Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/HoUzKDI5_XnT-KFWaqnnP-y-TLY.roa
File: HoUzKDI5_XnT-KFWaqnnP-y-TLY.roa (raw, json)
Hash identifier: QJjQP1w7ZavnPRTUYmclYcS71ZuM3RtjKxYvlv38fUg=
Subject key identifier: 1E:85:33:28:32:39:FD:79:D3:F8:A1:56:6A:A9:E7:3F:EC:BE:4C:B6
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8D7FDFEC444916BCE8D3EAD8F1B1A9
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/HoUzKDI5_XnT-KFWaqnnP-y-TLY.roa
Signing time: Tue 06 Feb 2024 17:53:16 +0000
ROA not before: Tue 06 Feb 2024 17:53:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210464
IP address blocks: 2a0f:b241:22::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8d:7f:df:ec:44:49:16:bc:e8:d3:ea:d8:f1:b1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:53:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e8533283239fd79d3f8a1566aa9e73fecbe4cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:eb:f0:9e:22:15:1f:63:f9:d5:1c:53:47:
97:37:84:4b:d5:92:4c:93:76:a1:cc:f4:69:f0:4a:
cd:28:93:8a:c5:21:5e:71:3d:d5:4c:30:c3:73:94:
f3:19:ee:b8:ac:dc:51:95:16:d4:fd:43:29:50:60:
d4:cc:80:77:e3:c0:80:2e:05:24:16:32:3d:2d:b3:
1e:c3:ce:6d:44:cb:ff:8d:2a:37:18:3d:19:00:ed:
d8:15:6c:ba:51:6b:06:67:3e:82:f3:96:8f:5a:71:
56:41:22:ec:9d:85:21:6c:7a:b1:d4:57:df:07:b7:
d8:e7:ec:b7:c1:3b:e0:40:97:5f:e0:bb:f3:29:20:
22:67:20:7c:b1:d6:c1:99:0c:2a:49:eb:a1:5d:c5:
00:f1:55:8a:15:3a:72:63:32:06:5f:23:a4:40:a4:
75:f8:02:ff:c9:29:50:bd:3e:b6:dd:9f:4f:dd:05:
6a:c7:00:fe:9e:11:dc:fb:ca:d3:ef:e4:c2:ac:cb:
e7:b5:56:19:c3:aa:c5:17:74:92:dd:1a:10:4f:dd:
a4:fb:7b:16:4a:9b:af:71:91:02:62:4e:b7:ff:e3:
ec:59:db:3a:0a:b2:43:00:89:05:82:cb:ba:e0:7c:
70:05:73:ef:0a:70:86:9c:e7:6c:6f:57:88:a8:1b:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:33:28:32:39:FD:79:D3:F8:A1:56:6A:A9:E7:3F:EC:BE:4C:B6
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/HoUzKDI5_XnT-KFWaqnnP-y-TLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:22::/48
Signature Algorithm: sha256WithRSAEncryption
6d:91:9f:28:a6:88:2e:a5:20:9a:15:46:7e:45:06:ac:5d:15:
fd:2c:3c:4f:6e:68:bc:1a:b3:20:9c:b6:d8:ef:e7:b4:43:73:
c8:13:27:a7:58:f5:b6:86:b3:35:7c:a5:61:5b:bb:4f:a8:2f:
2d:e9:91:d0:c4:a2:2f:34:45:f0:81:e9:57:c1:88:41:09:4a:
01:58:fb:aa:39:7c:ba:57:ac:f3:18:64:88:5d:16:b5:c3:7f:
27:df:3f:86:7f:8b:d7:26:8b:b4:58:49:2a:f8:2f:4e:bd:ab:
e0:90:0e:54:5a:04:27:2f:26:88:70:b3:51:3e:52:67:dc:96:
ee:06:c1:90:ba:7a:b4:ed:0b:2a:e7:b3:94:3e:bb:ba:1b:f8:
3a:ad:b3:ac:eb:e5:aa:eb:3e:ac:55:d8:d7:b7:a2:88:ce:16:
ef:e7:ba:e2:aa:30:28:77:41:53:f3:29:9f:0e:b8:21:76:1a:
33:15:bb:45:d1:7a:ba:0f:d0:e5:3a:22:9c:47:3a:e2:93:92:
8d:1f:d0:a0:67:ff:be:26:ce:4c:0e:56:08:be:84:55:ad:59:
37:68:9b:5d:67:12:dd:3e:49:52:6a:f4:42:a7:4c:1b:3b:2f:
d2:90:1e:d7:6a:27:41:f4:a1:4a:6a:9f:cd:87:a7:12:83:3b:
ed:97:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org