Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c6X6c_bDFZX16qbo6_Z7efXVKaU.roa
File: c6X6c_bDFZX16qbo6_Z7efXVKaU.roa (raw, json)
Hash identifier: DGxKTN/gxJmvXq+2h8NT31gdGz6HfMDYTDszHbYgqIQ=
Subject key identifier: 73:A5:FA:73:F6:C3:15:95:F5:EA:A6:E8:EB:F6:7B:79:F5:D5:29:A5
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAE7C590393423FADEE87638970573A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c6X6c_bDFZX16qbo6_Z7efXVKaU.roa
Signing time: Tue 06 Feb 2024 18:29:17 +0000
ROA not before: Tue 06 Feb 2024 18:29:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57308
IP address blocks: 2a0f:b241:11f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ae:7c:59:03:93:42:3f:ad:ee:87:63:89:70:57:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:29:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73a5fa73f6c31595f5eaa6e8ebf67b79f5d529a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:2b:7e:3f:bf:17:d2:98:59:13:44:19:32:
21:42:12:8f:7a:28:65:90:f9:45:ee:8b:04:67:9a:
77:ff:8a:d2:5e:53:d8:2e:4d:3c:18:1c:9b:65:f5:
eb:53:e3:ab:1d:29:9c:c9:c8:bd:ff:fe:c4:e3:97:
74:25:fc:a0:f5:44:39:e8:d4:10:bc:d3:32:70:29:
c3:95:aa:e1:82:54:7d:a8:62:bc:d7:96:a0:ac:8c:
e8:02:7e:3d:be:69:60:2f:84:db:7f:a2:7f:2e:d5:
5a:ad:72:ec:16:62:d0:a0:06:67:3c:ac:cf:4c:4e:
38:52:ba:41:9c:d9:f1:54:c3:3b:bb:ac:6a:75:8f:
00:78:4a:a8:05:ed:84:d1:d0:21:21:83:51:95:11:
89:72:4e:9c:88:8e:92:40:e0:59:ac:2c:91:c9:24:
2c:12:e7:7c:1d:ed:4b:e8:14:7e:3d:88:55:3b:69:
79:bf:57:0c:3b:f9:30:5f:51:1d:c0:51:2e:5f:f6:
ae:0f:05:dc:20:f7:3d:bd:45:0f:47:80:ef:77:9e:
49:e1:6a:39:89:07:fd:1c:79:ba:7f:9c:1e:ca:22:
48:a9:4f:be:f7:99:70:78:3d:1c:57:35:d3:31:e6:
80:f7:d5:a3:ec:60:18:50:f8:52:76:a1:67:84:b1:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A5:FA:73:F6:C3:15:95:F5:EA:A6:E8:EB:F6:7B:79:F5:D5:29:A5
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c6X6c_bDFZX16qbo6_Z7efXVKaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:11f::/48
Signature Algorithm: sha256WithRSAEncryption
5c:f8:a9:18:74:8e:37:75:07:5d:10:8a:3f:cb:26:df:93:e1:
96:31:53:3a:ac:9d:53:6d:2e:cb:e7:de:c9:37:2c:2f:3e:16:
a1:17:2d:23:bd:9f:b1:89:66:67:81:91:89:17:2f:58:b3:3c:
7c:89:ea:f3:bd:a5:8e:b4:a4:05:07:72:51:ea:90:aa:81:d0:
ff:90:60:f3:7e:8f:90:39:f0:2e:1c:84:db:ac:8d:7d:38:ed:
9a:3b:8b:1a:b2:25:b1:79:bc:0a:7c:f1:bb:a5:6c:53:72:88:
68:ee:e5:89:ef:b1:c3:7f:57:84:47:09:2c:a9:d2:31:ff:2a:
77:93:f2:58:96:6a:3a:dd:8a:4c:b5:ca:9e:9e:7a:29:4f:3e:
5d:0d:41:37:2a:f8:7e:12:12:ae:c2:bb:a5:64:4e:d9:90:5b:
23:c1:c3:4d:7d:76:d9:f0:3d:52:53:25:5e:a3:ea:63:3f:dd:
85:e7:df:35:fd:90:86:03:1d:19:92:83:10:7d:b1:a6:44:a2:
d3:bc:79:df:83:57:11:58:77:05:c2:86:15:d1:c8:9e:e1:90:
6f:4e:be:bd:de:0a:23:9a:72:d9:c3:bf:b0:a1:d1:8c:3e:88:
98:fd:b1:a7:66:0f:34:17:70:bb:77:63:8a:72:c4:01:85:bf:
a1:28:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org