Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_jFngooDa9aBcdaSbiAEGxroYcU.roa
File: _jFngooDa9aBcdaSbiAEGxroYcU.roa (raw, json)
Hash identifier: L2/dVPMtmj1hH/NEWksY49hxpbm1MEWbX88iJp4+7NE=
Subject key identifier: FE:31:67:82:8A:03:6B:D6:81:71:D6:92:6E:20:04:1B:1A:E8:61:C5
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F091F1DCF50C67840D83778EC06822
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_jFngooDa9aBcdaSbiAEGxroYcU.roa
Signing time: Wed 07 Feb 2024 05:00:43 +0000
ROA not before: Wed 07 Feb 2024 05:00:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205102
IP address blocks: 2a0f:b241:13b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:91:f1:dc:f5:0c:67:84:0d:83:77:8e:c0:68:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe3167828a036bd68171d6926e20041b1ae861c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ca:fd:1c:1d:90:28:27:cd:78:45:cc:a8:2d:
e8:6c:5a:61:1e:6f:44:93:9b:7c:49:56:02:da:e5:
f6:a2:63:74:83:e8:06:bb:3b:6e:28:03:44:a6:25:
18:76:97:e9:f3:0f:06:90:01:f7:d2:29:0d:92:c5:
93:f1:34:55:c0:a6:7b:e0:88:11:3e:79:2b:6a:b9:
6b:b4:59:7a:3c:ef:cd:46:6b:5d:9d:b6:27:3b:f8:
19:bc:6a:22:a7:37:9e:3c:a7:c6:e4:5a:68:fc:cb:
18:3c:e6:83:fd:a2:83:b4:cf:b7:b6:5a:1a:65:e8:
6f:30:bb:35:90:87:ae:57:66:0c:84:3a:6f:65:7a:
ce:f8:a9:8f:55:05:df:de:35:62:b4:24:5e:3a:33:
32:dd:39:e2:e2:e2:fc:cc:8d:0e:77:8d:55:99:d8:
5c:d6:d2:26:81:ca:a1:8e:8f:e5:3b:5c:6a:58:ca:
85:05:20:ea:6e:ab:22:a4:62:36:14:bb:e4:51:5e:
e2:c2:55:15:3d:e7:a4:32:4c:8b:26:52:5c:31:37:
b8:5d:51:2b:1d:79:8b:6f:dd:8d:8e:f4:a2:a3:19:
55:a9:a4:40:37:1c:98:5e:7a:44:50:ec:8d:60:38:
06:ef:9e:41:96:b4:16:ec:56:5a:ef:bd:00:fa:6a:
ab:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:31:67:82:8A:03:6B:D6:81:71:D6:92:6E:20:04:1B:1A:E8:61:C5
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_jFngooDa9aBcdaSbiAEGxroYcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:13b::/48
Signature Algorithm: sha256WithRSAEncryption
66:a7:f3:ad:dc:4a:67:62:30:81:38:ca:66:28:b1:ef:76:02:
25:57:1c:c7:0e:05:6f:16:e3:d3:ef:67:ab:70:01:87:7e:ef:
93:81:03:04:c5:f0:c0:43:bc:b2:c4:d6:54:1d:43:6d:36:2c:
d2:25:5e:f8:1d:af:ef:30:d5:19:3a:b5:33:1b:f5:81:a3:19:
2c:8a:63:31:58:5d:a9:c0:60:02:7a:c6:12:2f:66:40:0a:2d:
a0:ac:58:b6:77:17:c7:e4:6d:1e:37:f2:c1:ae:7f:da:b1:4e:
0d:c8:4d:94:f6:bd:3d:9a:3d:0a:78:3e:8d:8a:41:17:94:d5:
9a:f8:88:86:15:99:94:d2:0f:58:2b:5d:24:03:57:5b:84:cf:
84:74:43:dc:ec:1a:3d:dd:6a:19:27:71:df:bc:52:bc:62:fa:
4d:6f:06:3f:5d:19:ae:d8:f5:d0:ae:a2:52:96:bc:55:ae:c0:
ca:02:f4:c0:98:95:a6:17:75:ab:aa:60:42:61:60:86:51:8b:
f9:0c:dc:18:40:ec:fd:92:b3:05:fe:a9:eb:0f:9a:93:a5:2e:
e6:98:4d:21:44:b1:ef:b7:58:56:88:48:85:60:a6:bd:a2:1a:
59:ea:30:cb:e8:a5:7e:1d:bc:f0:03:3e:df:7e:56:89:30:93:
fa:9b:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org