Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Tn6KgsciKGn57E_pGcnzMtAB6jU.roa
File: Tn6KgsciKGn57E_pGcnzMtAB6jU.roa (raw, json)
Hash identifier: XzSItAhAuGeYqsmwPWRp5OxSSN7vxkP/69d6kqg0urY=
Subject key identifier: 4E:7E:8A:82:C7:22:28:69:F9:EC:4F:E9:19:C9:F3:32:D0:01:EA:35
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA8F63D2538D1035E4D413EAF7108D5
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Tn6KgsciKGn57E_pGcnzMtAB6jU.roa
Signing time: Tue 06 Feb 2024 18:23:15 +0000
ROA not before: Tue 06 Feb 2024 18:23:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200221
IP address blocks: 2a0f:b241:9a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:f6:3d:25:38:d1:03:5e:4d:41:3e:af:71:08:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:23:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e7e8a82c7222869f9ec4fe919c9f332d001ea35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:d2:6d:e1:13:82:99:70:b8:db:b7:5a:6e:
bd:a4:b0:c6:4b:60:83:f8:44:87:33:b8:a9:3a:1b:
31:ad:55:b9:2d:d6:cd:d0:b1:40:f9:26:4a:fa:0c:
12:6a:b9:4c:d0:ce:91:e1:6c:2f:28:c6:f3:34:5b:
64:24:cb:b5:bc:54:67:1d:c6:9e:fe:09:39:7b:c8:
1d:72:50:bc:80:dd:b3:e1:b6:95:30:ab:58:44:31:
c4:62:f4:8a:6b:10:9c:4e:58:de:a1:a7:d9:5d:a1:
04:f8:b6:5e:f0:f7:c5:7c:19:ce:43:03:84:b7:a8:
2b:67:5e:d4:ab:46:b7:e5:cb:fc:68:62:d5:22:72:
56:8f:0a:43:c2:71:37:92:fc:08:4c:5f:f0:24:53:
c2:5c:a3:89:5c:99:ac:0d:4c:30:d6:5c:27:1a:2d:
f5:9e:c0:d0:00:54:87:40:2c:be:20:4a:8e:bd:33:
5f:bc:21:6f:fc:6a:71:ec:4d:3e:52:08:55:d9:ac:
7d:ed:ca:cf:c1:b7:9a:3b:7b:d9:c8:b1:65:e4:ac:
4f:54:a9:36:3f:26:8d:71:d8:5e:c0:56:00:ee:fd:
52:0b:5a:1b:c9:3e:15:39:43:12:d3:39:eb:60:69:
93:a5:56:78:81:40:c7:e9:82:f4:fd:b9:db:7a:e3:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:8A:82:C7:22:28:69:F9:EC:4F:E9:19:C9:F3:32:D0:01:EA:35
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Tn6KgsciKGn57E_pGcnzMtAB6jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:9a::/48
Signature Algorithm: sha256WithRSAEncryption
44:92:d0:fb:fc:4e:80:f8:80:f6:3d:47:bc:d9:6f:16:fd:71:
02:bd:d7:10:62:35:44:7f:6c:f1:e0:ad:3e:90:94:f1:c2:a2:
b7:15:6e:ff:9c:57:b4:6a:38:14:51:7a:ef:48:30:e5:10:14:
88:25:05:20:e6:36:bd:72:fb:9b:55:83:4c:22:ea:ea:21:f5:
49:66:d5:0c:09:bf:b0:8b:c3:90:4e:90:ec:57:94:a0:30:0a:
8b:92:b8:e6:81:72:9e:44:c6:ea:d8:ad:54:c3:1c:9c:2b:0d:
06:1f:47:c7:39:a4:b8:99:5d:db:b6:8e:84:15:82:9f:87:8e:
e1:db:91:3d:1c:db:b8:df:c0:2c:8b:cc:cf:38:8a:d7:8f:5f:
19:6e:96:fc:93:f9:d7:18:70:a7:59:39:d4:3d:6d:03:a3:9f:
41:e3:2c:c5:2f:7c:58:da:d7:11:40:13:2c:ce:fc:74:29:6c:
8b:2a:e0:c7:a4:91:53:2a:99:bc:bb:cf:4b:b3:02:f0:ca:8d:
11:18:80:bc:a7:7e:1d:39:8f:88:46:4a:b1:60:1d:d8:15:8a:
ab:66:59:4b:39:74:c8:8f:3d:eb:51:82:5d:19:eb:f8:e1:52:
02:0a:b5:c2:79:0c:45:43:3b:98:c4:98:04:54:e1:5e:b0:0e:
06:77:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org