Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gOEf8WyDrKWA7nV3vGfgmxlKiZU.roa
File: gOEf8WyDrKWA7nV3vGfgmxlKiZU.roa (raw, json)
Hash identifier: c4gjR/cG3i7Vmq1G9hOhCzQXIKABc2l++LfaclGiqqY=
Subject key identifier: 80:E1:1F:F1:6C:83:AC:A5:80:EE:75:77:BC:67:E0:9B:19:4A:89:95
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0BA25B07B12B6E8C8949576BE764A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gOEf8WyDrKWA7nV3vGfgmxlKiZU.roa
Signing time: Wed 07 Feb 2024 05:00:53 +0000
ROA not before: Wed 07 Feb 2024 05:00:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216013
IP address blocks: 2a0f:b241:28::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:ba:25:b0:7b:12:b6:e8:c8:94:95:76:be:76:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80e11ff16c83aca580ee7577bc67e09b194a8995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:3e:f2:b3:6b:a4:c8:94:66:ff:18:45:ef:
27:3b:18:c2:74:5b:c5:26:b7:86:cc:1f:05:f5:b5:
1c:3c:6b:b7:09:52:99:0c:42:6a:5d:db:ec:2a:f2:
b1:68:7e:7d:23:96:35:18:5f:8c:1e:f8:e3:dd:98:
aa:f9:a0:27:b1:b0:37:61:08:bd:ea:85:83:f7:57:
e9:e7:7f:1b:51:6f:a1:c9:6f:1a:2a:10:12:8e:46:
c5:ca:8f:1d:5e:b6:35:8e:f6:a9:86:c4:b1:59:e6:
98:a3:37:b6:79:7a:13:fb:35:79:0c:9b:74:c1:67:
b7:69:40:6d:c7:19:2c:7a:b3:3f:61:68:0a:ac:12:
f5:f0:4b:6a:8e:61:0c:28:3a:18:78:4d:d1:62:63:
96:83:28:73:03:a9:98:ba:f6:02:b4:1f:c4:85:4d:
ae:80:af:e2:f2:b3:b5:7c:db:98:d5:77:0e:e4:3f:
0f:ba:5e:4d:7d:59:a5:29:4c:66:be:2e:71:7f:4a:
a1:b4:1b:be:6c:dd:68:d6:c6:33:61:ee:42:4f:37:
33:af:f4:c5:84:f5:92:2c:d8:87:59:2e:81:8b:cd:
f4:a2:12:bc:85:c0:78:8c:81:5a:d6:e2:01:dd:b4:
3d:24:63:bc:bf:ea:89:07:77:8b:7a:b1:cd:30:af:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E1:1F:F1:6C:83:AC:A5:80:EE:75:77:BC:67:E0:9B:19:4A:89:95
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gOEf8WyDrKWA7nV3vGfgmxlKiZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:28::/48
Signature Algorithm: sha256WithRSAEncryption
7f:99:05:3b:b0:55:0f:05:f3:de:67:da:45:41:8a:46:a8:de:
e5:b9:4c:bd:0e:05:4d:95:6d:86:8a:cc:49:94:73:ee:32:4e:
f6:8f:69:55:78:26:53:02:2d:da:77:4a:a3:d2:98:50:d0:7c:
de:54:c2:6b:cf:d6:42:a4:fa:e7:b2:e8:df:89:0e:0b:7e:06:
36:b9:e2:92:07:d0:18:34:d8:00:8d:01:49:80:72:58:e7:6b:
fa:c8:ba:1e:e1:08:25:1e:dd:85:b9:e0:72:d5:10:cf:c6:4a:
06:e4:c9:49:8f:e7:39:8a:2f:83:63:d1:88:e3:9a:fc:f9:b6:
98:a7:b8:af:0a:e4:4e:32:b2:17:70:07:69:76:ea:0f:a6:ad:
92:28:8e:07:5a:04:23:cf:a5:b6:2b:e4:d8:11:83:62:71:e2:
8f:a5:77:db:4c:87:24:b9:a9:fd:eb:b7:95:fe:79:34:45:46:
53:78:de:8d:40:24:14:9e:24:3d:95:98:8f:a8:9f:bf:44:91:
42:7a:c3:2a:b2:9a:52:ee:28:91:58:36:92:97:d9:45:cf:ab:
68:0d:e5:09:76:4f:3d:03:41:43:eb:fc:04:8a:b2:3b:b1:21:
17:f2:fd:dc:db:06:ae:50:38:3e:15:1e:12:58:69:62:a3:9d:
5b:64:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org