Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MfAGFe1rBL2UF-DibFT7a4hVGE0.roa
File: MfAGFe1rBL2UF-DibFT7a4hVGE0.roa (raw, json)
Hash identifier: MZ3Jv4Y1MVfwnqys8EwEMPGE3NpJdSvCVGKKV3bFMVE=
Subject key identifier: 31:F0:06:15:ED:6B:04:BD:94:17:E0:E2:6C:54:FB:6B:88:55:18:4D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA7293C379A7039EE0F45A31E443CBE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MfAGFe1rBL2UF-DibFT7a4hVGE0.roa
Signing time: Tue 06 Feb 2024 18:21:17 +0000
ROA not before: Tue 06 Feb 2024 18:21:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199501
IP address blocks: 2a0f:b241:84::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a7:29:3c:37:9a:70:39:ee:0f:45:a3:1e:44:3c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:21:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31f00615ed6b04bd9417e0e26c54fb6b8855184d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7c:e0:55:1a:c8:57:0a:b8:81:ac:4f:48:4f:
47:45:31:36:f4:a9:85:23:81:a7:aa:73:2f:7a:ca:
ca:df:6f:30:1d:a5:6a:af:7e:62:b9:87:34:f3:12:
f4:72:83:89:a6:b8:ad:03:8b:5a:f9:15:1d:21:c4:
a3:ab:ec:c3:a1:ff:e7:53:db:9c:da:5a:1a:25:d1:
9d:2c:bf:f4:8d:ba:f7:28:ba:cc:09:c1:55:de:99:
dc:e9:be:c3:d0:21:45:0c:08:d5:b1:e5:b3:1d:cb:
4c:c9:6d:3d:0c:3d:e1:d9:59:6b:6f:eb:00:7f:cf:
7d:2c:06:73:99:b6:6a:8f:68:ce:d4:7f:26:9e:03:
f0:8a:65:97:90:73:ef:57:e0:64:a8:a0:26:f2:4e:
fc:6e:97:06:9c:db:a9:c9:10:46:89:0c:fc:0f:46:
44:66:70:82:69:f6:e5:11:b7:f1:db:d6:15:ec:4f:
64:76:28:d7:cb:3c:49:5c:61:1f:9a:28:87:a6:cc:
51:31:7a:e2:e1:72:2b:54:aa:5f:18:a8:2c:aa:1b:
0b:ed:8f:31:c5:43:d2:7d:4e:1c:96:22:08:2a:7d:
4c:b1:2d:94:ce:a3:4d:14:39:1f:9f:50:f0:f5:76:
94:6e:cf:dd:ff:e6:8a:53:be:00:3e:47:e2:10:62:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F0:06:15:ED:6B:04:BD:94:17:E0:E2:6C:54:FB:6B:88:55:18:4D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MfAGFe1rBL2UF-DibFT7a4hVGE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:84::/48
Signature Algorithm: sha256WithRSAEncryption
70:9a:30:39:bd:23:6e:2d:14:f3:f2:68:d1:f4:60:41:b4:c6:
9c:51:f7:28:33:40:34:17:70:cb:5c:3d:d0:e5:94:13:1a:0b:
71:3e:24:6e:8d:0e:c8:63:18:87:b0:18:83:9b:93:d5:54:91:
33:81:d8:0f:f9:38:95:25:71:a5:86:74:3b:19:3b:90:48:72:
7f:e2:c2:b9:bd:af:aa:58:1d:35:c4:6e:1a:41:18:5b:c4:a4:
3d:3b:c3:e0:ab:1a:61:48:be:60:35:94:52:0e:04:0a:46:b9:
81:3d:2e:9b:7f:a8:9f:74:78:98:d4:b6:d6:85:9a:40:b7:62:
dd:22:53:1e:e4:f1:32:2f:26:35:98:f4:8c:46:ca:1d:cb:fe:
14:ac:86:07:64:36:73:e1:62:51:cc:e7:70:84:da:ae:d4:62:
0c:ba:73:1b:08:ca:e4:23:e4:e9:98:9a:8d:0c:ff:ed:d2:fa:
9d:72:c5:d6:ac:69:7a:69:5b:b1:55:0d:97:ff:f6:3c:eb:4e:
8b:c8:1b:ec:85:2a:49:74:d7:df:47:c1:f6:00:00:31:31:93:
9a:f8:e3:40:c6:e2:3e:05:aa:de:c1:b7:37:2a:ed:33:7f:35:
3f:f1:e3:e6:1f:4c:69:05:42:12:86:69:1d:78:d9:2a:a0:fe:
42:38:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org