Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PmaZT7Sorxr7dUhh1iFaWMwQ9ZA.roa
File: PmaZT7Sorxr7dUhh1iFaWMwQ9ZA.roa (raw, json)
Hash identifier: Ec0hxqSkpZV8DgD7AxZbBVF9CaCugEqAnEItSC/4A6I=
Subject key identifier: 3E:66:99:4F:B4:A8:AF:1A:FB:75:48:61:D6:21:5A:58:CC:10:F5:90
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7DFAA91E0D1320A5DD42704F084404E5
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PmaZT7Sorxr7dUhh1iFaWMwQ9ZA.roa
Signing time: Tue 06 Feb 2024 10:33:15 +0000
ROA not before: Tue 06 Feb 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197736
IP address blocks: 2a0f:b241:e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:fa:a9:1e:0d:13:20:a5:dd:42:70:4f:08:44:04:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e66994fb4a8af1afb754861d6215a58cc10f590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:60:73:f9:b5:cd:63:ca:a1:62:6a:5e:65:
3b:cb:45:4d:9c:ea:45:8e:9b:40:32:46:46:b6:a7:
26:f5:25:7f:5b:63:6e:ff:35:bc:92:d4:a2:60:37:
07:89:cf:9d:ca:08:83:d4:a7:7f:6f:e4:cf:44:6e:
6e:f6:d4:d9:6e:e5:cf:e4:18:d3:20:8c:46:30:49:
68:3e:a8:04:20:46:f9:f0:80:7d:a6:d9:b7:2f:d8:
df:9e:53:94:62:52:ec:c0:e9:be:47:b2:39:8d:67:
68:5d:21:b6:f7:bc:c4:e0:2a:9c:c3:ef:bb:0e:4a:
5c:0b:2a:23:91:8d:ef:e4:e6:61:7c:6e:a3:6a:01:
64:c6:f4:48:18:0c:11:49:9b:b7:48:bb:3c:e6:a4:
eb:71:a7:9a:46:40:00:3b:48:06:25:38:88:e2:8c:
d6:1d:89:ed:57:ef:4d:e4:96:d6:7b:ae:7e:3a:0a:
3a:8b:a3:58:44:e0:96:98:e4:91:bd:f3:5f:dc:8f:
52:c5:65:f1:f7:7b:49:ce:d4:30:07:a2:4f:ce:99:
62:e5:0c:b9:cf:58:f4:a4:92:f0:81:4b:d8:02:8a:
b0:4e:73:8e:7a:20:65:8e:93:bd:f5:e0:30:81:b9:
84:9e:8b:e3:58:d7:47:67:13:e0:26:c9:51:fa:0e:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:66:99:4F:B4:A8:AF:1A:FB:75:48:61:D6:21:5A:58:CC:10:F5:90
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PmaZT7Sorxr7dUhh1iFaWMwQ9ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e::/48
Signature Algorithm: sha256WithRSAEncryption
40:9b:21:56:96:68:b0:bd:90:c7:d9:07:25:ad:13:fb:d2:35:
cf:f4:00:ab:18:7a:c6:aa:e5:76:b5:21:51:94:63:24:f1:fb:
19:58:3b:92:5d:08:35:83:da:a8:8b:c6:db:30:3f:cb:7c:4a:
25:e2:e2:a5:65:39:ee:b5:15:69:ae:a5:c5:0e:43:bf:bc:08:
40:ba:49:0f:c8:da:cc:d3:e6:02:a0:3f:07:e2:0f:8c:e5:53:
09:12:e1:b8:dd:8f:2f:70:07:a3:d0:0e:a8:7c:81:6f:e8:80:
f6:f9:4d:02:d5:75:97:53:d6:b3:40:42:a4:06:92:23:2b:1f:
cc:67:3e:91:2b:6b:c0:73:5b:09:5d:10:92:cb:62:e8:47:2a:
ea:db:94:28:7f:90:b3:a0:7d:d3:c7:38:ec:6e:2f:6b:58:45:
3e:78:3a:4c:fe:4e:95:2a:42:75:c0:3a:74:91:40:c3:d7:38:
5b:59:a5:e4:63:c4:33:b7:ec:ff:dc:dd:46:0b:61:07:51:9a:
e0:55:c1:8e:d3:c3:da:a4:78:ba:9d:b5:b7:d3:c3:3e:bf:e5:
7e:46:38:47:dd:33:04:84:c7:7d:a9:3b:8d:9f:49:4d:fd:9d:
9e:bf:b5:bc:70:d8:aa:8c:0f:ef:15:00:0b:42:c8:e4:4e:e8:
9e:d1:0e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org