Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Zgf6lUqiHFarf_r_9pTaXjXjOc4.roa
File: Zgf6lUqiHFarf_r_9pTaXjXjOc4.roa (raw, json)
Hash identifier: bQj6NJfvA37XzSoIrB5XpQHWqedSSisLeRGfz+w4E3s=
Subject key identifier: 66:07:FA:95:4A:A2:1C:56:AB:7F:FA:FF:F6:94:DA:5E:35:E3:39:CE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F07B4FECCFA1E8DFE8E2001E574205
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Zgf6lUqiHFarf_r_9pTaXjXjOc4.roa
Signing time: Wed 07 Feb 2024 05:00:37 +0000
ROA not before: Wed 07 Feb 2024 05:00:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199682
IP address blocks: 2a0f:b241:12f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:7b:4f:ec:cf:a1:e8:df:e8:e2:00:1e:57:42:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6607fa954aa21c56ab7ffafff694da5e35e339ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:9d:82:20:5b:36:06:66:94:20:b1:f0:83:
46:a8:f6:10:70:ca:d7:37:9d:60:1a:8e:66:98:72:
69:44:2e:48:c4:5f:df:68:23:18:1d:49:e4:2d:e8:
44:98:8a:cb:75:4a:0d:4c:ad:d0:93:09:24:aa:80:
85:cb:4f:b0:86:92:c8:8e:9b:f1:31:e1:f0:ce:2a:
09:78:83:6d:8e:42:47:c2:48:2e:61:22:89:7f:f5:
37:05:60:e9:5e:fb:b2:59:8a:3c:b6:bb:02:ca:97:
6a:cc:58:1a:f5:fb:19:99:d5:85:0f:dc:43:80:8f:
a0:9d:7e:04:1f:0f:df:36:69:40:54:f4:7b:19:38:
b7:35:9e:f4:36:8c:7f:f4:9f:03:88:e4:e1:31:4a:
61:e0:f5:b0:a6:6e:3c:6a:85:96:e4:72:b0:45:f7:
7f:65:b8:fa:d1:6a:27:28:a6:b9:b9:5e:10:19:ee:
7e:19:98:70:48:a7:b9:18:a1:31:82:93:a6:d2:e9:
b5:6a:42:e4:7c:3a:c2:4e:ee:c6:79:5a:e5:a5:40:
b4:4c:ae:3b:0a:7c:e0:54:8a:42:e5:e5:45:d6:cd:
05:91:50:bb:d9:40:b4:c9:d1:cb:76:5e:dc:89:9c:
87:69:22:b2:2c:6e:2d:6b:bb:41:30:09:0c:38:46:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:FA:95:4A:A2:1C:56:AB:7F:FA:FF:F6:94:DA:5E:35:E3:39:CE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Zgf6lUqiHFarf_r_9pTaXjXjOc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12f::/48
Signature Algorithm: sha256WithRSAEncryption
22:81:65:28:06:66:33:c7:ae:d6:ec:cf:08:04:e7:dc:7c:99:
28:39:d6:cc:a5:7b:c7:1e:0c:7e:31:33:81:4e:a6:fc:46:0f:
e6:5e:14:cc:76:d5:de:91:21:32:3f:4e:e6:b4:f9:d0:e6:73:
2b:cf:5e:f9:41:64:0c:5d:99:6c:2d:34:72:81:94:0d:80:8e:
9e:7b:f8:87:1d:dc:7d:67:99:b5:d2:0b:63:c6:b0:40:16:52:
b1:ac:e3:73:0f:dc:9e:4d:55:b8:ac:ff:34:22:07:4c:07:95:
24:16:31:53:52:6d:ad:96:4b:ed:cf:ed:38:3e:ae:8c:06:e8:
90:4a:a7:59:83:d1:61:82:8e:93:4d:3c:9a:43:81:78:4a:bd:
b0:cb:85:fc:ce:f2:7b:eb:e7:60:5b:c6:4c:e6:ae:99:ce:84:
a6:19:c4:cf:1f:c1:f4:e4:8a:47:29:43:1b:05:87:3c:50:f8:
09:e7:7f:f4:58:e8:62:dc:f5:a2:b9:02:e7:89:8f:6f:3b:96:
8f:ab:ed:c9:c3:5d:51:bd:3e:00:c1:28:42:a2:3b:6f:b5:5b:
df:06:f2:99:76:56:2b:53:f7:e1:54:43:31:4d:0d:27:ca:ca:
45:db:e4:2a:72:c1:60:51:57:02:0b:e8:be:8e:54:f4:c3:b1:
b8:64:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org