Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/WfpSobZ4y47U3NrxlM1h1I9mDI0.roa
File: WfpSobZ4y47U3NrxlM1h1I9mDI0.roa (raw, json)
Hash identifier: chno0Y27/5yx0hsjQ4sjXaZijFNVSpbOpmFsVoKzvcY=
Subject key identifier: 59:FA:52:A1:B6:78:CB:8E:D4:DC:DA:F1:94:CD:61:D4:8F:66:0C:8D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA80F3552FA83948D05A34B97D6E0E1
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/WfpSobZ4y47U3NrxlM1h1I9mDI0.roa
Signing time: Tue 06 Feb 2024 18:22:16 +0000
ROA not before: Tue 06 Feb 2024 18:22:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199840
IP address blocks: 2a0f:b241:8e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:0f:35:52:fa:83:94:8d:05:a3:4b:97:d6:e0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59fa52a1b678cb8ed4dcdaf194cd61d48f660c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:90:0a:bb:fe:85:e6:61:bf:0c:2f:6e:be:55:
65:99:35:3d:2d:8b:35:f4:b6:e4:a1:5c:22:e7:a1:
42:4a:69:21:6d:82:e7:c0:0e:5b:33:d4:52:3b:21:
d6:ac:67:d5:c2:21:e9:32:39:e7:12:b9:55:3f:1c:
bc:4e:6f:53:c3:ec:0c:12:b1:a2:9a:57:39:f7:46:
49:15:55:95:ad:84:1c:66:9f:2e:9a:23:77:54:1d:
85:92:54:42:91:13:1b:b2:b5:d9:e9:96:b4:18:a3:
03:a7:b9:75:45:c0:15:52:b6:8e:1d:8c:39:06:40:
3f:55:fa:38:4a:91:1f:79:f8:e7:dc:16:45:64:e5:
81:73:3d:47:21:f6:19:20:4a:d3:72:f6:67:8f:b4:
b2:24:3a:9b:69:84:22:06:bf:5f:7f:7e:c7:61:0a:
76:60:7e:b4:5e:42:66:cc:1c:94:dd:5c:4f:9c:37:
56:3e:12:6b:d0:ac:e1:98:09:67:8c:77:54:0d:67:
67:0a:5c:dd:31:1a:66:62:9a:3d:84:6c:35:ff:6a:
59:d2:04:61:4c:6a:55:af:2b:bf:41:9d:f9:fb:b6:
ba:68:1b:34:cc:2e:a4:fe:e3:23:ae:4d:65:61:5d:
8d:20:c9:64:45:d2:25:81:db:d9:10:5c:fa:a8:41:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FA:52:A1:B6:78:CB:8E:D4:DC:DA:F1:94:CD:61:D4:8F:66:0C:8D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/WfpSobZ4y47U3NrxlM1h1I9mDI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:8e::/48
Signature Algorithm: sha256WithRSAEncryption
8e:94:85:62:c6:68:ee:85:b4:6b:ee:6b:8e:5b:92:1c:02:98:
35:db:07:12:ef:9a:45:b3:ac:46:62:82:c8:58:e4:35:a3:3b:
d0:e6:ec:f0:60:08:c7:4f:8e:ef:61:16:e9:c8:14:0d:a4:63:
5f:8a:5f:8d:75:cb:5e:4c:37:2f:79:1e:a1:f3:7d:8a:3f:47:
f3:e3:3c:54:ea:c4:53:3c:47:e4:5b:ef:c2:88:ab:51:51:06:
21:a5:71:7e:c3:83:ff:8b:c7:13:cd:c1:34:08:a4:fc:a3:8b:
7c:f0:c9:a5:a4:ff:c8:05:6f:e9:e1:65:83:a7:59:c9:90:29:
2d:64:43:e9:e8:79:9e:69:b8:3c:b0:08:a8:ed:6f:be:01:b7:
00:c7:39:56:6b:f1:c7:39:a5:08:50:93:5f:c7:d6:09:d5:7e:
cc:ab:2d:1d:31:ba:1d:2f:ec:38:12:75:bd:4c:0a:4e:ac:ef:
af:82:79:16:8b:cb:e5:7f:67:78:79:c2:6d:ec:86:ab:ba:64:
c4:a1:96:d5:9b:24:a8:8e:82:5a:b9:76:4b:58:eb:45:c4:a6:
a9:2a:00:af:f9:7f:14:45:9d:77:9c:f6:51:a5:32:a0:7e:34:
59:53:43:4b:92:98:6f:5e:94:fa:96:18:46:5b:22:da:9d:11:
a7:b2:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org