Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_T7wJYW4vGThCDMltCA8o_aTSPA.roa
File: _T7wJYW4vGThCDMltCA8o_aTSPA.roa (raw, json)
Hash identifier: 18eQ/6UMPAj5VrrAm8nQcKF+9RJb+DPWy6Y4SeUTIP0=
Subject key identifier: FD:3E:F0:25:85:B8:BC:64:E1:08:33:25:B4:20:3C:A3:F6:93:48:F0
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F06F69DAAFF85FE2BDA2F1C135A21B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_T7wJYW4vGThCDMltCA8o_aTSPA.roa
Signing time: Wed 07 Feb 2024 05:00:34 +0000
ROA not before: Wed 07 Feb 2024 05:00:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198025
IP address blocks: 2a0f:b241:77::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:6f:69:da:af:f8:5f:e2:bd:a2:f1:c1:35:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd3ef02585b8bc64e1083325b4203ca3f69348f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:77:84:d0:a4:52:82:0c:65:05:05:b2:48:
c5:2e:6c:0a:28:ad:fe:e2:4e:49:f2:2b:23:5f:a1:
5d:a4:03:10:33:3e:98:d7:0f:49:c2:ae:69:b1:fb:
79:28:f6:49:b3:f8:da:79:16:58:fc:a1:55:82:bb:
d6:03:2e:7c:09:bf:4e:73:ff:53:22:52:8a:92:f4:
6f:97:68:5d:6e:5a:2a:59:47:7a:e2:8a:e2:49:27:
0c:27:20:9d:3d:58:92:1f:b6:a0:a9:93:19:8c:31:
f9:03:bf:ff:59:09:bd:ba:68:36:d1:e8:2a:77:e2:
95:c6:ca:c0:38:21:c9:85:d1:b0:48:66:c1:5d:a2:
a7:a9:72:d1:e3:fc:a8:eb:05:73:05:43:02:7a:f3:
42:12:e7:92:e9:c2:6d:ab:2b:9e:ed:f8:45:18:cd:
9c:e0:cf:cd:6d:60:69:bb:eb:3c:fd:7b:f5:83:9f:
0b:2e:fa:88:ec:52:d2:1c:6c:ab:00:22:84:d1:ea:
e2:4a:c8:17:47:78:2b:30:70:e6:b5:98:f7:21:88:
02:97:13:a5:fe:17:f5:68:31:13:b4:1a:db:81:a5:
b5:0c:f4:a2:e8:1c:18:ca:a8:7f:83:0d:f5:6b:88:
d5:ed:e9:9a:56:f5:b1:60:48:56:8d:f0:6a:c0:42:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3E:F0:25:85:B8:BC:64:E1:08:33:25:B4:20:3C:A3:F6:93:48:F0
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_T7wJYW4vGThCDMltCA8o_aTSPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:77::/48
Signature Algorithm: sha256WithRSAEncryption
3f:5e:aa:1f:d2:f6:8e:f0:6c:b3:4b:27:ee:d6:09:59:5a:b5:
b8:a8:ad:0e:eb:cd:71:14:1f:41:dd:c5:e5:13:90:e0:c2:3f:
1c:ac:cf:0c:4a:fb:b1:aa:ea:26:6c:c8:53:ca:a1:ce:4b:56:
d9:14:a6:0f:79:27:a8:de:85:d8:ce:d5:b9:b9:5e:c4:c8:f2:
9f:f6:37:8a:ba:8c:7c:c5:ab:4a:5d:11:e8:5b:c3:32:02:1f:
d1:9e:bf:18:fd:a8:5b:79:10:c3:73:42:56:95:aa:4a:ca:80:
6f:0b:f8:de:15:ca:4e:86:47:64:d4:e7:b9:2d:09:1d:5a:cf:
b0:73:44:3f:28:92:71:61:d3:d6:a9:5f:71:83:62:56:53:c6:
d5:72:ec:60:4f:76:fc:ed:83:90:a8:6a:f9:68:5f:66:54:f6:
fd:00:00:86:20:91:05:65:6d:c2:0f:21:38:3b:82:6d:01:d1:
51:76:55:0c:10:a8:4d:53:25:ab:c8:f9:5e:5d:32:e0:19:df:
3d:10:03:a8:ae:74:bb:9e:f8:48:c3:9d:2c:29:99:5c:42:db:
bb:ef:15:33:d5:fd:03:8b:24:43:50:60:63:04:89:6d:ae:d3:
90:02:2a:7e:70:3f:bb:8b:2f:dc:c6:71:30:32:12:e4:c4:a3:
0c:8f:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org