Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/etqY10QEz83lbggZJTULSKlBONE.roa
File: etqY10QEz83lbggZJTULSKlBONE.roa (raw, json)
Hash identifier: g6UMdsqqU0g7U5RC8iliR/ArfuDHyUTK7HbReW4VgwY=
Subject key identifier: 7A:DA:98:D7:44:04:CF:CD:E5:6E:08:19:25:35:0B:48:A9:41:38:D1
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB79C3F04BA2E1DD05033B296DA3BDA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/etqY10QEz83lbggZJTULSKlBONE.roa
Signing time: Tue 06 Feb 2024 18:39:15 +0000
ROA not before: Tue 06 Feb 2024 18:39:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206824
IP address blocks: 2a0f:b241:13c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:9c:3f:04:ba:2e:1d:d0:50:33:b2:96:da:3b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ada98d74404cfcde56e081925350b48a94138d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:d0:f4:8a:e4:2e:54:2f:ac:4b:f5:b5:c9:
92:57:61:35:ea:9c:f9:3a:ff:92:98:f5:d5:65:30:
a0:92:93:b5:20:39:f0:aa:ba:fc:a5:e8:fd:e8:95:
e1:46:8a:87:fe:ed:73:20:5e:d3:2d:b6:e8:42:fc:
d4:d7:ae:7e:ac:c4:8d:e2:ce:f1:7c:f5:3d:e6:98:
22:5a:1a:16:7d:02:74:91:58:83:96:d7:a8:8f:0f:
35:98:1b:4d:7e:f7:65:23:5d:98:fe:fc:04:a8:8f:
a2:6a:d2:a8:db:1c:6c:d4:5f:d6:36:24:a2:52:d3:
d7:98:68:79:ac:16:52:37:a6:9d:d3:8b:71:f5:87:
3e:8f:5f:df:11:9f:0c:cc:2e:25:83:5c:c3:6b:08:
d9:7a:9e:8a:6f:29:36:da:47:3d:17:5e:1d:74:03:
c5:f8:d7:b0:f5:97:20:8e:35:66:1d:62:70:2c:71:
54:aa:44:81:0a:cc:12:4a:9d:ff:94:90:20:88:0a:
37:98:58:bd:89:ee:bc:ac:27:b5:a8:ab:7e:65:bf:
b0:f6:33:36:a0:1b:a7:7d:25:a2:56:e8:4b:f0:40:
dd:a6:13:6c:05:d8:f4:91:f8:72:1e:73:08:5d:80:
8a:e0:b5:42:1a:6f:2f:e5:8c:f7:ad:ac:bd:f1:91:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:98:D7:44:04:CF:CD:E5:6E:08:19:25:35:0B:48:A9:41:38:D1
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/etqY10QEz83lbggZJTULSKlBONE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:13c::/48
Signature Algorithm: sha256WithRSAEncryption
05:f8:e9:0b:e0:da:78:d0:76:84:92:6a:87:3b:56:78:de:96:
15:27:86:b4:59:89:63:ef:ee:cf:b1:69:84:df:1e:73:d8:69:
d0:53:e5:f3:51:fb:97:94:db:ac:40:16:6f:b2:01:80:6e:5d:
31:5e:f1:eb:82:ab:53:cf:0a:c6:0b:a1:06:49:94:ce:27:2b:
ec:80:a4:72:d3:d5:17:f8:39:e6:23:4a:00:db:a9:c8:4c:19:
24:1a:6f:60:ff:7a:f0:e9:7d:d0:d0:77:5b:ae:ff:0b:7e:88:
4b:85:06:1f:dd:a0:27:23:99:e0:eb:4c:56:70:bc:9c:01:19:
92:1e:ae:09:6f:d9:34:06:18:0c:3a:02:83:c0:1a:12:47:99:
03:5b:58:32:ed:06:8f:d6:7a:d0:94:2b:8d:77:49:41:d1:f9:
3f:0b:e1:65:b2:36:7d:72:7c:f9:7f:38:01:ea:36:b7:10:51:
43:d5:fb:87:1c:f2:4e:96:19:db:e1:d7:bf:24:da:8e:4c:3f:
e7:ef:aa:94:43:94:48:a2:1c:01:a6:c9:ec:fb:ad:f6:ad:40:
1d:37:67:d6:c4:ca:af:93:e3:c9:ee:87:b7:42:ac:29:89:88:
37:9e:0f:91:98:59:d8:44:22:21:46:a5:6a:7e:b4:c5:53:d0:
95:ad:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org