Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mHZjWoKARYoUNwBH9MkOiIO3ND4.roa
File: mHZjWoKARYoUNwBH9MkOiIO3ND4.roa (raw, json)
Hash identifier: upGICN3Pj6hGkW4n7UcDrV3mEv7P9Kc7orY7Yrl9RIM=
Subject key identifier: 98:76:63:5A:82:80:45:8A:14:37:00:47:F4:C9:0E:88:83:B7:34:3E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA8125FE506D4CC1FAA9C6B2DCDFE5B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mHZjWoKARYoUNwBH9MkOiIO3ND4.roa
Signing time: Tue 06 Feb 2024 18:22:17 +0000
ROA not before: Tue 06 Feb 2024 18:22:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200122
IP address blocks: 2a0f:b241:94::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:12:5f:e5:06:d4:cc:1f:aa:9c:6b:2d:cd:fe:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9876635a8280458a14370047f4c90e8883b7343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:55:3a:57:4c:28:c7:af:6f:67:72:cb:90:82:
ba:dd:72:c5:99:1a:60:f0:ae:71:75:e0:5e:f7:4b:
2c:04:af:c4:63:87:13:bb:1f:64:6e:bd:e2:b7:47:
44:83:58:3f:dc:f9:86:5e:15:ab:66:e0:1b:ae:50:
c5:31:c5:ac:a5:74:a4:c7:64:13:82:0f:8d:ed:bc:
c9:6e:61:39:fb:06:01:65:53:c0:02:fe:65:81:22:
f4:41:3d:03:68:c0:73:22:dd:2a:35:57:42:75:e9:
fc:85:e2:a5:be:22:2e:28:c4:41:9e:ef:5c:e9:2e:
f3:ae:6c:7e:90:9c:81:b9:b6:4e:33:e5:9e:e1:38:
f3:c2:72:30:7a:8d:21:6e:80:d9:db:de:3f:03:84:
d5:e1:fc:8d:d4:e3:90:ea:59:ea:8b:1f:3b:04:07:
f1:6b:30:fd:7e:51:39:2b:8d:83:8e:54:9c:9f:71:
d1:b0:ba:3e:3f:72:be:3a:db:62:82:49:30:ae:b3:
98:d7:7e:5e:1e:bd:14:fc:3e:b0:37:b5:9b:01:2e:
b8:2e:38:bd:bc:19:8a:36:ac:fd:cb:b5:ae:4d:21:
4f:eb:25:32:ae:ff:bb:3a:01:f9:fc:f8:be:6d:c8:
ac:07:d6:ab:98:06:40:66:1b:e0:c2:cb:c6:dd:48:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:76:63:5A:82:80:45:8A:14:37:00:47:F4:C9:0E:88:83:B7:34:3E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mHZjWoKARYoUNwBH9MkOiIO3ND4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:94::/48
Signature Algorithm: sha256WithRSAEncryption
49:d0:eb:d0:93:b6:13:e2:73:22:e2:55:86:88:c6:0c:82:b5:
8d:a3:da:ef:3d:3d:e0:e8:cb:92:3f:5e:2d:60:b1:9b:ad:8e:
4c:6c:da:d5:b5:7a:6a:d0:7e:88:4a:6c:85:a1:fd:2f:62:2b:
fb:86:e0:6b:a4:c2:86:f4:88:5f:85:cc:af:57:1d:d4:6b:5f:
b1:c2:79:6f:88:20:d3:67:04:52:6a:a4:5e:28:b6:da:c5:ab:
72:32:03:77:5b:fa:28:7a:c1:dc:87:38:37:66:9c:18:2d:55:
f4:d6:58:8c:70:98:d2:ba:58:b1:47:76:6f:dd:67:d7:9a:93:
3a:8c:fd:6f:63:6f:05:73:7a:f9:9f:90:5b:e3:1f:16:90:75:
5d:13:a3:32:b9:28:cf:79:0a:2e:7f:08:2a:eb:ea:1a:8a:ee:
a6:9a:68:90:3f:4a:ac:f0:c6:1e:20:ae:fe:6d:d6:d9:4e:f8:
68:0e:06:a2:86:5a:9b:f5:0a:30:93:5e:cd:f4:1b:10:04:97:
8d:75:67:1e:85:9a:c9:54:fc:c7:29:b3:0f:e5:fb:5e:68:ff:
7b:40:9f:60:4f:0a:a8:14:26:06:00:88:6c:bf:81:e0:b8:00:
22:e8:8a:55:38:ef:f8:11:1f:90:61:9b:ce:a8:1a:70:bc:25:
59:98:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org