Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TN5gKMNz4WJPT9xuBYhQrN84Gow.roa
File: TN5gKMNz4WJPT9xuBYhQrN84Gow.roa (raw, json)
Hash identifier: d8sn7/Nz7kw8E+geR5AkIMxRKPHemu9ghPJcsRBbLEs=
Subject key identifier: 4C:DE:60:28:C3:73:E1:62:4F:4F:DC:6E:05:88:50:AC:DF:38:1A:8C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8C94CE6948A4DD983B67E7DD977F5E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TN5gKMNz4WJPT9xuBYhQrN84Gow.roa
Signing time: Tue 06 Feb 2024 17:52:15 +0000
ROA not before: Tue 06 Feb 2024 17:52:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202464
IP address blocks: 2a0f:b241:1c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8c:94:ce:69:48:a4:dd:98:3b:67:e7:dd:97:7f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:52:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cde6028c373e1624f4fdc6e058850acdf381a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:4b:c4:4a:e3:d3:ee:b1:a0:1a:57:30:b2:
bf:91:93:f6:b1:40:46:d5:32:7d:27:44:35:10:8d:
e8:1c:aa:b4:82:f2:f8:3f:71:df:7e:2d:b5:25:fd:
14:90:cf:7b:93:03:2d:03:6d:27:1c:81:41:d9:57:
1e:af:72:7d:f9:25:af:97:19:82:2b:e7:93:d3:80:
86:d3:8b:6e:e3:fe:e4:50:95:e7:40:d3:b6:6e:18:
ab:c0:52:c0:5f:24:ef:1d:f5:04:ff:06:f8:70:5d:
41:66:b4:b5:53:11:ae:08:a7:6f:cd:3c:3b:c5:74:
59:47:0d:cb:e4:61:c8:65:f9:92:52:e4:1c:e8:54:
07:60:18:90:14:70:0e:fa:ed:a9:65:d4:3c:53:5b:
a7:e7:ba:c2:53:8d:e6:68:0c:c6:7e:9c:44:70:18:
f1:e1:39:d1:9f:cd:c5:c1:49:3b:ba:fc:30:09:90:
79:d4:6c:ce:1f:3f:ff:5d:86:5d:f2:5f:71:47:52:
24:3c:c8:96:a2:79:fe:1b:0e:75:c6:41:6c:21:96:
e3:62:53:a3:cf:d4:62:8d:2d:9d:ef:39:96:c7:8a:
ab:f9:de:f3:e4:3e:a1:64:68:ee:6f:b6:ff:43:a8:
74:85:98:a4:e3:d5:f7:2e:d7:82:ad:ea:f8:4b:e7:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:60:28:C3:73:E1:62:4F:4F:DC:6E:05:88:50:AC:DF:38:1A:8C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TN5gKMNz4WJPT9xuBYhQrN84Gow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:1c::/48
Signature Algorithm: sha256WithRSAEncryption
41:b8:bd:96:af:98:fc:32:5d:44:56:39:ba:9a:8b:bb:02:2f:
aa:f2:6b:78:d2:58:ee:0b:c3:98:74:02:3d:7c:e4:5f:65:9f:
04:98:19:0b:e2:3f:d3:ee:57:d0:30:47:0d:6d:38:21:27:f5:
ed:2e:bc:c3:cd:70:93:88:c3:17:9f:04:78:d9:6e:52:0e:0e:
02:5e:2d:bf:19:b8:dc:d8:6b:e8:20:e9:bb:a9:d2:9e:36:ca:
dd:1f:83:98:e5:a4:cb:cf:76:10:5e:00:3c:32:c1:ca:2a:29:
cf:3e:33:09:fa:eb:8b:bf:ab:78:d9:40:20:3c:a7:7b:36:e9:
04:77:46:c9:88:75:cd:60:8b:4c:49:0c:ab:cf:8c:bb:3e:66:
f7:c4:e8:0a:58:f3:18:9d:b9:08:6e:9f:7d:11:93:0e:f1:a5:
f3:f1:e7:26:b9:0b:29:c8:88:cc:48:34:0f:fa:30:8a:ee:37:
4c:99:00:91:58:39:81:dd:14:1d:53:90:7e:da:0f:ca:02:b4:
4d:11:bb:f5:c0:d0:78:c8:4e:11:2c:83:96:1a:7d:16:20:02:
cd:4c:fb:52:51:41:5f:53:6d:7b:9c:ab:c9:73:b9:f5:52:98:
7d:75:c5:bd:dc:36:fc:65:07:68:56:f4:12:09:f1:da:a6:bc:
92:88:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org