Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QT8YetNin0xab4NrVBx-gl3boIM.roa
File: QT8YetNin0xab4NrVBx-gl3boIM.roa (raw, json)
Hash identifier: wWSWcAkhCS2XyUMA9/TVoFMNblsou7NtePk9eFqzGe4=
Subject key identifier: 41:3F:18:7A:D3:62:9F:4C:5A:6F:83:6B:54:1C:7E:82:5D:DB:A0:83
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB7A3C1B128736C00C632AC9F3C081A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QT8YetNin0xab4NrVBx-gl3boIM.roa
Signing time: Tue 06 Feb 2024 18:39:17 +0000
ROA not before: Tue 06 Feb 2024 18:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211545
IP address blocks: 2a0f:b241:147::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:a3:c1:b1:28:73:6c:00:c6:32:ac:9f:3c:08:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=413f187ad3629f4c5a6f836b541c7e825ddba083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:67:fc:62:1a:5e:73:ff:3b:86:b4:d7:61:
d8:e0:38:52:13:a6:80:6e:77:8e:b1:3b:9f:6f:de:
56:be:d0:f9:02:34:a9:af:e9:c8:4a:1a:a7:db:c9:
a2:77:7a:f6:fb:71:a7:38:34:55:d6:41:cd:0c:5a:
3d:10:29:b9:86:7b:64:eb:d7:d9:6a:7c:79:79:fe:
6c:ff:ee:3a:44:fe:79:42:53:7d:78:3d:50:09:d0:
17:3c:37:25:43:e8:03:2c:b3:2f:7f:ba:8f:08:f2:
b7:8e:e3:71:ab:e2:14:0c:d9:71:9c:37:aa:9c:b5:
4d:2e:b5:34:27:9c:dd:9b:10:7b:58:1b:c8:7f:da:
af:c5:8f:32:d5:79:cb:3b:ee:dd:3c:0c:4b:f7:6c:
85:0c:2b:33:2f:f5:b5:bf:de:d6:25:c1:88:72:48:
f1:a3:2e:93:a6:0e:c8:60:b7:d2:7e:75:6c:66:aa:
3f:da:b9:83:27:cb:5c:5c:38:8b:59:ed:eb:8d:4b:
56:51:fb:4d:e0:e4:ba:07:72:53:05:49:ed:91:f2:
86:b7:38:8c:23:ee:1d:9f:46:85:0e:4d:c1:d5:b9:
17:28:dc:e7:6b:4b:ce:f5:01:1d:55:1a:c6:f1:66:
11:15:ae:92:b5:8a:b9:0e:eb:bc:ca:f8:b5:88:8a:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:18:7A:D3:62:9F:4C:5A:6F:83:6B:54:1C:7E:82:5D:DB:A0:83
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QT8YetNin0xab4NrVBx-gl3boIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:147::/48
Signature Algorithm: sha256WithRSAEncryption
4b:f3:88:fd:c6:3d:57:86:16:ae:ee:0d:10:f6:71:02:89:b1:
61:41:98:1e:7f:01:b7:1f:37:ca:20:d8:ab:50:b5:46:3a:ad:
2f:6b:95:19:70:f1:46:fa:7b:fc:a5:40:34:a9:c2:0c:c3:fe:
70:12:43:7a:fe:c7:d2:62:82:a7:f0:17:59:61:46:5d:b3:bd:
24:ea:27:f7:8d:39:09:bd:30:62:eb:df:5f:ea:b6:52:84:cb:
17:32:7a:92:61:72:49:cf:16:2e:d6:26:7c:90:b5:78:49:49:
cb:89:8f:fa:d0:77:26:62:89:9f:cb:b9:9d:5c:a7:ea:0f:f1:
28:64:8a:e4:a0:61:45:e9:18:1e:1b:be:13:eb:43:d7:47:f4:
bb:fe:a3:f6:1a:2f:ec:54:45:3c:72:e8:06:7e:c4:e8:b9:0a:
27:aa:19:04:5a:0f:28:76:7f:4b:cf:7c:a7:3a:29:b9:1c:3d:
98:13:cf:4a:d4:c8:b0:96:85:8b:02:ab:d7:c4:62:17:71:28:
c0:3b:6a:3b:92:10:40:94:dc:2f:a2:ff:0b:3b:8c:9d:02:b2:
98:da:8f:a1:92:01:95:64:90:ab:5f:2f:18:6c:0a:86:86:eb:
d6:5c:53:b6:d9:21:d3:48:93:93:79:38:05:bb:3b:39:b2:e2:
7d:7b:8f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org