Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dRQ7Pe_9yr4ZAT-OweJaj7mTNpg.roa
File: dRQ7Pe_9yr4ZAT-OweJaj7mTNpg.roa (raw, json)
Hash identifier: 8rpzq/q9bJdOoWiZiNTgh5g77oDdw+Iw7tj4FBABjxU=
Subject key identifier: 75:14:3B:3D:EF:FD:CA:BE:19:01:3F:8E:C1:E2:5A:8F:B9:93:36:98
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8D88B1EA3D3B1DC87C071E88FC9AC7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dRQ7Pe_9yr4ZAT-OweJaj7mTNpg.roa
Signing time: Tue 06 Feb 2024 17:53:18 +0000
ROA not before: Tue 06 Feb 2024 17:53:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216194
IP address blocks: 2a0f:b241:2a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8d:88:b1:ea:3d:3b:1d:c8:7c:07:1e:88:fc:9a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:53:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75143b3deffdcabe19013f8ec1e25a8fb9933698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:87:7b:41:d5:35:5e:e6:d9:c5:29:f6:1f:33:
08:48:33:fc:30:71:dc:d1:f4:ea:6f:41:60:e0:9a:
03:4b:36:7a:34:0f:a9:00:af:b3:c6:a2:28:37:8d:
f0:89:a2:75:45:b2:0d:bc:10:34:4f:0c:c9:88:be:
62:99:95:3a:62:89:de:36:dc:85:14:80:33:0c:ed:
59:89:83:a7:cd:0c:72:23:d7:0c:57:c7:79:f6:29:
40:77:aa:b5:f8:24:5d:c5:8a:26:ad:23:3e:4d:7d:
4f:0f:a3:30:1a:00:4e:eb:3c:b8:5b:23:5f:0f:c5:
12:f8:e3:2b:3d:64:74:01:09:21:7f:f8:3d:c7:35:
47:27:78:35:21:65:4f:f0:c8:56:31:ab:0a:5f:a4:
35:20:04:04:2a:f3:b0:fd:72:2f:3a:ab:b7:ec:e0:
30:03:ce:a1:cb:5e:7c:1e:47:3f:4e:57:44:01:3f:
14:cc:e6:a8:6b:6a:16:c7:5b:3f:c7:e0:3f:9a:b7:
34:d7:3b:63:fa:e8:36:0a:a5:8b:ec:63:1b:96:57:
c2:e6:85:cc:62:eb:99:1a:05:29:a1:9e:d5:75:bf:
39:48:2c:6d:04:38:58:af:73:3e:b8:ec:e5:ef:8e:
19:de:2c:88:3e:45:c9:08:9f:8b:30:35:f4:0a:4d:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:14:3B:3D:EF:FD:CA:BE:19:01:3F:8E:C1:E2:5A:8F:B9:93:36:98
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dRQ7Pe_9yr4ZAT-OweJaj7mTNpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:2a::/48
Signature Algorithm: sha256WithRSAEncryption
67:3a:69:80:56:3e:5c:e1:dc:3a:13:d8:2b:7b:60:49:a7:1b:
28:d1:cb:95:25:47:9b:91:25:e2:da:ae:74:e9:e0:e9:c8:27:
1f:2f:06:75:b2:d1:f4:87:be:b6:1e:cb:a0:66:e5:bb:ba:9a:
88:43:34:6c:90:6a:b7:06:54:7b:e9:d7:37:78:ca:4c:c1:3d:
8e:68:a2:b0:03:c8:c7:9c:b9:1e:65:0a:a7:a0:7c:1b:f7:7a:
6a:22:87:17:a5:14:4a:e1:18:76:54:ca:92:13:95:e2:1b:ea:
0d:1b:b3:f3:25:fd:d1:45:92:13:b2:ab:de:5a:dd:0f:24:0c:
8b:83:68:63:d2:bb:6b:2b:a2:b9:12:be:17:4d:57:4d:47:0a:
75:9d:d3:28:c7:40:18:39:b9:0d:c8:8f:bd:a6:bf:b1:5f:3c:
49:dc:13:17:a0:c2:74:2d:c7:97:ec:00:29:c3:13:60:e1:7d:
f6:ea:b1:97:db:80:d9:a2:6d:d6:e7:28:64:93:6f:56:51:99:
c4:41:98:8e:73:30:18:92:c0:1d:d5:00:78:53:31:13:d4:eb:
c0:4e:dc:fa:7d:4f:e6:ed:6b:b0:33:38:18:92:f1:ce:f3:cf:
95:1d:7b:10:ce:bb:9c:ec:a5:19:61:4c:54:1f:79:07:da:6a:
49:5f:ac:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org