Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/VDOGLuItPIDk9GHJtP1i1c6kRRQ.roa
File: VDOGLuItPIDk9GHJtP1i1c6kRRQ.roa (raw, json)
Hash identifier: KKEaoe+OAZevF/apI9n1MnkVhixwkGWGsWnf0X6ucyY=
Subject key identifier: 54:33:86:2E:E2:2D:3C:80:E4:F4:61:C9:B4:FD:62:D5:CE:A4:45:14
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6B60DE3EAE9DE55A6FDC20785134E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/VDOGLuItPIDk9GHJtP1i1c6kRRQ.roa
Signing time: Tue 06 Feb 2024 18:38:17 +0000
ROA not before: Tue 06 Feb 2024 18:38:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200516
IP address blocks: 2a0f:b241:132::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:b6:0d:e3:ea:e9:de:55:a6:fd:c2:07:85:13:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5433862ee22d3c80e4f461c9b4fd62d5cea44514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:23:83:08:87:c8:63:fd:59:7f:5b:42:51:
1e:a6:79:77:4e:71:a9:04:fc:26:ae:05:3e:18:0a:
c6:d0:02:16:4f:80:48:24:f6:ee:f5:4f:de:76:fc:
8e:21:f5:ba:5b:8e:c8:fd:ee:38:f7:59:b8:8d:81:
c4:af:62:ae:6f:94:da:84:a2:73:f5:86:94:08:d4:
a6:e5:98:90:db:b1:3b:db:9d:39:67:81:9a:4e:12:
c3:ff:08:f7:74:ef:61:76:d9:fe:6e:8e:35:f1:c8:
e3:5f:a9:31:cf:27:09:c0:82:72:4c:e2:4a:0e:54:
58:bc:10:96:c7:d7:94:5f:1a:8a:0f:cd:3d:1f:c6:
5a:57:e1:af:af:21:e0:44:ca:49:a3:3e:9e:70:b2:
f4:44:f4:d1:e9:fd:cf:58:49:c1:80:e5:90:70:75:
6a:f9:fb:c4:53:28:37:f9:6c:a3:9f:94:42:fc:a0:
ac:1f:57:78:19:95:3f:37:0c:09:e0:58:83:26:bf:
ad:da:8b:d5:2d:a6:96:96:4b:a0:aa:34:cd:07:1e:
70:f5:c5:53:33:14:d8:2d:61:67:71:9f:02:62:92:
36:4b:b9:b1:5b:8a:8e:8b:ac:6c:9b:1e:8d:22:3f:
36:1f:a0:7f:e3:86:6f:cf:8b:3e:d3:7f:e3:d5:90:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:86:2E:E2:2D:3C:80:E4:F4:61:C9:B4:FD:62:D5:CE:A4:45:14
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/VDOGLuItPIDk9GHJtP1i1c6kRRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:132::/48
Signature Algorithm: sha256WithRSAEncryption
5f:da:d5:38:2a:22:64:22:e1:54:64:33:f6:69:12:02:59:43:
d1:b8:48:aa:78:9b:2b:2c:d9:ad:4b:1b:a7:80:83:ab:f4:73:
45:16:2e:9e:a2:41:98:08:e4:66:29:a2:2e:3e:07:a2:1f:06:
e3:1b:a6:b7:bd:8d:6e:9a:5a:a4:ce:f5:d2:f4:6c:b0:ae:17:
0b:d7:77:f4:92:6a:cf:90:23:45:fb:01:7b:84:33:a6:de:ed:
c3:d4:5c:de:fc:94:92:ba:80:12:d3:ec:6e:8e:3c:03:3a:8b:
1e:2e:97:36:23:49:91:68:53:a8:9a:f3:4a:72:fe:6e:f9:b4:
48:00:5c:e0:2a:2a:9d:3d:43:5c:f2:75:ab:12:e4:58:d1:9e:
b2:54:af:d7:bd:29:64:bc:b1:cd:ee:5e:d6:1d:59:8c:82:6d:
44:96:49:06:79:6c:c2:a3:d2:27:ad:76:4b:bf:2b:42:43:71:
e7:07:b2:82:f7:4a:80:00:13:63:4d:6f:51:80:ef:9b:26:4c:
84:45:c6:d9:23:97:c7:79:09:a7:ee:58:8f:22:2d:39:bc:f2:
f4:15:c3:b9:28:c5:e0:25:18:fb:38:3c:6a:df:8b:9d:bf:98:
95:d6:00:a3:c4:c0:52:c2:c1:ac:cc:80:df:dc:8e:cc:b7:97:
44:2a:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org