Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ma6szEICig1HT7rVH9d8y593LMk.roa
File: ma6szEICig1HT7rVH9d8y593LMk.roa (raw, json)
Hash identifier: 1jRlNLbv1KYQ4XNxw8F9nXWxONADw4A7TeefaeMAmtk=
Subject key identifier: 99:AE:AC:CC:42:02:8A:0D:47:4F:BA:D5:1F:D7:7C:CB:9F:77:2C:C9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8D816B9BDA6FCD4A297444FDC3FB2D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ma6szEICig1HT7rVH9d8y593LMk.roa
Signing time: Tue 06 Feb 2024 17:53:16 +0000
ROA not before: Tue 06 Feb 2024 17:53:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213163
IP address blocks: 2a0f:b241:23::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8d:81:6b:9b:da:6f:cd:4a:29:74:44:fd:c3:fb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:53:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99aeaccc42028a0d474fbad51fd77ccb9f772cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:cf:b3:97:2d:b2:8c:23:3b:40:67:5b:c8:
73:93:99:7d:a0:50:0a:16:d2:37:b0:09:f0:13:cf:
e3:60:3d:67:31:a2:8c:d6:8b:3b:1f:b1:26:fe:36:
3f:a6:a0:e8:b5:03:fd:98:1f:65:d7:64:3e:c1:ee:
cd:eb:32:10:d6:ff:11:5b:51:81:79:91:9c:fa:4b:
d3:da:41:b0:71:ed:b3:2c:15:9f:5b:ec:e8:2a:71:
6e:a9:b4:4a:4c:cf:98:bd:74:41:b1:8d:b3:1d:90:
30:67:e0:3c:64:13:63:dd:68:23:22:69:e8:4c:94:
fe:ec:05:c2:72:a8:ca:3e:d3:f1:57:1a:8e:6c:fa:
23:2c:88:5e:ba:bb:b3:49:47:9c:0b:f2:5f:21:ba:
4d:87:8e:88:b9:b9:84:83:3e:d4:47:65:34:e5:5d:
54:4e:b3:04:d5:40:2d:88:15:4c:bf:74:9f:01:20:
97:07:a6:9a:33:36:5e:9c:62:24:73:e9:99:38:e8:
d1:c5:7a:93:09:eb:3e:84:26:ea:53:96:b9:a9:07:
95:ae:18:8b:c8:17:91:c9:59:bb:da:24:16:4c:7b:
3f:31:77:7e:34:f1:67:ce:f7:c1:b1:4a:19:97:4b:
90:07:8d:d9:7f:39:c8:7d:fa:ad:17:26:f5:05:ea:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:AC:CC:42:02:8A:0D:47:4F:BA:D5:1F:D7:7C:CB:9F:77:2C:C9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ma6szEICig1HT7rVH9d8y593LMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:23::/48
Signature Algorithm: sha256WithRSAEncryption
4b:76:ea:dc:82:fd:26:f9:65:b4:dc:73:09:22:46:4d:65:eb:
1b:92:2d:ab:c1:66:be:b8:c5:2d:13:75:08:97:b4:cb:1a:3b:
f4:55:8f:c1:25:8c:e7:e9:54:34:bd:34:06:dd:85:df:1c:ed:
6b:32:c4:5f:38:14:99:dd:b3:a8:b7:5b:bc:38:0f:51:cd:17:
39:a6:1e:f8:b8:f5:42:72:7f:c9:87:f2:f5:b6:b8:86:fe:c0:
d5:70:62:b9:73:65:c6:af:d6:d1:c2:25:ec:2b:4f:47:dc:d0:
ab:7f:53:71:52:7d:bc:cd:11:5a:98:9d:4b:69:e6:b8:9c:c7:
b7:a0:76:cd:90:36:9c:2c:36:54:f8:13:2b:f7:02:4d:8b:aa:
43:4d:06:ab:2a:ca:e9:51:75:ac:ed:71:58:9a:21:35:5b:eb:
53:b7:30:c4:93:12:b1:58:0f:b5:d3:7a:17:7a:db:45:98:88:
a1:02:02:0e:c9:5e:25:65:d3:0c:24:08:bb:10:d1:63:03:b0:
68:fa:a1:86:c1:44:10:d2:08:0a:af:1a:e3:78:66:78:d4:93:
dd:10:7a:6b:ad:37:ce:f5:a3:07:51:7f:4b:91:19:dc:cc:59:
04:89:d6:eb:59:a3:49:cf:e2:41:62:19:d2:6b:45:9d:cf:3e:
f0:1d:e0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org