Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/m7-ctji3ArYm85XQm1Ax9f8nhYw.roa
File: m7-ctji3ArYm85XQm1Ax9f8nhYw.roa (raw, json)
Hash identifier: Da204rfLCw2k7DDz3e46OsV1Qtrh6vVd+G5mlazZjEw=
Subject key identifier: 9B:BF:9C:B6:38:B7:02:B6:26:F3:95:D0:9B:50:31:F5:FF:27:85:8C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAD94A3A457C2EDF5125A5CF124D969
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/m7-ctji3ArYm85XQm1Ax9f8nhYw.roa
Signing time: Tue 06 Feb 2024 18:28:18 +0000
ROA not before: Tue 06 Feb 2024 18:28:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216436
IP address blocks: 2a0f:b241:10e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ad:94:a3:a4:57:c2:ed:f5:12:5a:5c:f1:24:d9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:28:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bbf9cb638b702b626f395d09b5031f5ff27858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:7e:1a:6d:f4:df:7c:91:5f:72:45:7e:9c:
c0:74:3a:50:b2:18:e3:cc:59:93:71:96:c6:e1:9e:
e6:7e:6f:00:35:d0:f3:51:b4:88:9a:d9:c8:76:45:
28:18:fa:4b:73:eb:c7:61:23:af:f9:14:1f:4c:fa:
9b:56:31:8b:65:d0:3c:9c:3a:47:63:80:45:ed:7e:
b1:a7:28:9b:c0:6f:88:31:86:88:24:fb:46:88:6a:
ad:76:87:c2:3d:1c:26:f5:b2:d9:63:15:3e:c5:a0:
bc:94:e1:af:cf:4b:2b:be:25:ef:8d:f0:d5:fe:24:
55:12:b3:34:5f:6c:19:44:77:f4:5b:b7:a5:91:ed:
c1:10:4b:3c:fd:39:68:d7:3d:52:70:5e:de:27:03:
e9:8c:a6:e2:4a:63:d6:ee:18:51:ee:5c:91:00:6c:
38:f3:ca:c7:cd:ff:31:bf:72:e8:78:a2:59:ae:0b:
a8:30:d1:e6:fd:9f:0a:85:02:1d:27:8c:eb:f9:60:
2c:32:3d:de:ce:c0:ee:ff:2c:a5:33:bd:30:0f:db:
7d:73:d7:af:ce:5a:b7:71:cb:06:f1:50:64:42:ba:
e4:14:b6:6a:e4:7d:56:e6:2b:77:61:a8:6b:52:c8:
73:b5:32:46:02:a4:b9:c5:e7:ff:cf:82:ae:27:3a:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BF:9C:B6:38:B7:02:B6:26:F3:95:D0:9B:50:31:F5:FF:27:85:8C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/m7-ctji3ArYm85XQm1Ax9f8nhYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:10e::/48
Signature Algorithm: sha256WithRSAEncryption
40:39:30:67:f4:7d:35:6c:99:63:f3:70:e5:63:f5:3d:0f:b7:
b3:b7:3f:5f:0b:7d:96:44:ce:64:60:9e:64:e3:69:b9:ff:cf:
54:91:3e:e2:50:19:68:96:a3:29:52:b5:8f:be:ad:58:b9:08:
21:a8:15:65:46:7f:b6:85:6b:13:4f:79:26:2f:cb:37:0f:02:
5a:48:4d:dc:63:3b:e0:19:80:a2:52:a3:20:90:a3:5d:e0:fc:
51:91:d7:2c:e5:1e:7b:fc:1a:32:d4:5c:a7:c4:ae:1e:43:31:
08:db:47:ae:fc:a2:53:65:53:1c:4c:7a:9d:93:34:04:7c:cc:
b4:e5:a5:c0:51:b4:b3:5e:71:22:44:c9:b6:27:8e:94:8f:16:
3a:6e:7e:7a:84:6d:06:d6:c7:57:23:ff:2d:de:bc:4a:af:ab:
fd:fe:e3:d9:3b:bf:52:28:94:1a:1b:db:7e:68:c1:49:af:dc:
81:2f:64:8c:d1:3e:cf:ce:71:be:14:c9:7c:f1:4a:f6:3f:49:
06:56:2f:fd:e4:89:1a:0e:c5:c8:e4:81:b2:d3:b8:9b:28:5f:
7c:b8:c5:fc:29:41:c2:78:62:53:b6:c3:82:f2:12:11:ea:b0:
06:11:19:5c:20:47:09:7a:8e:6d:c0:73:82:aa:ed:ac:bf:37:
89:c2:8a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org