Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mSwy6ktjLAf5GTRJ_iJ6kKlQ72U.roa
File: mSwy6ktjLAf5GTRJ_iJ6kKlQ72U.roa (raw, json)
Hash identifier: IhNro3U+vK8Sd1fDXVoumfrVAWs7SqVAqpcvOYPczFg=
Subject key identifier: 99:2C:32:EA:4B:63:2C:07:F9:19:34:49:FE:22:7A:90:A9:50:EF:65
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F066060596A56631791E551E991934
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mSwy6ktjLAf5GTRJ_iJ6kKlQ72U.roa
Signing time: Wed 07 Feb 2024 05:00:32 +0000
ROA not before: Wed 07 Feb 2024 05:00:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57934
IP address blocks: 2a0f:b241:121::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:66:06:05:96:a5:66:31:79:1e:55:1e:99:19:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=992c32ea4b632c07f9193449fe227a90a950ef65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:98:f5:5c:8a:cf:ee:55:25:02:c8:56:7c:
d1:76:54:53:3c:28:4f:b8:83:e0:0f:6c:7d:08:9e:
3b:a9:f5:29:f0:fa:a7:79:fc:bb:2f:ae:1f:7b:f9:
29:2c:25:ab:a4:6d:16:74:04:ab:2f:8a:cb:1b:58:
c2:42:4d:c9:47:fc:d7:4e:b1:dc:7a:9a:65:d2:5b:
ef:1b:61:37:6e:16:01:ac:ae:d8:38:52:47:41:c2:
3f:d9:77:38:e3:a6:9a:5d:b7:4e:0a:c0:03:7e:e1:
ed:cc:b2:21:37:15:07:9a:44:db:04:a0:12:84:83:
6e:39:a4:d5:29:0f:5c:55:9d:ba:3a:da:7a:c7:7a:
08:f6:7a:24:9b:55:a9:e8:f5:e5:34:5a:be:e1:40:
16:f4:df:4d:e4:aa:fe:07:31:a2:3b:c4:ed:ac:64:
26:49:6a:70:be:80:a9:a4:77:06:15:c9:94:d4:1d:
d6:2a:96:c4:94:3d:ea:aa:56:03:03:80:44:82:28:
35:4a:32:3b:5b:15:ce:df:8a:9c:d2:7a:e5:98:68:
27:94:cf:05:28:fb:92:70:6f:20:ab:1e:5e:d4:49:
73:fd:95:f8:d3:80:50:bc:0f:06:54:1c:2a:17:7b:
2a:99:15:c5:60:5c:e8:d4:30:dc:18:3e:67:23:c7:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2C:32:EA:4B:63:2C:07:F9:19:34:49:FE:22:7A:90:A9:50:EF:65
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mSwy6ktjLAf5GTRJ_iJ6kKlQ72U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:121::/48
Signature Algorithm: sha256WithRSAEncryption
05:e8:fb:7f:25:43:ad:bd:88:a3:4a:ca:35:86:81:e5:dd:4f:
2e:80:ba:ff:73:11:07:3a:36:cb:fa:de:95:54:42:de:22:43:
54:90:ae:c5:66:a6:41:70:98:7b:79:91:b1:04:44:70:66:c0:
f9:77:a5:cb:02:0d:67:9a:29:2a:0b:b0:bb:40:1d:ba:fe:97:
3d:85:93:70:1f:1c:44:72:31:aa:5d:f4:27:27:52:1b:82:8d:
de:66:a6:76:33:af:ae:c6:fd:6a:0f:c0:ab:17:e2:de:f2:47:
2a:f3:9a:98:10:40:87:f2:ec:12:b4:99:ab:35:3d:9b:63:c6:
10:9e:62:7f:b3:5c:09:be:1b:e7:e3:28:a3:02:4a:2d:25:e5:
41:00:1b:5b:f7:c9:a5:7c:bd:89:52:70:14:63:53:23:8d:1d:
9c:63:21:3d:8f:d9:82:c3:c7:86:1c:54:94:cb:c5:9c:9d:c1:
f8:02:1f:f6:26:2f:78:a4:dc:92:16:89:6a:e5:c3:32:ec:0c:
97:a0:7c:35:35:5f:bd:29:36:da:4d:1b:8e:0a:10:11:39:36:
0b:e2:e6:0c:16:e8:2e:88:cc:83:12:92:c1:8d:b3:30:56:ad:
61:b5:2b:b6:96:c2:99:84:bf:01:28:4a:a0:63:26:72:b8:e5:
a6:61:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org