Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iCsV3wSMWunyLVDx7ny-bqRNjSg.roa
File: iCsV3wSMWunyLVDx7ny-bqRNjSg.roa (raw, json)
Hash identifier: OwvKsBPXp+LvjHZDlWs8nTNddJJuufnwdAUt0xCfslA=
Subject key identifier: 88:2B:15:DF:04:8C:5A:E9:F2:2D:50:F1:EE:7C:BE:6E:A4:4D:8D:28
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0C192BE7443E7C14780F9B8C02902
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iCsV3wSMWunyLVDx7ny-bqRNjSg.roa
Signing time: Wed 07 Feb 2024 05:00:55 +0000
ROA not before: Wed 07 Feb 2024 05:00:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216340
IP address blocks: 2a0f:b241:157::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:c1:92:be:74:43:e7:c1:47:80:f9:b8:c0:29:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=882b15df048c5ae9f22d50f1ee7cbe6ea44d8d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:b7:9d:09:0c:24:de:bb:56:bc:ac:04:18:
f9:50:c1:3c:23:84:ee:28:64:8b:2f:43:fd:26:46:
8d:54:68:de:9a:7e:a8:5f:40:a6:02:ea:02:7e:7d:
60:df:61:88:0d:90:fb:1d:96:32:ac:f0:07:9a:1b:
ed:e2:10:c1:4e:bf:02:80:93:6e:3c:37:f6:96:de:
cb:b7:62:24:44:e8:54:31:eb:d9:95:81:a4:55:f8:
6b:76:44:17:d5:72:19:f7:e8:2f:40:b0:44:37:73:
ef:58:c3:21:86:69:4e:f0:0a:ac:b5:80:45:46:e6:
38:01:d5:4b:bc:0b:52:c4:03:2d:10:27:c3:6a:75:
15:48:bc:89:42:90:8e:45:f3:a6:e6:9d:b1:ec:10:
91:01:12:84:d8:fc:27:df:a4:1a:cc:9e:4c:83:7e:
73:c3:ec:00:42:43:48:11:37:89:00:57:35:aa:cc:
22:53:5c:07:d5:84:bc:a7:5c:19:f4:a2:34:70:3d:
63:42:23:c1:90:7b:42:d0:c9:04:95:00:02:4d:03:
7b:2b:0f:0e:a4:09:5a:3a:79:da:c0:46:67:c4:1d:
62:6f:82:70:22:d8:4d:8c:e7:bd:53:cf:2a:21:b1:
53:24:ae:91:8b:7e:d2:da:56:12:38:7f:6c:b6:3b:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:15:DF:04:8C:5A:E9:F2:2D:50:F1:EE:7C:BE:6E:A4:4D:8D:28
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iCsV3wSMWunyLVDx7ny-bqRNjSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:157::/48
Signature Algorithm: sha256WithRSAEncryption
6c:dc:5e:91:97:f2:9f:d3:fd:0e:64:bd:4f:e0:6b:1d:19:a0:
69:29:b1:6c:46:34:5c:3d:3c:c4:37:62:61:ef:95:03:ae:43:
b1:e1:31:4c:a8:87:44:77:c2:71:89:71:6d:ec:56:7c:5f:1b:
1d:6e:b4:63:5c:8c:ca:01:93:3b:c4:01:0f:e4:d4:41:c5:60:
33:7d:f5:b2:e4:be:c1:17:a7:3b:51:ac:39:99:cc:27:ed:bd:
34:d1:dc:d5:99:2b:72:f7:4d:41:02:10:c6:7f:84:8f:27:a6:
a5:87:8d:81:c1:6f:8c:b6:db:1b:99:96:84:5a:8a:98:a2:cc:
a4:35:ec:92:b1:31:75:8e:e8:55:1f:38:44:76:6f:f0:db:ac:
c0:86:bc:b1:65:ad:86:c2:a2:0d:bc:a0:08:e0:4f:4d:3e:be:
ef:79:67:34:56:1a:47:78:be:2c:f5:cd:07:81:85:58:66:3d:
44:59:dc:c8:13:ff:7c:2e:d1:59:9e:a6:d7:4d:39:f9:14:33:
16:24:c0:bd:1b:f2:0a:d5:80:a7:ff:ba:89:6e:c3:2a:6e:d1:
e2:c2:09:20:4e:4a:97:48:98:b8:53:55:d1:01:52:82:56:e1:
a3:bd:c1:3c:dc:0a:99:f4:cd:56:03:99:ed:4c:de:90:5d:9a:
af:d8:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org