Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/m8hjFTYeQQNI9rcMWhtCXuk_abs.roa
File: m8hjFTYeQQNI9rcMWhtCXuk_abs.roa (raw, json)
Hash identifier: buqEGr1BmzApOxwK0Cf5nxHWflFQY4I3sBIn9CfOZMs=
Subject key identifier: 9B:C8:63:15:36:1E:41:03:48:F6:B7:0C:5A:1B:42:5E:E9:3F:69:BB
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6BA227C312AC332F482E8D38486D1
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/m8hjFTYeQQNI9rcMWhtCXuk_abs.roa
Signing time: Tue 06 Feb 2024 18:38:18 +0000
ROA not before: Tue 06 Feb 2024 18:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203786
IP address blocks: 2a0f:b241:137::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:ba:22:7c:31:2a:c3:32:f4:82:e8:d3:84:86:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bc86315361e410348f6b70c5a1b425ee93f69bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:e1:49:97:66:29:16:62:f4:5d:0d:62:62:
10:65:e1:78:c8:8d:5d:a7:74:32:64:83:49:e0:10:
fb:74:d4:44:a4:43:24:cb:0c:80:6c:29:ba:bb:64:
23:65:9f:c0:e5:8e:6b:de:54:ba:55:69:e3:53:77:
cb:2d:cb:82:f7:24:d0:5a:a2:28:77:19:6c:2d:18:
b5:b8:cd:90:a6:87:ce:0b:8f:10:50:ae:43:36:a0:
12:c6:2b:f1:2e:3b:4d:aa:29:c7:68:9f:ba:60:ef:
9b:f3:ff:94:9b:bd:75:2d:da:45:c1:54:84:12:d7:
8c:6d:1a:e0:a1:51:e3:fa:91:16:c1:b9:80:3f:70:
03:3a:25:51:9a:b9:94:1b:e0:ef:ef:f0:f3:af:1a:
d5:9e:f1:c0:c7:1d:f1:ac:cb:45:a3:6b:98:82:81:
9d:f8:fa:da:25:f1:11:0b:84:a0:db:f8:00:b2:3a:
db:fd:58:5d:08:98:1e:39:4f:67:c5:36:3a:6d:46:
51:d9:95:dc:e5:a8:b7:2c:ba:a0:b5:ee:32:6a:ca:
5c:e9:92:dd:b2:54:f0:2c:2f:f6:92:ac:4a:21:d3:
a3:53:99:b2:ee:ce:3c:38:d5:f0:9b:40:c8:c4:1b:
b2:9d:13:6c:e9:7e:81:fb:d8:5a:1d:eb:91:a3:bf:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C8:63:15:36:1E:41:03:48:F6:B7:0C:5A:1B:42:5E:E9:3F:69:BB
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/m8hjFTYeQQNI9rcMWhtCXuk_abs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:137::/48
Signature Algorithm: sha256WithRSAEncryption
74:58:3d:9a:6d:05:f7:c0:2a:25:47:2e:51:ef:2e:e3:78:ee:
91:65:84:85:42:7b:fc:38:a4:7e:d3:74:2f:42:4f:56:8d:16:
a9:38:fb:bb:a4:b3:ba:c2:04:6d:29:a6:f4:77:6a:b5:e7:53:
d8:bd:d5:1c:0f:2f:d0:ca:c1:c4:15:46:8e:04:29:67:81:67:
92:44:9f:ff:32:37:f4:7f:73:a5:78:03:f4:68:ca:3d:bd:96:
eb:6c:f0:36:24:a1:d1:b7:98:53:c1:29:24:a7:af:b0:f1:00:
8c:8d:67:9c:0a:49:e1:c3:41:d2:84:a0:37:b9:3c:27:bd:0e:
22:1b:8b:ed:d8:55:94:62:14:bc:55:bd:dc:97:99:f2:c2:91:
a8:8b:66:02:04:e6:83:ba:5d:25:2d:2a:f8:bc:20:c5:94:2c:
25:9b:21:b6:a3:62:94:92:b2:bd:fe:9e:b0:c0:b7:f3:d0:04:
b7:20:c0:75:f8:98:ec:b5:bd:a7:a3:2d:ea:44:f3:f6:e0:42:
ee:b6:a8:b5:54:ce:d5:4a:4e:55:2e:bf:65:3f:ac:47:ce:70:
01:ba:f9:58:1a:7c:3f:49:7f:00:34:7c:91:14:88:f3:80:e4:
30:3a:7f:26:00:6e:ae:a0:e9:71:58:8a:77:3a:32:51:e9:e9:
1a:48:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org