Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/VI63-X3JdWTsH-GgNJZgASgzHW8.roa
File: VI63-X3JdWTsH-GgNJZgASgzHW8.roa (raw, json)
Hash identifier: SAQCiKjQ3xMF6km2+N+r/2L2/37V3Rcmvq+qZY/mU3I=
Subject key identifier: 54:8E:B7:F9:7D:C9:75:64:EC:1F:E1:A0:34:96:60:01:28:33:1D:6F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0707140CE5D392FFFFFFE1B4AE4EA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/VI63-X3JdWTsH-GgNJZgASgzHW8.roa
Signing time: Wed 07 Feb 2024 05:00:34 +0000
ROA not before: Wed 07 Feb 2024 05:00:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198075
IP address blocks: 2a0f:b241:33::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:70:71:40:ce:5d:39:2f:ff:ff:fe:1b:4a:e4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=548eb7f97dc97564ec1fe1a03496600128331d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:a8:0d:67:0f:3c:6d:6b:71:92:ea:a3:a2:
78:2f:fd:2d:02:78:67:7e:c3:b9:36:fc:bd:8e:d1:
1f:40:95:c4:a0:5a:de:0f:56:da:29:44:d5:13:ef:
5d:c9:29:a4:a0:ef:bb:23:af:f0:46:41:86:65:f5:
9d:dc:01:93:65:09:0e:f9:e3:6a:1d:f0:51:f3:3a:
1c:9c:52:93:c0:20:e1:39:b9:73:18:0b:85:62:3d:
33:58:72:1d:89:bc:2b:e4:86:4b:32:6d:5a:8c:71:
38:77:9a:d5:4c:a2:f9:9a:ba:75:2b:1d:4a:bf:f0:
04:fa:2b:61:42:45:b0:90:3a:37:f0:48:23:85:fd:
3c:5e:ce:de:37:1a:2d:83:3d:c3:01:59:52:6c:59:
a6:2e:69:48:84:a7:11:79:53:1b:2a:57:42:83:bc:
2e:34:73:5e:8d:7e:69:96:3d:a1:47:64:7e:f8:f8:
8d:4b:09:41:32:60:27:06:a7:d4:cf:db:4f:61:c9:
e8:ac:73:0e:bb:4d:7b:9b:a2:6e:95:ed:16:4a:1e:
0e:21:d7:0f:38:64:a0:08:77:12:b3:68:cf:ac:aa:
50:29:05:85:ff:7a:37:2f:6f:62:db:e7:3c:a4:5d:
39:e5:f0:34:9a:70:ba:4c:ce:84:ba:56:60:0e:ff:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8E:B7:F9:7D:C9:75:64:EC:1F:E1:A0:34:96:60:01:28:33:1D:6F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/VI63-X3JdWTsH-GgNJZgASgzHW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:33::/48
Signature Algorithm: sha256WithRSAEncryption
18:d3:cb:eb:08:4a:96:0d:b0:f9:c5:78:16:6a:1d:94:6e:ce:
a2:0f:04:35:92:7a:1a:f8:9d:1f:a9:e8:9c:28:75:f6:0a:7b:
b2:da:5e:66:cc:81:b0:af:98:c7:ff:d5:12:be:4f:41:8b:be:
87:6d:84:c1:26:39:b8:3e:a5:97:a2:9d:2a:b4:4d:f8:73:3a:
ca:1d:05:0b:2b:db:45:1d:8e:24:67:76:58:9e:56:b9:0a:ad:
00:bd:01:51:c5:f6:e2:67:b5:1e:57:1c:51:be:2c:f4:86:b8:
18:33:31:8a:aa:a4:00:b7:c9:69:b1:9f:6b:2d:ca:9f:d1:f8:
c9:00:65:e4:c1:53:59:e6:09:69:6e:9e:67:b5:8f:26:24:fa:
93:07:4e:ac:83:50:be:be:87:2d:fe:ab:df:0d:94:e1:d5:0f:
30:90:fc:57:37:96:ab:d0:96:a1:18:21:6a:43:e0:a9:d3:ed:
e8:46:7f:08:27:c6:c2:9a:3d:1f:ce:66:c8:e9:02:0d:87:17:
79:e2:a4:76:94:28:47:5e:64:f2:ae:23:01:5f:cc:3f:18:2b:
4c:66:14:f4:93:1a:fb:39:ae:53:e4:1b:f5:9a:58:19:22:4f:
9b:2e:7f:54:9a:84:d1:19:ac:2d:b6:59:6f:17:79:28:09:d8:
1b:fa:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org