Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c_gF8vnML5qaNi80OGF0hvCU8oc.roa
File: c_gF8vnML5qaNi80OGF0hvCU8oc.roa (raw, json)
Hash identifier: nBoWtGT+cwdGkfJeG2VySI/gS0BL6/mntZO0PgyCNjE=
Subject key identifier: 73:F8:05:F2:F9:CC:2F:9A:9A:36:2F:34:38:61:74:86:F0:94:F2:87
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F9495FE6C9D3265BD65E23932118380
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c_gF8vnML5qaNi80OGF0hvCU8oc.roa
Signing time: Tue 06 Feb 2024 18:01:00 +0000
ROA not before: Tue 06 Feb 2024 18:01:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205398
IP address blocks: 2a0f:b241:39::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:94:95:fe:6c:9d:32:65:bd:65:e2:39:32:11:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:01:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73f805f2f9cc2f9a9a362f3438617486f094f287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bc:d8:93:69:09:63:fc:8c:71:e9:dd:94:0b:
03:52:83:7b:f4:01:d1:2a:8b:cb:a2:22:b5:f7:b8:
7b:68:03:85:98:62:c3:98:4b:36:60:2e:2f:0b:9c:
e3:dc:83:e3:04:90:44:c4:f4:b0:1c:07:ea:aa:a3:
da:1f:c1:c3:ec:56:9e:d3:6a:25:3d:d2:06:e0:21:
b2:ee:c2:80:75:b2:91:99:ea:bc:c3:2d:b1:ff:f0:
bd:f2:08:47:1c:88:e1:fc:09:61:4d:16:9e:1d:a0:
93:77:60:b2:c8:22:ee:9e:2f:57:d2:07:ce:11:16:
9d:02:1f:d1:d3:75:72:8b:11:2c:d4:41:ed:50:30:
26:d6:04:04:ff:6e:84:9b:91:2a:25:10:21:42:4b:
94:09:45:ed:bc:1a:b0:3c:3d:5d:a2:9c:ac:08:ea:
37:57:30:ed:17:d0:e2:23:0e:64:6a:93:37:b3:29:
b2:75:49:89:ea:06:61:70:56:c6:95:64:71:0a:94:
ae:20:66:a0:11:57:70:d3:d3:b6:50:7b:34:54:67:
5d:93:74:69:8f:f7:68:26:64:a9:3e:78:26:68:d6:
5e:43:e8:8c:58:53:93:d3:14:05:a8:f7:4b:35:56:
cc:41:b0:94:e5:d6:54:fa:38:fa:8d:32:67:f2:27:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F8:05:F2:F9:CC:2F:9A:9A:36:2F:34:38:61:74:86:F0:94:F2:87
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c_gF8vnML5qaNi80OGF0hvCU8oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:39::/48
Signature Algorithm: sha256WithRSAEncryption
69:67:14:88:89:82:33:6f:18:3c:fc:8f:27:b3:8a:f3:80:5a:
2b:29:ff:47:32:a6:46:e9:74:af:79:c3:50:81:18:ec:c2:2a:
89:33:e7:7c:2d:af:5a:52:bb:ec:ca:d5:04:f3:ef:96:c8:a2:
17:06:37:20:19:16:76:5b:d3:a5:49:4d:f5:b5:84:36:80:59:
65:7b:ec:86:22:5e:cd:c7:4c:5a:2d:ee:78:70:45:ba:0c:5d:
f1:19:c7:5c:fe:f6:44:f6:77:1a:61:34:ce:bd:a1:4a:74:93:
fd:6d:10:bf:12:95:ed:dc:f2:03:b0:83:8e:12:24:a5:3f:62:
75:eb:7d:43:74:6c:e5:4b:5d:35:89:46:98:6d:ff:bb:df:5e:
1c:78:65:2e:67:c6:40:29:f3:c6:9b:32:d3:01:98:17:16:2a:
4a:f1:6d:48:d8:82:b7:02:51:35:f2:a9:75:d3:b0:2d:99:09:
24:d6:df:ee:7f:67:c3:8d:c7:ed:c0:d6:95:88:08:56:5c:bc:
dc:e7:a7:4e:42:4e:79:26:4c:87:0b:4a:57:05:86:51:09:d2:
3c:54:87:e6:fa:53:13:36:90:80:3e:62:dd:9b:75:7e:77:9e:
40:fa:87:21:d1:90:2c:b7:08:36:64:01:68:94:d8:f3:78:65:
cd:37:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org