Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iXR-5qDA--ZsyBrVz1E6gF_vOTs.roa
File: iXR-5qDA--ZsyBrVz1E6gF_vOTs.roa (raw, json)
Hash identifier: LSIfzrJpJpHTpN6tidT9JPs3ZZ0AMOrKZZvDFVroubc=
Subject key identifier: 89:74:7E:E6:A0:C0:FB:E6:6C:C8:1A:D5:CF:51:3A:80:5F:EF:39:3B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABC00B603839DCA8BF8772EFA2F896
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iXR-5qDA--ZsyBrVz1E6gF_vOTs.roa
Signing time: Tue 06 Feb 2024 18:26:18 +0000
ROA not before: Tue 06 Feb 2024 18:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209686
IP address blocks: 2a0f:b241:f7::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:c0:0b:60:38:39:dc:a8:bf:87:72:ef:a2:f8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89747ee6a0c0fbe66cc81ad5cf513a805fef393b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:0d:05:48:5d:7f:6c:75:2a:47:99:d0:72:
a7:9a:0d:05:3e:3b:7a:9b:0b:11:f7:66:04:dd:35:
6e:51:4a:95:f1:5c:f9:ec:65:00:4c:20:53:8a:0b:
60:81:2e:27:62:b7:f2:68:6a:3f:88:f7:85:c2:b3:
05:23:09:76:2b:c6:fe:5a:41:d5:3c:14:fe:55:63:
e5:bf:16:a1:51:c5:05:5d:f8:c1:b9:1a:d8:86:a5:
bb:fa:8c:71:fb:e3:65:7b:04:89:9d:2d:62:7e:2e:
a8:b1:ab:f4:05:d5:b8:e7:3f:aa:15:ef:ce:b5:f5:
18:c2:52:7c:56:76:04:18:ac:60:4e:5f:66:83:ad:
4f:94:fb:0e:57:52:da:81:4e:8e:49:96:ee:d2:66:
3a:36:0a:97:70:64:c6:8f:5c:8d:f0:bf:92:77:49:
8e:b1:7b:2b:09:01:c5:05:3a:5f:b6:c5:13:0b:2e:
63:5b:0c:de:cd:6f:73:31:9c:b0:7b:a3:58:75:1a:
39:fe:c5:bb:53:38:2e:cd:3c:b4:14:41:df:e4:fa:
f0:56:a6:ae:ec:75:d2:c4:f6:ca:f3:b9:1c:21:0c:
a8:05:0e:8b:57:0e:b4:0e:9f:85:49:5f:d8:24:21:
74:2f:13:a9:fc:eb:96:cf:01:e5:ef:ba:6c:3e:df:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:74:7E:E6:A0:C0:FB:E6:6C:C8:1A:D5:CF:51:3A:80:5F:EF:39:3B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iXR-5qDA--ZsyBrVz1E6gF_vOTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:f7::/48
Signature Algorithm: sha256WithRSAEncryption
16:69:27:f3:fc:f4:8d:58:44:ec:85:9f:5f:59:22:e9:43:d5:
16:6b:0c:bd:44:32:d4:93:eb:5f:48:36:fd:08:53:2f:ef:13:
b5:b5:b7:7d:81:6b:c2:eb:18:23:09:ec:8b:80:91:90:21:c8:
1b:e5:67:71:3e:dc:db:4c:53:60:a7:fb:17:d6:f3:bd:75:2d:
3f:7d:bb:24:c8:89:ad:c6:b2:7a:91:be:a6:d8:09:f5:be:06:
0a:31:9c:71:74:2a:64:cf:92:7b:0e:cb:64:f1:18:a1:0c:49:
f5:2d:02:d7:b7:d2:22:f5:ad:3b:e8:f1:1b:a4:a0:bd:d6:c7:
34:1d:3e:b2:34:ed:67:5c:8d:d2:0e:82:7c:92:60:66:f9:9f:
ef:b1:ae:a1:34:2f:6d:13:d0:9b:43:91:08:ad:89:8a:24:ce:
13:7d:d1:ca:a1:13:2f:c7:6c:93:11:8b:4b:8e:e2:4a:d8:9d:
ef:f1:b8:f8:72:d3:22:53:50:ce:ff:b0:48:41:8d:7c:1a:b7:
e7:75:67:96:1b:2e:3d:dd:1b:f7:70:2e:ff:74:a4:08:7b:2e:
9d:71:c9:c1:49:07:81:99:36:42:03:44:74:f8:d1:75:dc:e8:
b9:ac:98:97:f1:8a:2f:35:63:4f:bd:29:6c:2f:b1:69:06:61:
95:d6:f7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org