Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Z0DUpw_mJ8c_oBrCf_OCcUsRRSk.roa
File: Z0DUpw_mJ8c_oBrCf_OCcUsRRSk.roa (raw, json)
Hash identifier: opyEL9af7dPtUmcVbDvvmnGkYxXwav5GfX5XCt1nK98=
Subject key identifier: 67:40:D4:A7:0F:E6:27:C7:3F:A0:1A:C2:7F:F3:82:71:4B:11:45:29
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7EED457517C853D0FF2F7E02C1F57BAB
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Z0DUpw_mJ8c_oBrCf_OCcUsRRSk.roa
Signing time: Tue 06 Feb 2024 14:58:15 +0000
ROA not before: Tue 06 Feb 2024 14:58:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215674
IP address blocks: 2a0f:b241:12::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:ed:45:75:17:c8:53:d0:ff:2f:7e:02:c1:f5:7b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 14:58:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6740d4a70fe627c73fa01ac27ff382714b114529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:b4:1a:f3:50:54:c5:84:52:2e:c6:a7:d1:
57:8e:57:12:eb:bc:17:3c:6a:ed:a6:f5:62:22:16:
6b:9d:f4:2e:1b:86:94:94:74:ad:70:ce:b0:ef:15:
d7:9d:82:30:ff:be:e0:f9:be:85:c2:2d:5e:de:28:
66:e6:04:e2:e8:16:1c:a3:bd:1d:53:af:56:f9:e4:
13:42:9f:6d:12:3d:2f:7f:df:b4:0a:aa:a9:59:31:
4f:3d:61:21:31:7f:ad:dd:f7:83:fb:24:41:22:2e:
a7:1e:a7:df:f7:41:08:23:5c:fc:d8:47:e1:82:d6:
a1:7d:2a:ac:99:8a:a8:98:98:3c:80:dd:e3:83:d9:
f4:e3:4b:b0:a9:58:d3:b1:98:31:bc:f8:79:9f:d0:
32:e1:96:6f:91:61:1f:c0:46:f0:49:48:a5:98:b2:
eb:62:3c:ad:1b:ee:ad:f1:0f:d0:ba:b8:c7:85:63:
e6:df:fa:48:0c:4b:1a:12:d7:0b:0d:2f:3a:ee:f0:
b4:f7:23:49:7b:c8:a7:5a:92:53:b5:61:be:3d:f0:
69:1c:41:7d:7f:aa:56:62:be:ae:5c:7b:cb:e1:cb:
10:63:ea:9c:a9:aa:f7:1a:ab:b7:6d:8e:b3:63:02:
fb:84:0d:66:75:f5:de:37:5d:06:70:36:a1:a1:67:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:40:D4:A7:0F:E6:27:C7:3F:A0:1A:C2:7F:F3:82:71:4B:11:45:29
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Z0DUpw_mJ8c_oBrCf_OCcUsRRSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12::/48
Signature Algorithm: sha256WithRSAEncryption
3e:8c:5c:bb:07:19:f1:c7:47:ff:47:f1:45:a9:fc:5c:1e:09:
80:db:65:80:2f:38:7f:83:21:69:c6:72:71:ee:70:33:85:60:
58:4a:8e:c1:d3:af:0e:90:25:09:10:3f:de:27:21:9e:80:d1:
f7:72:16:a0:5e:e7:37:30:71:06:d4:21:c9:bc:d5:a7:85:66:
12:8c:a8:f4:d9:4c:b4:e8:e0:42:b2:b2:a4:e8:8d:54:01:45:
d0:71:57:a1:72:2c:bc:d8:63:a5:b5:c1:a5:49:5c:37:eb:cf:
24:6d:a2:b9:4e:1d:f0:15:7e:9e:7e:bf:4a:97:21:d9:06:77:
d5:fb:f3:8f:9f:af:6d:a7:2e:63:eb:12:85:5a:7f:2d:b3:b3:
0e:8d:b6:ab:5a:f9:d3:9b:8c:ad:a6:34:69:27:ad:20:56:d2:
a0:38:07:b4:b8:10:7e:a2:f6:e9:b8:78:03:8e:52:e1:76:e2:
89:6d:47:36:a5:84:38:b0:a2:93:3f:5d:d3:f8:03:bb:c2:8e:
b4:a1:25:78:2e:37:ea:87:63:e7:43:7b:47:19:ee:66:b5:7f:
93:06:bb:1e:07:7c:2b:90:7b:00:ee:bc:7e:54:1b:e2:74:09:
a3:f1:2e:bf:06:52:a0:ae:e1:9f:ca:b8:42:da:17:5b:7b:72:
77:c4:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org