Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/GOH4cl7M-E6ZJ-vqlwhRLJ3U15U.roa
File: GOH4cl7M-E6ZJ-vqlwhRLJ3U15U.roa (raw, json)
Hash identifier: ucWQ4wzkQ4qN9gQHcpPXJHPu9en1tz/NKwxhCD1EB+o=
Subject key identifier: 18:E1:F8:72:5E:CC:F8:4E:99:27:EB:EA:97:08:51:2C:9D:D4:D7:95
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACA493A13C67EF799CA4C80251E1B9
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/GOH4cl7M-E6ZJ-vqlwhRLJ3U15U.roa
Signing time: Tue 06 Feb 2024 18:27:17 +0000
ROA not before: Tue 06 Feb 2024 18:27:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211036
IP address blocks: 2a0f:b241:fa::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:a4:93:a1:3c:67:ef:79:9c:a4:c8:02:51:e1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18e1f8725eccf84e9927ebea9708512c9dd4d795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:0c:22:76:01:aa:66:49:24:7f:33:19:7a:
6f:43:13:5b:2c:26:96:06:df:c5:2a:a8:15:f3:39:
84:b7:97:fd:3f:e9:4e:b9:aa:f5:1f:a8:5c:a8:35:
42:f2:e5:2f:f4:0f:92:2e:32:6f:5c:ef:9b:bc:c4:
a5:45:b2:2b:03:5a:6b:96:e3:2a:9a:28:08:4d:45:
04:d3:0f:4b:f5:1c:cc:e5:9d:9b:ce:02:2c:52:0a:
4e:5b:3a:5f:0c:8c:34:27:ca:b2:4e:8f:d5:7b:13:
a9:6c:39:f9:3b:df:db:ee:18:14:e0:d2:48:d8:b4:
48:40:05:d0:4e:b4:bd:9c:a5:f8:25:b4:30:04:68:
4b:fc:be:e8:e1:e0:17:f0:e2:dd:24:2d:06:82:68:
d9:d9:cd:6b:49:15:a4:9b:65:fc:91:f1:67:a9:67:
fe:27:87:76:0e:57:25:15:cb:e4:1a:b2:9c:89:51:
35:82:d3:de:97:f5:1c:f3:c5:6c:14:47:95:34:fb:
4d:e2:3c:f7:7f:b3:3a:4e:a6:e4:3c:e0:fb:a8:07:
e9:e7:55:89:2e:c1:27:64:f1:4a:6d:50:19:3e:33:
1d:43:aa:66:a6:57:b8:d8:be:d7:84:8e:c4:44:25:
c7:e0:50:2d:22:39:c8:85:84:d0:88:9a:85:c0:d8:
db:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E1:F8:72:5E:CC:F8:4E:99:27:EB:EA:97:08:51:2C:9D:D4:D7:95
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/GOH4cl7M-E6ZJ-vqlwhRLJ3U15U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:fa::/48
Signature Algorithm: sha256WithRSAEncryption
6c:34:37:9b:55:56:8c:61:a7:1a:07:9d:f6:d8:5c:cf:c3:d5:
ca:da:35:44:11:55:40:8e:d2:a3:75:15:09:79:5f:98:6c:f2:
28:fa:e2:a9:1e:f0:29:41:f7:15:00:0f:38:20:dd:59:55:2f:
70:5e:ca:46:30:bb:03:05:94:72:0d:c6:89:a2:74:70:fc:6d:
96:c0:da:ee:b5:8a:de:11:0e:85:cc:35:24:91:97:2b:b2:39:
4a:f5:b1:f1:ae:8a:28:a3:c1:0a:4d:8c:f6:4f:a9:fb:28:fb:
77:dd:11:72:fc:b9:bc:c4:c2:e7:23:3c:e9:55:f7:0a:a5:ac:
6c:e9:00:67:cc:06:f1:30:6b:77:bd:6d:16:6c:69:d2:0e:3a:
63:70:cb:65:95:f6:94:ec:56:1e:db:f5:b1:5e:b1:d0:0f:78:
d6:57:cc:b2:dc:01:2e:54:e1:5f:cc:91:05:54:ed:57:26:71:
4b:3f:d0:4b:b4:f2:aa:f2:8a:f3:51:50:e0:bf:dd:1a:d7:5c:
76:52:f3:69:45:c9:a7:99:09:9c:7d:4d:60:8a:4b:52:5a:f2:
c2:12:87:0c:04:5c:f2:a6:d6:aa:48:0a:24:35:44:80:63:5a:
b2:5b:3c:6b:fe:b4:77:13:a5:f2:9e:81:1c:0c:06:97:21:51:
b9:60:0a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org