Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gcPI32Ry_T4WbA6UKA03ux_R7kA.roa
File: gcPI32Ry_T4WbA6UKA03ux_R7kA.roa (raw, json)
Hash identifier: xL8J7d+YKpp5i/lvnwJ7djHA5sVDKa7J/fiear9GFuQ=
Subject key identifier: 81:C3:C8:DF:64:72:FD:3E:16:6C:0E:94:28:0D:37:BB:1F:D1:EE:40
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA72A8C2A471304B416DD18F9ADB0AA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gcPI32Ry_T4WbA6UKA03ux_R7kA.roa
Signing time: Tue 06 Feb 2024 18:21:18 +0000
ROA not before: Tue 06 Feb 2024 18:21:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199518
IP address blocks: 2a0f:b241:85::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a7:2a:8c:2a:47:13:04:b4:16:dd:18:f9:ad:b0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:21:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81c3c8df6472fd3e166c0e94280d37bb1fd1ee40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:49:81:f0:44:e6:e0:80:82:26:12:19:71:
3b:23:fb:95:c6:6d:e9:50:54:8d:90:70:5c:9d:d9:
2a:18:c1:c6:f8:d3:3e:b9:3e:f8:d6:29:fb:02:8b:
28:71:c9:28:c8:2a:3e:c1:3a:08:b2:69:d5:ed:42:
ce:ac:f5:30:e4:49:b4:45:b2:9c:09:8c:14:25:e3:
de:91:ad:1d:b4:74:e0:dc:0d:78:fc:4d:4b:2e:f4:
31:fc:7b:07:4e:3e:42:79:f1:99:4a:ee:df:b6:c4:
62:b8:6a:1e:06:9c:ea:52:c1:38:b7:c9:b1:88:6e:
b9:11:19:bc:e9:5f:74:ad:aa:e1:f5:d8:88:c0:c9:
49:9f:36:34:b3:3e:85:a4:d9:38:87:1f:ef:6e:33:
db:cc:dc:9a:1c:04:7a:77:df:37:cd:79:01:b2:5c:
42:20:0e:98:e3:c8:de:0d:47:1e:ce:6b:76:43:0f:
fd:0e:7c:71:e5:6f:54:ea:f2:cf:44:cf:89:f7:6a:
90:1c:e5:36:f4:ab:0c:9d:d0:97:f2:aa:c1:c3:0d:
9a:7a:3d:a5:6f:f7:fc:35:fc:2b:d1:b9:30:dc:f8:
b4:02:02:08:b3:57:84:9b:fd:51:96:f4:f9:6d:a8:
47:36:31:0c:95:25:5b:84:fa:83:8f:b0:b8:81:52:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C3:C8:DF:64:72:FD:3E:16:6C:0E:94:28:0D:37:BB:1F:D1:EE:40
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gcPI32Ry_T4WbA6UKA03ux_R7kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:85::/48
Signature Algorithm: sha256WithRSAEncryption
85:7b:8c:07:58:1e:3a:c1:18:aa:93:f6:9b:9c:33:3f:5e:3f:
a6:79:44:46:7b:8e:10:5d:6c:37:db:b4:9e:54:00:4b:11:7b:
7b:b1:ac:ec:5c:40:c5:b1:6d:9c:9e:30:61:aa:1b:d5:58:b6:
b6:f4:91:80:a6:17:36:e9:27:38:3b:02:32:79:5b:5d:db:67:
b3:69:37:6d:e9:c3:f4:bd:2d:4c:1f:29:25:60:8c:26:1e:c9:
08:38:de:01:76:08:4f:77:2e:5d:57:4b:e2:49:e1:20:5f:1c:
23:7b:12:ff:f0:e9:fa:c1:91:e0:c9:89:eb:52:29:bd:25:f5:
44:05:c7:14:4c:c0:31:1c:bf:28:82:52:76:0c:9b:6a:d7:2c:
9a:72:cd:6b:de:78:f0:86:68:69:77:57:46:71:da:2f:47:86:
29:39:f5:44:51:32:0e:89:bb:3e:54:8e:6f:3e:c7:f6:a8:3c:
89:be:69:97:c5:90:48:75:51:bb:2b:b5:30:0f:be:87:15:e6:
01:56:7b:61:99:bb:92:92:4e:05:0b:67:42:8a:ed:9b:14:a0:
b8:78:1d:98:6a:28:73:d1:6a:c7:dc:b3:93:21:3e:e8:c4:cb:
2e:78:a5:8b:d6:93:b1:55:b6:9d:b7:d8:9e:b6:8b:87:ff:0b:
8b:d6:4f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org