Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/J-TIii63qRkZgnVpuBj6qHi7DBo.roa
File: J-TIii63qRkZgnVpuBj6qHi7DBo.roa (raw, json)
Hash identifier: bkjGdmSj1nBLPhYXrx4GY8E63tMIGztWB3Dgrn0y5mA=
Subject key identifier: 27:E4:C8:8A:2E:B7:A9:19:19:82:75:69:B8:18:FA:A8:78:BB:0C:1A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAD8F215A9533FD554F3CE316302940
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/J-TIii63qRkZgnVpuBj6qHi7DBo.roa
Signing time: Tue 06 Feb 2024 18:28:17 +0000
ROA not before: Tue 06 Feb 2024 18:28:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216087
IP address blocks: 2a0f:b241:107::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ad:8f:21:5a:95:33:fd:55:4f:3c:e3:16:30:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:28:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27e4c88a2eb7a91919827569b818faa878bb0c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:fe:74:71:d7:77:f3:c5:36:ce:72:d2:5a:
a5:a5:d9:f5:dc:a4:2d:37:88:e7:9c:65:0a:e5:a1:
38:ad:67:b7:de:3f:65:8c:fb:22:3c:7e:89:e6:5c:
00:1a:e4:4c:0f:4f:ab:f2:05:4e:09:80:76:45:43:
5b:91:b1:83:56:7e:42:0e:a5:de:48:78:8f:8f:bd:
07:ee:a2:89:07:2a:70:fa:0e:fe:99:49:ac:0b:c3:
83:7a:fa:e6:05:66:d7:79:58:f9:fc:f5:16:de:e2:
40:ca:52:ae:d0:55:23:1c:38:e7:8d:1b:83:3d:3d:
9d:18:12:db:0a:92:2c:e6:f3:4c:01:c1:36:f1:d9:
a4:56:34:70:66:ec:f5:00:27:84:83:d7:60:f2:ce:
5d:e1:54:15:2b:f4:78:f0:d5:27:19:57:33:8d:46:
b5:0a:f5:ed:f4:57:0c:3b:71:38:05:09:7e:94:a7:
9e:b8:3b:44:11:f8:af:da:5d:3b:02:e1:e7:76:66:
5e:6b:0a:0e:46:eb:64:a5:ef:36:ff:95:df:7b:f1:
20:b5:3c:97:09:ea:33:18:3a:82:41:20:ed:f8:00:
c9:30:ff:ac:93:9d:41:fd:de:e5:ab:ec:4c:ff:86:
1e:6d:c4:0e:86:a5:f5:79:ef:17:84:18:8b:74:8f:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E4:C8:8A:2E:B7:A9:19:19:82:75:69:B8:18:FA:A8:78:BB:0C:1A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/J-TIii63qRkZgnVpuBj6qHi7DBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:107::/48
Signature Algorithm: sha256WithRSAEncryption
17:34:53:6e:27:21:c6:3f:d5:4b:87:be:11:9c:2d:40:64:12:
c6:92:c9:bb:6c:4b:9a:08:fb:0c:38:2a:be:84:c1:63:ed:04:
3c:e0:fd:b6:7a:3e:24:30:1f:97:c1:00:2b:08:99:82:11:d5:
f1:86:c7:30:f2:7e:00:a8:93:6e:6a:8b:bf:2b:02:49:54:b5:
da:4b:2a:c0:08:d9:8f:60:bb:0a:9f:5e:ed:6a:37:ef:53:ba:
85:06:aa:dc:6a:2b:30:00:7b:5a:76:b0:51:dc:76:49:96:23:
3c:04:6c:f1:82:ae:12:86:b8:5e:a2:81:ff:5f:31:45:b2:89:
73:44:35:32:99:47:54:47:0f:49:a4:e5:43:88:41:8c:c5:57:
b2:a1:8f:1f:ab:cd:c8:cc:a3:86:8d:26:47:dc:81:e9:89:ec:
92:25:44:d6:48:e6:ca:34:97:02:60:a5:0a:67:ac:1a:86:9f:
f2:72:22:23:d3:d1:37:89:26:c1:7e:21:9d:7e:ed:8b:28:a7:
b1:14:5b:c2:33:36:90:a4:c1:66:32:da:29:8a:ea:4f:f5:fa:
c9:5f:c3:47:b3:1d:ef:80:e7:03:ba:41:20:61:78:3e:c6:5f:
e3:62:c2:ef:fa:7a:5b:be:1c:f2:02:d0:e9:fc:80:48:57:b3:
17:44:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org