Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XW-idVfIsw2szX9l8tC2NkIG1SE.roa
File: XW-idVfIsw2szX9l8tC2NkIG1SE.roa (raw, json)
Hash identifier: f2TLaOtp/DrRtHL8O8H+Ts9RhpJ7q8jWmuOSuqKp1P0=
Subject key identifier: 5D:6F:A2:75:57:C8:B3:0D:AC:CD:7F:65:F2:D0:B6:36:42:06:D5:21
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB9747E0862302AAD86C2F82973FFCF
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XW-idVfIsw2szX9l8tC2NkIG1SE.roa
Signing time: Tue 06 Feb 2024 18:41:16 +0000
ROA not before: Tue 06 Feb 2024 18:41:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62403
IP address blocks: 2a0f:b241:15f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b9:74:7e:08:62:30:2a:ad:86:c2:f8:29:73:ff:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:41:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d6fa27557c8b30daccd7f65f2d0b6364206d521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:16:a1:40:1f:cc:d3:e6:20:f0:a5:7a:48:
89:2e:bf:f7:ec:9a:03:26:c0:3f:5d:1a:61:58:de:
0b:4a:69:ad:e6:80:69:96:e2:46:19:b9:a9:d5:c3:
51:f7:f7:8c:9b:70:2a:03:c4:d3:51:41:aa:0a:63:
c8:10:ee:1e:57:cb:c4:fd:48:37:62:66:86:50:e1:
09:1b:85:1b:64:5f:a5:e4:85:9c:a4:80:46:16:1a:
e2:df:80:c1:a1:18:01:22:8b:83:5f:43:87:7c:44:
80:78:78:ab:6b:a4:da:4d:2a:d4:a2:e9:08:b9:26:
76:8e:2b:09:03:25:b9:62:53:23:b7:2e:43:3a:33:
31:5b:03:c4:18:d9:67:23:48:1c:9a:be:78:1d:ae:
1b:c0:e2:ad:ab:66:f0:65:1b:54:79:53:1e:50:71:
47:c4:39:45:3e:6c:5e:28:b1:47:e3:c8:90:3d:15:
fd:c0:1e:36:1d:6d:ab:93:27:d1:a3:2f:1b:00:b3:
b5:05:ac:bb:8b:11:6e:74:9c:da:ae:b9:9b:55:7c:
64:30:1a:57:ba:3d:f8:5d:c0:22:76:ae:89:2b:6a:
8e:a9:49:55:6c:cd:56:5f:30:f2:85:4e:90:19:0c:
80:33:b2:d1:c3:c7:a0:ba:9f:ea:83:03:87:85:89:
9f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6F:A2:75:57:C8:B3:0D:AC:CD:7F:65:F2:D0:B6:36:42:06:D5:21
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XW-idVfIsw2szX9l8tC2NkIG1SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:15f::/48
Signature Algorithm: sha256WithRSAEncryption
72:e2:d6:5e:29:0d:26:d7:c5:1d:62:6c:2b:17:c1:ae:b7:af:
64:ec:8d:6a:18:0b:65:ec:a1:b8:e6:92:1a:42:09:e4:ad:fe:
8d:ce:30:31:84:98:24:ca:15:e7:cc:7e:a2:4e:0c:08:9c:f5:
93:5f:07:a3:c1:c7:8e:8e:5d:51:e2:aa:44:59:33:27:de:79:
f8:75:20:88:28:7a:ea:a4:37:f2:8a:74:29:12:fb:8b:da:ad:
bd:aa:f6:fb:a8:d1:a6:b7:4d:d5:8c:65:f6:17:ba:4e:d3:f9:
ec:ce:29:5a:bc:4f:0f:16:23:56:56:c9:16:9b:b3:33:9b:a7:
ea:db:1d:1c:87:8f:22:71:0b:dd:e3:a1:0f:cc:dd:52:93:62:
33:91:90:96:23:19:7b:7c:6e:a3:7f:cb:4f:ac:7b:34:6e:94:
9d:b2:0f:8f:24:ee:50:56:c4:23:bc:fe:3d:57:dd:7e:09:17:
72:a4:0c:31:ef:92:b4:80:00:8b:f6:78:09:69:94:6f:cc:d9:
05:84:45:b4:90:12:ea:db:c6:e8:cb:58:6a:b0:10:2f:cc:5c:
56:7e:88:4a:d1:42:c7:2e:28:e7:bf:14:36:31:32:eb:12:dc:
19:18:42:51:1d:3c:b9:47:08:cc:6b:44:10:fe:f4:a3:fd:75:
d8:f4:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org