Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/h20J8Mc3vpZR_TnEgCyJGJYyMWI.roa
File: h20J8Mc3vpZR_TnEgCyJGJYyMWI.roa (raw, json)
Hash identifier: d51n7WZWtGs8U7YPfHqlBRtcOfeJyJuGLddoEmdCFCA=
Subject key identifier: 87:6D:09:F0:C7:37:BE:96:51:FD:39:C4:80:2C:89:18:96:32:31:62
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8D855C5E05B533AB9B74E4F60F71A9
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/h20J8Mc3vpZR_TnEgCyJGJYyMWI.roa
Signing time: Tue 06 Feb 2024 17:53:17 +0000
ROA not before: Tue 06 Feb 2024 17:53:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215987
IP address blocks: 2a0f:b241:27::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8d:85:5c:5e:05:b5:33:ab:9b:74:e4:f6:0f:71:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:53:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=876d09f0c737be9651fd39c4802c891896323162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3b:58:e2:04:40:e1:5b:d5:4e:9f:a1:5e:5a:
dc:ca:a2:b1:76:ed:1d:df:4b:3f:a2:6a:41:c8:f5:
27:dd:b8:c8:b0:5b:14:da:9a:ed:ae:7e:4c:22:84:
35:3a:73:12:b4:ae:53:c3:77:7f:53:42:2c:66:ca:
6b:42:2d:48:fa:c9:75:03:01:6d:0a:a9:a2:46:a2:
80:01:08:35:9b:41:51:08:03:35:3b:98:36:62:6c:
29:d1:3d:2e:f3:da:63:12:bc:6d:27:e6:8a:3b:88:
d7:b6:bf:12:e8:00:f7:a3:b3:55:6b:89:13:b6:01:
e8:ec:01:21:fb:53:4d:be:60:7f:f4:40:05:7a:9f:
6c:06:c1:ea:a2:bb:ba:6d:6e:df:92:fe:1c:a9:2a:
d3:6c:59:51:17:10:7b:9f:ad:e0:3b:d3:4f:d7:07:
f8:ba:f0:99:ce:38:09:ee:fd:f8:b3:af:31:ab:72:
d7:67:95:2f:77:6e:3f:cc:17:e3:ac:85:d8:fb:1d:
55:67:08:eb:e9:c0:de:32:ec:5c:b5:5c:e2:f5:a5:
09:8d:da:7e:2f:82:19:98:7f:c0:95:66:ef:2b:64:
b6:ae:9d:20:67:4a:3d:25:c3:75:c5:7f:9e:41:30:
79:2c:39:ab:11:84:b5:59:78:5d:c3:33:a0:0f:f0:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6D:09:F0:C7:37:BE:96:51:FD:39:C4:80:2C:89:18:96:32:31:62
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/h20J8Mc3vpZR_TnEgCyJGJYyMWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:27::/48
Signature Algorithm: sha256WithRSAEncryption
70:70:d0:b6:3d:e4:fc:08:cb:69:3d:f4:4e:f5:67:71:26:a6:
42:93:0d:3e:46:c9:ac:6c:26:30:4b:d9:1c:f9:06:14:7d:31:
8d:ea:9c:0f:23:da:c8:5a:82:26:17:7e:52:c6:f3:38:63:b4:
d1:8e:19:55:9a:6d:d9:77:66:1b:af:82:6c:d1:c9:44:27:07:
2e:b9:91:44:8c:db:fd:35:ed:31:4f:c6:7c:2b:ca:a2:c9:d2:
ef:9c:e5:90:25:b7:2c:c4:d4:f3:4a:63:e3:6e:da:65:c1:68:
1e:d1:89:ee:1f:69:ce:b5:5b:f0:5f:8c:9b:cf:13:14:0b:b1:
e9:c8:07:b8:51:4e:4f:bb:51:13:e8:af:37:27:1f:e3:76:c6:
be:c6:93:f6:33:21:f5:69:11:98:df:e2:46:79:84:b2:c8:87:
a5:52:72:4a:bb:dd:30:1b:76:92:90:40:43:a4:aa:16:5c:07:
3a:ae:e8:7f:ed:5e:5f:d8:45:eb:1e:c0:e5:de:cd:ae:3d:2f:
2b:86:28:fa:1b:23:b9:55:8c:79:0e:0b:b5:f8:a7:78:db:01:
2e:55:9f:b6:eb:51:a6:87:f5:45:10:4c:32:23:37:77:79:57:
7e:0a:aa:8f:5d:5b:e5:8f:5b:45:bc:04:e4:ff:ab:94:60:fc:
4e:5c:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org