Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/O37Tt8KRI3Wqhtna-n_ZLAUezhc.roa
File: O37Tt8KRI3Wqhtna-n_ZLAUezhc.roa (raw, json)
Hash identifier: OQJq2pUJWulKC7bIylM3dJRrw0IpFWjcVM/9jONR75o=
Subject key identifier: 3B:7E:D3:B7:C2:91:23:75:AA:86:D9:DA:FA:7F:D9:2C:05:1E:CE:17
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACAB5610352D2DEB528D148DA53E02
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/O37Tt8KRI3Wqhtna-n_ZLAUezhc.roa
Signing time: Tue 06 Feb 2024 18:27:18 +0000
ROA not before: Tue 06 Feb 2024 18:27:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212884
IP address blocks: 2a0f:b241:103::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:ab:56:10:35:2d:2d:eb:52:8d:14:8d:a5:3e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b7ed3b7c2912375aa86d9dafa7fd92c051ece17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:90:fe:f1:7e:02:79:4e:7e:84:fe:4d:79:
cd:99:33:cf:3d:ea:07:0f:c3:a6:1c:e2:ff:f8:fe:
0f:c7:4b:58:89:ae:1e:cb:e6:21:52:b4:92:f1:21:
25:ad:a6:fa:c9:75:59:de:4d:0d:6d:cc:f1:e6:f3:
20:2c:37:48:78:67:e0:ea:a7:ac:72:89:44:ec:41:
c4:27:0c:9f:80:75:b5:30:49:6d:7a:b2:3d:0d:ff:
1f:6d:2c:dd:69:94:0e:45:ce:98:92:5a:c6:45:3d:
75:4f:07:44:20:78:6a:5a:d5:41:88:fc:b1:67:83:
e2:67:2f:e2:0a:18:27:4c:32:cd:0f:50:28:95:71:
24:6b:eb:ce:23:03:b1:6d:d3:45:47:07:94:d3:f9:
91:c8:fc:f0:64:84:6c:10:a0:a4:93:96:1f:72:a3:
b1:71:3d:ba:64:1b:75:a6:e4:09:41:58:60:fa:b4:
7c:e0:b9:b6:50:49:e3:40:ad:ff:e5:a3:99:e8:04:
5a:7b:fe:6e:83:bf:74:3a:a5:b1:72:bf:36:47:37:
58:a3:bc:f2:e2:12:66:11:bc:19:13:26:68:00:75:
c1:cb:2f:07:48:9d:92:2f:8a:8a:51:64:be:b7:cc:
d8:95:38:b5:ac:d1:0f:51:3b:7c:a3:2d:0e:6f:a1:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:D3:B7:C2:91:23:75:AA:86:D9:DA:FA:7F:D9:2C:05:1E:CE:17
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/O37Tt8KRI3Wqhtna-n_ZLAUezhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:103::/48
Signature Algorithm: sha256WithRSAEncryption
7c:87:6d:41:14:67:0d:01:d5:68:50:06:5c:d5:0e:3d:3e:aa:
ff:03:6a:24:d4:65:e0:ec:5b:3a:76:e5:54:0d:91:3e:21:fb:
b4:08:0f:ba:fe:aa:a9:c1:92:be:e3:b0:cd:3e:b9:2a:30:91:
5d:e9:ce:f6:50:cc:ed:ac:1d:06:d0:7c:d8:fe:45:a0:60:45:
85:b3:ff:00:d2:02:70:e8:bd:79:94:ff:b9:13:58:8a:73:79:
04:2a:57:39:e0:b7:ba:e8:a9:40:27:9e:89:8d:06:b0:75:b5:
43:10:15:6d:84:26:56:f0:dc:17:2a:7d:ae:93:e0:c2:30:db:
ed:3d:39:25:49:8f:6c:e1:64:d5:69:1f:d3:4f:49:7b:a3:84:
88:e5:a2:ba:4c:d6:2b:32:49:80:0c:37:e5:87:df:b3:4a:e4:
b1:ac:a1:12:d6:ab:7c:9e:23:91:bf:a0:06:17:a1:73:a2:e7:
78:bc:31:c0:7b:de:b9:ba:b1:f0:2f:4a:4f:60:1c:60:92:51:
d2:3b:6c:d6:cd:9b:35:d7:5b:34:02:b2:11:c4:ec:f6:be:7f:
74:1d:4e:ad:33:98:95:bd:80:81:f2:ec:5a:b6:5a:81:e9:22:
68:de:79:39:42:77:f3:bf:c4:63:5a:a3:45:e3:bc:65:64:ee:
f2:c3:e4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org