Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/a4rE_eH2Ej5popm9cBD_CcPIPd0.roa
File: a4rE_eH2Ej5popm9cBD_CcPIPd0.roa (raw, json)
Hash identifier: ew/MzxNcMP9GFjoCIA31XJjtFppiB01u1DTR45aKnPE=
Subject key identifier: 6B:8A:C4:FD:E1:F6:12:3E:69:A2:99:BD:70:10:FF:09:C3:C8:3D:DD
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA8FDD1311AD1BC3B8A018304131E6B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/a4rE_eH2Ej5popm9cBD_CcPIPd0.roa
Signing time: Tue 06 Feb 2024 18:23:17 +0000
ROA not before: Tue 06 Feb 2024 18:23:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200307
IP address blocks: 2a0f:b241:b6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:fd:d1:31:1a:d1:bc:3b:8a:01:83:04:13:1e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:23:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b8ac4fde1f6123e69a299bd7010ff09c3c83ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:31:3c:82:26:18:02:e8:9d:99:25:0b:35:
1a:66:34:81:c6:60:b7:ad:ac:8d:a6:f0:b8:5f:b7:
cb:26:da:d0:be:17:c6:0c:a0:7e:7e:9f:61:e0:26:
63:13:e6:10:20:d6:96:bf:bb:8e:83:86:b1:6e:91:
bc:a3:31:00:64:75:ba:1e:c6:89:d4:02:58:8f:97:
45:d6:98:7a:ac:3a:b2:12:f2:e6:ec:3b:65:7b:fc:
8a:7e:c3:88:9a:5f:3e:a6:2d:d1:19:fa:65:1e:c0:
45:17:6c:6c:6e:20:58:35:5e:e8:ed:78:52:10:6c:
bd:d1:02:2f:24:99:0e:9f:7d:fd:0b:06:a7:69:09:
6a:a2:0c:64:51:e3:b2:d2:68:0d:e2:0f:39:cc:5e:
40:88:fa:6d:00:5c:51:be:ad:b1:2f:ed:42:ca:68:
0d:92:88:47:48:66:8d:bc:a8:3e:d3:f3:d3:98:42:
07:cc:f0:22:81:c5:59:55:21:e7:2b:f9:af:79:54:
99:d7:40:bc:5c:d5:11:bd:42:03:73:32:ba:c5:75:
ba:e1:a7:61:c3:fa:c8:3d:6a:87:19:d6:55:be:e0:
1a:47:43:ec:7e:c4:55:43:26:21:3c:2e:3c:19:53:
2e:21:bc:35:9c:8a:06:aa:33:1f:c0:ce:ef:9a:44:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8A:C4:FD:E1:F6:12:3E:69:A2:99:BD:70:10:FF:09:C3:C8:3D:DD
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/a4rE_eH2Ej5popm9cBD_CcPIPd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:b6::/48
Signature Algorithm: sha256WithRSAEncryption
50:12:3a:13:7c:85:1f:67:5b:02:46:9f:e7:a1:aa:b0:0d:ec:
a2:f0:ac:06:b8:fe:ce:c1:a3:bf:1d:24:7b:25:90:68:6f:b4:
89:54:9e:18:8f:6b:a0:c5:5f:3d:c2:7a:64:de:e7:f3:2f:04:
0c:a4:1b:69:59:70:bd:35:d2:0f:6a:4c:a3:81:a8:c5:81:f3:
97:7d:7b:04:83:0a:e5:2d:93:29:f3:b0:6b:91:3e:1a:67:18:
3d:66:fb:8e:31:ea:e9:d9:f4:c7:45:dd:c1:66:3c:67:7c:25:
e4:59:7f:73:51:23:e1:21:fa:cc:1a:98:89:01:5c:76:4c:09:
ef:5d:38:8e:3f:bd:4f:e5:38:6c:e5:9b:55:ee:e2:ec:07:a0:
92:fa:94:a0:56:5b:6c:6f:8f:a3:a8:b3:2c:fb:cd:c8:29:e7:
84:8d:de:fc:1a:e7:97:91:fa:f1:a1:13:f0:6d:7f:1a:a2:4e:
4d:84:a4:f0:c1:59:ed:a7:5d:c3:b5:9b:4e:49:1e:15:88:af:
9e:c4:7a:7e:cf:dd:8a:4e:7c:c1:68:64:97:11:cd:8d:fc:a0:
29:1b:88:5e:1e:f7:be:40:3b:3f:fe:9f:6b:57:6c:e5:7a:91:
d2:f7:42:f5:f8:34:de:06:e4:75:5e:27:8d:84:ae:4f:c8:2b:
bc:9c:ad:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org