Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Ii7bbYo65gC0CYPns5HXPv87NN4.roa
File: Ii7bbYo65gC0CYPns5HXPv87NN4.roa (raw, json)
Hash identifier: lhs9bVjfgL+HVTNkF3HHSewLIdpygOLgFj8b7LuFeE4=
Subject key identifier: 22:2E:DB:6D:8A:3A:E6:00:B4:09:83:E7:B3:91:D7:3E:FF:3B:34:DE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F08E767E90E9B8891B312E83049235
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Ii7bbYo65gC0CYPns5HXPv87NN4.roa
Signing time: Wed 07 Feb 2024 05:00:42 +0000
ROA not before: Wed 07 Feb 2024 05:00:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203843
IP address blocks: 2a0f:b241:e7::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:8e:76:7e:90:e9:b8:89:1b:31:2e:83:04:92:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=222edb6d8a3ae600b40983e7b391d73eff3b34de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:b6:f4:14:15:e9:62:8b:ac:a8:e9:ec:a7:
1d:85:0d:09:b6:ce:39:46:6a:4e:85:21:33:a4:22:
ed:c1:e9:e4:2f:24:21:a9:84:79:9b:7f:6c:76:e5:
b7:01:d2:b2:55:d9:d9:a2:2c:a1:00:ac:32:db:aa:
f8:90:5d:a8:2b:7d:9a:8d:10:14:7a:0e:da:5b:e1:
69:bf:cf:9f:a5:9c:e2:9c:a9:f7:be:07:70:18:91:
1a:a2:1e:c4:d8:91:d0:04:8b:46:2b:15:6f:78:9c:
2c:9c:f1:18:22:14:54:91:32:cd:ea:6d:83:df:14:
27:1c:e6:10:25:34:9b:6d:18:52:1e:48:9e:24:17:
7d:d8:3f:4f:b5:e0:49:3b:c3:28:c7:4b:d8:0d:8b:
32:53:b7:88:67:c1:c2:68:2e:e3:64:6c:e4:88:ed:
1d:06:f1:9a:1e:29:a4:0f:1a:e1:1b:cf:67:4c:6c:
f4:87:90:52:73:6d:77:9c:cc:67:36:de:ec:97:e8:
1c:a3:a2:ce:0d:e1:bd:e4:2d:8e:66:1b:ff:c5:f1:
8a:e6:1c:b9:7b:5a:b0:45:7f:80:ae:6c:15:ad:6a:
f7:ba:31:dd:b2:82:00:0a:05:f0:40:22:3d:71:d2:
bc:4e:bc:d2:7a:08:4c:09:c9:e9:66:27:b9:e5:b9:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:DB:6D:8A:3A:E6:00:B4:09:83:E7:B3:91:D7:3E:FF:3B:34:DE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Ii7bbYo65gC0CYPns5HXPv87NN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e7::/48
Signature Algorithm: sha256WithRSAEncryption
8f:2f:ee:15:47:ca:72:c2:d1:87:1b:e3:a8:de:e9:f7:4e:d5:
ab:1b:65:5f:2c:2b:a4:8b:50:89:d7:b7:ae:47:23:1f:43:18:
9f:1e:d3:50:f3:49:64:7f:63:c2:1d:de:fd:b8:44:d5:80:33:
8a:38:57:e7:4a:5c:7f:4a:85:8c:e4:7d:e4:0c:49:7e:48:4b:
37:c1:72:51:9d:86:13:8a:98:ac:8e:b4:6b:62:bf:c4:11:df:
a9:23:da:31:2c:76:02:22:0d:e3:f9:02:ae:7d:e1:f5:ef:a4:
ad:3c:25:8d:24:70:6c:41:53:4c:70:41:42:88:5f:0e:5f:d3:
c5:59:93:05:4b:ce:b2:d0:29:fc:7c:23:85:3d:a9:aa:03:25:
fa:64:f0:c1:ad:f0:ea:01:e8:f3:3b:a9:45:25:ef:e4:a0:8c:
86:34:fe:ff:98:ad:2a:5a:0d:ac:a4:45:3c:8b:e0:52:97:40:
01:15:86:ea:fc:95:46:f1:23:ea:37:f8:68:0e:1d:da:f3:4b:
92:29:77:3a:de:dd:d6:de:92:f8:cc:79:4e:b5:6f:34:f3:21:
e1:e4:b5:21:17:82:1a:37:d1:7e:c2:6a:de:e3:6b:7b:7d:5b:
15:65:95:3c:9f:2f:fd:56:e6:1c:f9:de:dd:c6:d1:40:e0:36:
7a:90:9a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org