9:34:dd:61:4b:
6e:2b:36:76:9e:9a:1a:61:b3:a4:7f:8b:23:62:78:
99:a0:ae:bc:e8:ba:8f:95:ae:88:c8:a4:0b:f4:3c:
9d:0c:ef:e9:03:c4:ce:78:87:3e:f1:72:c0:44:2b:
e3:68:3c:26:24:b0:8b:80:14:6a:e9:44:bb:f4:26:
cf:e8:9a:9e:3e:84:7d:86:e2:60:f3:2f:92:10:68:
d5:43:de:d0:2a:e7:ae:54:33:41:1c:5f:3f:1f:6e:
e1:54:5c:c5:a6:d0:17:d0:86:54:9f:22:e9:04:32:
e0:18:13:5e:3a:03:83:f1:b8:7b:6f:36:b6:50:8a:
5d:9c:9a:7c:aa:c3:fe:a2:bc:e0:e1:16:4a:a2:d4:
3e:38:c9:1f:26:51:12:25:6e:a6:fa:eb:57:0f:44:
8c:9d:94:07:59:19:cc:f5:eb:8d:00:c1:c8:4c:f6:
78:f4:71:10:54:0e:04:62:d3:b0:c0:7d:d2:bc:3c:
42:c7:96:77:fb:88:2e:ee:cd:8f:35:27:9f:bc:db:
52:ef:17:7d:69:bd:5f:5a:2f:64:b2:d7:dd:34:f4:
d0:4c:0a:5e:c6:e8:47:5d:0d:dc:16:4b:ec:7b:ec:
99:b2:d5:6e:85:2b:d8:c4:27:bd:8c:6b:17:3b:b2:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:18:6E:80:1B:6A:34:46:DE:85:A9:1B:A5:48:1C:C1:80:8F:1D:F0
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FxhugBtqNEbehakbpUgcwYCPHfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:f3::/48
Signature Algorithm: sha256WithRSAEncryption
7a:27:ae:b8:a2:bf:80:cc:c8:fd:a7:f0:9e:f2:ac:0d:90:4e:
6d:f7:ef:b9:c8:69:ea:29:a8:26:ab:f8:29:90:56:47:1d:0e:
bf:63:88:11:34:37:e2:aa:ec:1d:5d:f7:75:cd:2d:90:ae:db:
df:5d:98:d9:11:71:a2:47:5c:e1:00:9a:e3:0a:66:e1:19:a6:
a0:86:d0:70:6e:c0:43:1d:fb:93:65:ce:2a:e9:20:79:c1:61:
bc:5f:3b:ff:aa:77:e6:88:f0:5a:ce:4b:37:8b:6d:9f:b4:cf:
51:4e:6f:ed:39:e3:c0:14:28:7a:69:e7:24:4d:70:a7:78:05:
a8:c7:93:3c:2d:53:62:0e:ff:4f:1d:3b:e1:bb:48:cd:75:44:
ec:c3:30:a8:75:88:ee:e2:3f:62:b9:ec:8e:30:a5:ad:73:b6:
5a:30:b0:1d:31:07:b5:57:85:ba:03:01:e1:3b:04:96:50:9c:
35:c9:02:10:d2:77:23:47:45:f4:55:93:3f:cf:0b:63:9c:4b:
18:65:8f:8f:80:f8:e0:f4:df:99:19:42:1c:8b:3c:2b:2a:cf:
d9:e5:03:79:2e:8a:63:cf:e4:90:23:93:f4:ba:30:73:78:8a:
50:c5:88:5e:ae:21:c3:f9:79:e7:bc:f5:66:8d:0c:dd:f9:a2:
96:46:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org