Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/exHi-upV158QZ1BOtZrSJ_2PMpU.roa
File: exHi-upV158QZ1BOtZrSJ_2PMpU.roa (raw, json)
Hash identifier: +7uz3Yu9bYt5zZiyv8NKQEjf4EQQo2ZUmXz7Z0kEndc=
Subject key identifier: 7B:11:E2:FA:EA:55:D7:9F:10:67:50:4E:B5:9A:D2:27:FD:8F:32:95
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F087F30639CAFB6C69BD25A05A54A8
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/exHi-upV158QZ1BOtZrSJ_2PMpU.roa
Signing time: Wed 07 Feb 2024 05:00:40 +0000
ROA not before: Wed 07 Feb 2024 05:00:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200954
IP address blocks: 2a0f:b241:da::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:87:f3:06:39:ca:fb:6c:69:bd:25:a0:5a:54:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b11e2faea55d79f1067504eb59ad227fd8f3295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9d:cc:7b:60:94:65:20:af:ef:dc:ce:ac:3f:
5e:62:e5:58:00:ac:de:17:0b:11:c4:c9:d3:27:62:
e4:e9:cc:c1:ab:b3:49:9d:7e:f9:24:55:2c:2b:c6:
73:0b:0d:75:1e:7a:ae:e0:8c:dd:6d:e6:1c:40:f0:
1a:05:04:84:8f:c2:61:3e:bf:ac:e5:f8:22:78:e9:
69:35:0d:15:55:b1:cb:07:3f:d1:47:88:39:73:ed:
e6:41:72:fe:4d:25:c5:33:d2:ba:2e:51:7f:fd:9d:
6a:01:6b:e1:45:56:1c:04:ee:ef:ef:34:6d:76:b1:
cf:93:57:ea:2d:5f:d6:6b:46:93:ba:06:56:fc:08:
a4:f3:ad:06:5f:1d:dc:00:77:22:39:97:9d:f9:14:
9f:25:87:b9:33:b4:5a:84:ca:75:f2:e6:7c:66:31:
d7:de:cd:2d:89:0d:99:97:1b:29:02:fa:62:f3:f0:
17:9f:c8:6b:4e:05:b5:dd:73:ff:33:b9:8a:f2:76:
66:ff:0c:74:76:5a:03:eb:77:2d:2b:ab:0b:69:cd:
fb:39:e0:30:28:3e:f7:39:34:54:81:e6:b8:2a:27:
a9:16:b1:7e:3c:a1:76:89:a0:1d:44:64:ab:1a:8a:
fa:f1:90:d6:f9:fe:db:1c:8a:47:c1:b3:93:cf:4e:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:11:E2:FA:EA:55:D7:9F:10:67:50:4E:B5:9A:D2:27:FD:8F:32:95
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/exHi-upV158QZ1BOtZrSJ_2PMpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:da::/48
Signature Algorithm: sha256WithRSAEncryption
1c:99:95:01:ac:2c:a2:b7:88:e2:df:27:e0:c4:cc:89:00:0b:
90:fe:26:6d:7b:b0:ef:52:76:ab:04:6e:63:a4:b4:94:da:5b:
02:83:5d:ce:76:32:62:a6:c3:c8:e7:7b:da:0d:5d:b4:11:e3:
af:0a:e1:f7:79:1a:c4:c8:78:75:dd:39:7e:ce:8c:3d:a4:33:
f3:5f:3f:92:71:ff:bb:e5:c0:c0:be:b9:ff:bd:72:1f:48:76:
12:17:46:ef:15:14:e1:c6:2e:da:80:b6:fb:b5:86:c4:25:80:
32:a0:a3:13:e1:23:1a:ca:5c:ee:88:3c:17:a7:c8:2e:f3:55:
e3:25:58:35:ab:22:bd:9e:4a:fb:46:dc:ed:6c:19:73:2e:58:
7f:04:58:36:6f:40:eb:a1:f0:f3:cd:fb:17:8a:1a:d3:21:be:
54:5f:9c:b6:d6:9f:61:4f:2a:67:30:bc:7c:39:12:aa:1d:ab:
d4:66:25:0d:51:04:16:21:61:e3:8f:74:a6:95:fb:02:23:5b:
f4:48:df:87:ee:ed:19:75:57:6e:60:13:5a:90:9d:90:68:13:
23:c3:91:66:8e:a5:35:c1:a6:57:b4:d0:77:8a:0a:b0:fd:b6:
6d:be:e4:b2:47:d1:fa:00:e7:95:c5:36:2e:94:83:a6:58:79:
8f:8a:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org