Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kMOOzbUCtFKtUSW8Fegv88a2NWA.roa
File: kMOOzbUCtFKtUSW8Fegv88a2NWA.roa (raw, json)
Hash identifier: 2woqn87wLLGDftIlGZ0q/xdnlIH2VrkcKIvCcFDqz0c=
Subject key identifier: 90:C3:8E:CD:B5:02:B4:52:AD:51:25:BC:15:E8:2F:F3:C6:B6:35:60
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E84F8BE3C56A9B6A8A28857975DB
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kMOOzbUCtFKtUSW8Fegv88a2NWA.roa
Signing time: Tue 06 Feb 2024 18:24:17 +0000
ROA not before: Tue 06 Feb 2024 18:24:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200885
IP address blocks: 2a0f:b241:d7::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e8:4f:8b:e3:c5:6a:9b:6a:8a:28:85:79:75:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90c38ecdb502b452ad5125bc15e82ff3c6b63560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:7d:dc:69:88:81:c6:3d:4c:f4:54:b9:6a:
59:3c:0b:2c:85:70:62:22:96:68:5e:8a:58:cb:3a:
1b:77:8e:75:50:fa:0d:bb:af:0f:58:19:e2:1b:3e:
db:ab:70:47:ff:86:ce:bd:b5:b9:20:12:9e:80:ad:
4d:df:d6:05:45:ea:37:38:af:a6:f1:56:56:10:7c:
2c:67:f5:c1:27:9c:e4:8f:f2:c7:6b:56:dc:4b:4d:
d1:46:29:ec:e7:28:0e:da:36:83:77:32:20:9b:ed:
39:18:5b:d4:4c:67:eb:66:ae:4b:a1:24:35:0e:de:
4a:ab:df:6f:82:47:28:5d:5d:88:d1:eb:aa:6c:2b:
8a:be:65:f3:bb:b2:1b:ec:28:05:a5:ae:67:e0:32:
98:f4:ca:68:17:dd:1c:80:9f:13:89:f3:95:6b:a6:
52:ed:8b:c3:2f:38:25:48:52:28:ed:85:ff:00:82:
0d:88:8f:ea:9e:75:4f:64:ba:16:2a:a7:9f:ee:94:
b6:a9:36:1b:c1:96:18:0f:2b:38:70:bd:b3:e4:98:
9d:3d:37:d0:52:c6:54:56:7b:58:83:4f:6c:aa:c4:
60:c3:f1:3d:83:51:61:3b:67:49:0d:e5:45:ae:39:
08:8c:49:71:03:8b:d8:6b:e5:db:e8:ff:f9:b5:03:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:8E:CD:B5:02:B4:52:AD:51:25:BC:15:E8:2F:F3:C6:B6:35:60
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kMOOzbUCtFKtUSW8Fegv88a2NWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d7::/48
Signature Algorithm: sha256WithRSAEncryption
5e:1a:ff:81:5a:85:27:6a:21:08:74:22:29:16:37:01:25:f2:
5a:2d:a4:21:98:98:43:d8:fb:0a:d0:fb:89:7b:37:76:4b:00:
94:0e:a1:fe:3d:4e:c7:cd:c1:0a:66:76:50:af:26:ee:7c:4e:
79:88:3b:93:ea:d5:f3:c0:73:ba:c6:53:3c:18:d9:ce:b7:92:
4a:e5:27:71:3b:37:56:e0:12:72:c6:f7:d2:03:be:c4:87:6f:
14:46:e8:07:1e:84:33:5d:e9:98:58:1b:0d:01:42:a4:06:c2:
42:58:60:1d:e1:ec:bb:79:e2:eb:7a:92:e0:d2:3c:86:92:5f:
18:4a:b0:5d:1a:a6:c3:23:37:ac:ee:9b:c1:43:03:6a:70:93:
de:cb:f6:9b:47:8a:f1:a6:b6:4b:3a:14:e0:ac:15:ef:db:f8:
9e:c5:a7:79:45:4d:06:fd:bb:b6:1d:a6:c7:32:a7:f2:6e:80:
4f:68:bb:a3:af:c1:c4:8b:e6:f4:75:e5:45:5e:5d:fa:c7:a0:
24:58:f2:eb:ec:71:db:bf:c9:e5:78:6f:5a:5c:68:39:99:49:
10:a7:c1:68:6b:57:61:ea:7b:48:d5:ef:cd:ae:d6:88:b3:c1:
0a:1f:32:be:51:ff:4f:1f:85:25:5a:2e:22:52:d1:12:7b:f7:
e8:d5:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org