Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/T0oyn85lg2tXAEEHLdOiBJCB0_o.roa
File: T0oyn85lg2tXAEEHLdOiBJCB0_o.roa (raw, json)
Hash identifier: MG/AK/u+mJ3Br0hdwWL8UlWcTjfxNBwpzWs0TA3eTkE=
Subject key identifier: 4F:4A:32:9F:CE:65:83:6B:57:00:41:07:2D:D3:A2:04:90:81:D3:FA
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABBC8E436D36DE01E8C771485181AF
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/T0oyn85lg2tXAEEHLdOiBJCB0_o.roa
Signing time: Tue 06 Feb 2024 18:26:17 +0000
ROA not before: Tue 06 Feb 2024 18:26:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207556
IP address blocks: 2a0f:b241:f2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:bc:8e:43:6d:36:de:01:e8:c7:71:48:51:81:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f4a329fce65836b570041072dd3a2049081d3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:8c:7b:42:30:2a:1c:99:2b:d6:61:28:00:
8c:5f:2e:37:c8:76:2e:a3:db:2d:15:63:7b:ce:47:
28:97:5d:8a:d7:68:01:b2:08:9c:e8:6b:5a:7d:6d:
9d:a0:3d:57:fd:39:48:1f:f8:09:74:bb:0b:33:a4:
8f:b9:e6:48:8b:a1:a0:6c:52:51:50:33:a5:14:f5:
ef:03:a9:96:23:f7:c9:5b:c4:91:85:41:a6:51:5c:
17:48:5c:f9:49:c9:ca:6f:8f:43:9f:9d:48:e0:d2:
73:05:13:53:57:27:b9:9a:07:4b:d0:da:be:a3:02:
36:1b:32:e7:00:f2:15:37:68:99:93:ad:6f:ec:b1:
95:26:65:8b:85:14:e5:40:c8:6d:cc:fc:b1:9e:fb:
6c:55:02:12:36:42:cb:d7:4b:35:6c:ea:5c:04:15:
67:76:b6:2a:5b:60:3e:06:a5:9b:d0:9c:7e:4c:17:
8c:9f:b2:f7:36:79:11:a9:ba:8b:ca:55:2b:85:cc:
af:d5:a5:03:80:19:9f:87:60:da:02:21:5c:d1:4d:
81:27:ec:7b:32:2f:1c:c6:2e:3d:fb:42:db:25:ca:
d3:00:a3:23:42:cd:c3:24:cf:02:c0:69:bc:01:b4:
53:47:29:a7:14:b7:60:e5:21:cb:8b:bb:7e:ca:d5:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4A:32:9F:CE:65:83:6B:57:00:41:07:2D:D3:A2:04:90:81:D3:FA
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/T0oyn85lg2tXAEEHLdOiBJCB0_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:f2::/48
Signature Algorithm: sha256WithRSAEncryption
6f:5c:11:70:98:b9:35:d8:c2:d6:68:c8:4a:f9:5c:b8:13:73:
5f:b5:90:d7:7a:bc:5b:ae:11:2c:f0:cb:43:ea:76:de:75:18:
41:d2:48:fe:92:83:f8:68:1b:1f:b1:04:7b:4e:19:c3:f3:db:
4f:82:a0:5d:02:75:54:e8:ce:5c:49:d2:19:5f:c0:8e:fc:bc:
74:7c:1c:61:96:fa:c9:ab:8f:af:65:24:1d:91:80:74:fc:41:
75:4a:6b:b7:bc:42:d3:0a:57:de:87:6d:9c:77:d9:60:9d:70:
43:35:ca:a6:99:9d:c9:5f:fb:1f:3c:83:27:32:a7:b7:4e:02:
95:be:01:73:55:09:05:9e:d2:13:31:7d:d1:3f:d1:b5:55:07:
70:a5:5c:a3:c8:f5:7b:f0:43:c0:2c:b9:76:5f:c0:d4:61:ce:
46:29:6c:22:65:db:b5:3c:8e:8d:89:d6:87:a4:64:9b:f0:8e:
09:a1:cf:54:7c:b1:05:fb:80:1f:64:27:d8:1b:a9:9c:ba:83:
87:81:4e:9e:27:1a:a3:e3:ad:d6:37:b9:29:5f:bb:7c:78:07:
04:c5:bf:31:ad:1d:d7:c8:18:12:0e:1a:59:d8:b4:34:50:ef:
78:27:7a:d3:79:56:47:3a:07:38:3a:ae:93:93:83:c4:d9:24:
bf:ef:d3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org