Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SRLvQgsaz9LF8qK491hlHCApCtw.roa
File: SRLvQgsaz9LF8qK491hlHCApCtw.roa (raw, json)
Hash identifier: vLyD9n4nDQKRfxY9rKYjrKB1ShsW9XrAtyX2ndOjoSw=
Subject key identifier: 49:12:EF:42:0B:1A:CF:D2:C5:F2:A2:B8:F7:58:65:1C:20:29:0A:DC
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96AE2B259624B1FAEDD43AD1F2338B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SRLvQgsaz9LF8qK491hlHCApCtw.roa
Signing time: Tue 06 Feb 2024 18:03:17 +0000
ROA not before: Tue 06 Feb 2024 18:03:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216052
IP address blocks: 2a0f:b241:5b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:ae:2b:25:96:24:b1:fa:ed:d4:3a:d1:f2:33:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4912ef420b1acfd2c5f2a2b8f758651c20290adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:ad:12:3a:3c:04:15:16:92:1c:69:fe:12:
48:fc:b8:5e:98:2f:51:49:b7:fc:40:cc:b9:0c:ce:
6a:e0:6b:35:a4:00:46:a5:20:54:42:8a:0c:f8:4f:
c5:14:04:a9:aa:e1:47:a0:bf:43:61:b9:09:43:65:
67:f6:9f:ef:ac:8c:f6:01:26:1b:4b:9b:fa:f2:45:
93:a1:75:db:fa:4c:ca:63:fd:06:fd:2d:e2:94:68:
58:27:d2:eb:c7:ae:51:1e:23:5a:d2:f0:a6:42:83:
3a:46:21:9e:1a:7b:83:48:1d:45:66:8c:aa:91:4f:
ae:2c:39:b1:7e:e1:49:90:3e:f7:39:fe:f9:43:10:
cf:ab:fa:22:b5:13:cd:fa:c8:e2:f7:1c:3d:11:0a:
3c:d3:f5:86:f2:48:f3:2d:5b:46:90:12:20:42:4a:
79:44:f8:db:76:34:32:22:20:91:c1:d0:fa:1d:69:
c7:f8:20:c6:3b:c1:7d:49:17:4c:36:35:f5:bb:92:
96:2e:8f:90:0f:5e:f8:12:73:99:2d:d6:56:30:f5:
2e:c7:ce:68:18:c7:b9:c7:fe:f8:4f:06:75:ec:99:
34:33:02:6a:89:d8:fb:60:2c:72:cb:a6:5b:c1:1a:
ba:61:37:86:3e:06:4c:bd:a0:10:30:e9:9f:d6:e6:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:12:EF:42:0B:1A:CF:D2:C5:F2:A2:B8:F7:58:65:1C:20:29:0A:DC
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SRLvQgsaz9LF8qK491hlHCApCtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:5b::/48
Signature Algorithm: sha256WithRSAEncryption
69:dd:b9:d8:ee:f0:8b:52:9f:59:41:d6:56:03:6d:93:4f:b2:
47:04:54:4d:f7:f2:05:de:b1:d5:04:54:0e:a9:b2:fb:24:7d:
e0:31:cb:40:da:c0:00:46:1a:80:21:f8:f7:f0:7d:02:f5:97:
96:44:4a:3a:3f:4b:72:13:f0:75:58:b3:cf:01:13:65:1e:8f:
0a:c2:3c:88:b2:3d:74:84:19:a3:91:46:02:c5:ba:cc:2e:27:
0e:8c:4c:70:a8:76:dd:49:9e:df:27:f9:bb:04:e9:16:e4:d9:
3a:88:20:fb:c2:2b:91:28:3a:55:42:c4:27:6a:13:00:70:a7:
bc:27:01:9b:fc:d7:61:b1:2f:d6:3e:22:d6:0b:c2:36:1e:6a:
64:a5:d2:01:6d:e5:11:31:cd:93:0a:8e:d3:68:53:3a:b2:f9:
11:13:95:a1:d0:df:d6:52:34:52:f1:58:b2:ae:9d:7e:17:ec:
37:8c:a0:c3:1b:d1:dc:83:da:39:5e:fb:2d:04:d1:fb:e6:fa:
61:80:33:03:62:d4:dd:ae:fe:3e:49:b6:dd:8c:a1:a6:40:24:
9d:07:fb:6f:cf:0d:c4:3a:4c:b0:b9:5d:6d:b7:5b:e3:c9:17:
25:87:93:24:9f:57:f8:24:d8:b0:61:55:42:64:84:3a:0f:35:
64:f7:5b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org