Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/feNj_oty6r-M51x7pb56MrKKDVE.roa
File: feNj_oty6r-M51x7pb56MrKKDVE.roa (raw, json)
Hash identifier: 2EQJ41GPG0iZyQ20BZwM4QUHFAt+NJcOB23e3A7RhQY=
Subject key identifier: 7D:E3:63:FE:8B:72:EA:BF:8C:E7:5C:7B:A5:BE:7A:32:B2:8A:0D:51
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA725F68E92042950768CA28079D1D2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/feNj_oty6r-M51x7pb56MrKKDVE.roa
Signing time: Tue 06 Feb 2024 18:21:17 +0000
ROA not before: Tue 06 Feb 2024 18:21:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199097
IP address blocks: 2a0f:b241:7e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a7:25:f6:8e:92:04:29:50:76:8c:a2:80:79:d1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:21:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7de363fe8b72eabf8ce75c7ba5be7a32b28a0d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:eb:d8:97:1e:aa:a0:4c:d7:d3:3d:f4:f4:
91:db:b8:ce:0b:10:11:2a:fe:e2:ee:18:60:e5:1e:
20:56:fc:c3:3e:a0:20:e5:88:11:c6:d6:00:2b:cd:
bd:97:0a:36:b6:46:d2:53:7f:8e:fb:af:81:8b:20:
d8:5a:42:7e:f0:b0:07:f8:24:fe:d9:77:d0:54:7f:
59:47:ef:95:38:ad:d1:1c:82:99:86:0d:e9:b2:54:
6e:6f:74:17:9e:4c:1e:ef:4a:47:ce:0b:0b:d9:a0:
d9:8d:52:67:18:e6:9c:99:f9:b3:19:05:56:b4:3f:
5b:4b:01:52:7e:7b:06:cf:29:00:8b:d4:2b:d9:4e:
40:9e:d1:f7:07:80:24:f0:65:c0:5f:3d:6d:9b:57:
6d:04:62:4e:bb:5a:44:f8:12:37:b4:45:9f:10:f8:
e4:36:3a:ff:8f:7e:14:c8:33:5c:77:92:6e:03:57:
3c:bc:1d:16:11:db:c8:0b:57:67:14:c8:80:bf:e2:
6b:81:ec:d1:d9:e7:f5:e2:e7:cd:18:84:7f:80:2b:
67:5e:03:bf:d4:65:8f:9d:29:e9:3b:86:be:cd:1d:
51:ce:ab:9b:98:5d:e0:5d:63:f7:7f:52:c2:78:06:
38:9f:47:6f:33:40:6d:42:88:74:75:c7:11:60:3c:
07:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E3:63:FE:8B:72:EA:BF:8C:E7:5C:7B:A5:BE:7A:32:B2:8A:0D:51
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/feNj_oty6r-M51x7pb56MrKKDVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:7e::/48
Signature Algorithm: sha256WithRSAEncryption
3f:0c:eb:db:67:0b:31:30:e7:c1:d6:79:38:b5:95:c9:eb:1f:
ff:87:32:cd:b7:39:7d:98:b6:c5:b8:1d:8e:1f:5b:ae:64:6c:
2d:75:0b:6b:d3:00:0e:8a:d1:43:32:a0:9f:1d:23:72:c8:a9:
d0:8c:89:1d:8d:c1:84:0f:d8:96:f8:78:16:cb:b3:eb:ed:5a:
ef:b3:80:1e:cd:11:92:bf:56:31:48:7a:58:98:28:57:3e:10:
6c:4c:6a:59:3d:6b:5b:67:6e:01:39:86:2b:9b:28:bf:aa:b0:
9a:25:50:cb:d3:b0:2a:8b:ad:44:b5:57:66:d9:a2:cc:40:13:
f8:73:b2:08:dd:e5:37:13:5f:22:50:03:a9:b8:58:68:c5:cb:
cc:14:c8:de:35:19:d8:7e:c8:f8:bf:8c:a0:a7:39:24:84:de:
87:21:9b:80:d1:29:69:bd:e0:b8:3b:6e:2f:a4:77:5d:f6:25:
87:a3:6f:e8:f8:08:4e:dd:9a:11:8c:a1:39:14:e8:a2:3b:15:
ac:82:d6:61:e0:0b:2a:a9:8c:28:f8:85:39:89:72:b1:58:d1:
a5:8e:f3:fd:1e:f6:97:f0:1e:04:fe:0c:0d:d6:1a:cd:f0:af:
57:e3:60:16:78:f0:b4:c2:76:06:0a:91:6e:c7:8f:7a:f9:af:
83:fa:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org