Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gV2QzHM5uOcAGxN-oJVlxHLNIjE.roa
File: gV2QzHM5uOcAGxN-oJVlxHLNIjE.roa (raw, json)
Hash identifier: HWkfe+wIKNIxJqhVdP3K6JlTES1wzxMFtcKoZc9EhE8=
Subject key identifier: 81:5D:90:CC:73:39:B8:E7:00:1B:13:7E:A0:95:65:C4:72:CD:22:31
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6BC8B068109830A871EDFF985B473
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gV2QzHM5uOcAGxN-oJVlxHLNIjE.roa
Signing time: Tue 06 Feb 2024 18:38:18 +0000
ROA not before: Tue 06 Feb 2024 18:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205102
IP address blocks: 2a0f:b241:13b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:bc:8b:06:81:09:83:0a:87:1e:df:f9:85:b4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=815d90cc7339b8e7001b137ea09565c472cd2231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:52:16:3f:ab:fd:f7:25:73:b1:ab:4b:44:
f9:21:c7:44:ff:44:ab:b9:1c:74:8c:2f:6d:02:bc:
64:c4:b0:1a:e0:22:1e:47:5d:05:95:5f:3d:65:71:
d7:9e:e7:12:11:52:47:49:e0:0f:78:c8:d7:3d:05:
5c:26:9a:02:b0:85:7d:94:c9:bf:ba:4f:8b:01:27:
3c:ea:85:40:fc:62:cb:ad:7b:e1:27:2c:08:be:4c:
d7:43:39:bd:79:7b:f6:7f:d5:46:a8:5d:53:d4:8b:
61:70:12:94:b1:10:74:16:45:86:b0:3f:a5:67:c5:
69:79:3a:d0:68:30:2b:60:64:cd:69:4f:23:20:fd:
cd:0f:11:8d:bf:24:ce:5e:f7:ae:8d:b1:35:e1:bf:
38:37:89:cb:e8:d9:7b:38:53:bf:27:4b:31:5e:7b:
ca:f3:3a:68:53:7d:0f:97:29:5b:57:55:f0:c1:25:
37:1f:11:7c:ef:3b:7c:42:73:f2:a7:a5:25:03:a5:
32:02:8a:07:fc:0c:26:7f:69:0c:e7:7b:3d:57:37:
82:05:d6:7c:dd:0f:60:90:38:98:e7:d4:0b:7e:8e:
d4:08:10:06:2c:79:9a:d4:d9:c4:0c:e9:67:a8:cd:
98:0f:6a:e9:f3:45:75:ce:29:7f:3c:e6:e3:ed:4e:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5D:90:CC:73:39:B8:E7:00:1B:13:7E:A0:95:65:C4:72:CD:22:31
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gV2QzHM5uOcAGxN-oJVlxHLNIjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:13b::/48
Signature Algorithm: sha256WithRSAEncryption
7a:78:73:45:25:ee:95:e0:09:70:39:e5:19:e4:2c:36:bc:b5:
1a:5e:c6:c8:d3:4c:88:e0:6b:f9:b7:43:af:f5:2b:1f:d9:5b:
1f:68:b1:e3:2c:67:31:c6:77:14:7a:fb:b9:0f:e3:cf:96:3a:
a0:9c:d9:ed:9c:f7:bc:fb:94:c3:e1:65:83:13:6b:71:79:57:
cb:95:fb:52:b6:9d:26:81:63:7d:c6:e5:93:68:92:20:0a:39:
75:21:74:34:a1:ce:cf:a7:0b:10:8b:5c:e6:7c:bb:03:2d:53:
b9:23:49:49:af:22:72:db:2b:23:23:51:fe:04:12:47:53:66:
6d:f9:0f:3c:f1:d5:93:db:c1:42:0b:c6:c1:be:ca:ed:9d:a2:
8a:9e:41:d6:b2:39:3e:a0:b8:50:f1:89:64:14:39:d7:01:ff:
f8:99:6d:e1:f5:92:08:b1:67:53:55:fc:e9:84:36:fe:92:26:
f8:a3:b9:b5:a6:fe:59:27:8c:dc:cf:86:aa:25:fb:9a:2a:6d:
95:b9:fc:49:a3:a8:5d:d8:1f:e1:f4:f4:3e:ad:a1:87:ce:d8:
77:e8:f2:c0:74:b4:db:97:15:ab:31:c6:bb:b1:19:fe:d7:63:
85:fd:5f:28:9f:8a:9b:a9:30:52:f8:94:bd:92:fa:98:c9:dc:
8d:68:73:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org