Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/j6oZR6wFJNm9dEfsHPhatTcxczI.roa
File: j6oZR6wFJNm9dEfsHPhatTcxczI.roa (raw, json)
Hash identifier: DFCUIy/pOF4C9Nhu1epHGdAFy4Yc7b+ckDqmnwQhnyY=
Subject key identifier: 8F:AA:19:47:AC:05:24:D9:BD:74:47:EC:1C:F8:5A:B5:37:31:73:32
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB88E9BDE65257D80A067FD3A144579
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/j6oZR6wFJNm9dEfsHPhatTcxczI.roa
Signing time: Tue 06 Feb 2024 18:40:17 +0000
ROA not before: Tue 06 Feb 2024 18:40:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215909
IP address blocks: 2a0f:b241:150::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b8:8e:9b:de:65:25:7d:80:a0:67:fd:3a:14:45:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:40:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8faa1947ac0524d9bd7447ec1cf85ab537317332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:b6:2d:d5:c6:25:44:a6:42:c6:3d:e6:74:
1a:d8:3d:8b:f4:9b:41:33:ce:1a:cc:65:bc:01:66:
12:f6:72:38:5a:76:1a:d7:eb:e6:8a:25:cc:31:82:
4e:ad:9e:d3:a9:60:0d:25:3f:95:75:0f:5d:e7:8c:
24:9f:4f:75:f4:2e:20:50:77:74:e2:a9:ac:d1:4d:
4f:fc:54:48:ed:03:a5:88:e5:76:40:c6:98:44:da:
34:d6:b4:e0:21:8a:91:a0:10:62:74:78:25:c7:4b:
fe:e1:00:c1:e6:c4:a8:14:12:49:ee:6a:da:b2:e5:
14:b5:c7:4c:84:98:aa:36:51:ac:c5:f9:22:a3:6f:
d4:3d:42:2a:7c:3c:83:f0:1b:cd:83:19:e0:40:7c:
e3:3c:78:cb:f1:dc:d9:85:b9:3c:9e:e8:ca:c0:32:
ab:ad:e0:b4:94:be:0a:b1:07:2e:60:fb:01:e1:25:
27:7f:36:37:9e:b2:b4:a9:be:34:8c:88:66:62:6b:
b0:62:57:64:ae:36:ab:33:59:98:42:2e:27:a9:d4:
7b:af:16:0d:6f:79:27:e4:01:ff:99:05:51:20:b7:
a0:1f:20:c3:cc:ad:3d:35:99:41:f6:c9:d5:06:85:
df:28:69:47:a0:bd:d9:4e:3d:24:4f:4d:54:db:28:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:19:47:AC:05:24:D9:BD:74:47:EC:1C:F8:5A:B5:37:31:73:32
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/j6oZR6wFJNm9dEfsHPhatTcxczI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:150::/48
Signature Algorithm: sha256WithRSAEncryption
7a:df:62:72:e3:b1:dc:b5:e2:28:cd:b2:22:61:4b:cf:15:5d:
8c:12:23:b7:15:b8:a2:69:82:b8:fa:a4:e9:88:5b:ca:ca:fd:
c5:cc:5f:f4:9f:9a:4a:ea:10:d8:b1:da:93:9a:04:89:54:f9:
1b:ca:07:52:ee:86:ef:d8:9d:f8:5d:24:6c:d9:f8:8e:74:5a:
ac:de:74:56:d8:88:77:47:14:bf:fb:50:d1:8f:17:33:9c:7d:
4a:7b:1f:c9:95:e1:f4:09:4f:ed:f3:7c:b9:ac:6b:93:98:40:
05:37:7b:a0:a7:7e:ab:af:bf:d5:e7:64:7c:13:19:27:30:13:
ba:3a:04:a6:ac:af:ed:fe:58:1d:3d:89:9a:60:18:74:4b:05:
db:cc:59:dc:29:a8:1b:9a:cc:c7:85:3e:36:47:81:30:84:87:
09:a5:03:80:e4:b9:9c:f8:7e:d1:c8:2a:e0:09:00:d6:96:41:
26:a4:93:8d:be:29:b0:84:e1:5c:e6:d5:a2:64:7a:91:12:c8:
bb:31:38:1c:c3:75:a3:d2:52:0f:10:2d:39:95:b3:18:7e:26:
0c:d5:12:9c:b3:05:a3:8b:64:31:00:c7:ae:29:33:0c:d7:59:
62:1a:46:ec:84:cb:5e:f8:90:e1:a1:a4:32:c2:b3:31:95:6b:
1b:a5:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org