Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/niPwVWqOgmhoONcS5Fh0ZIIc2mY.roa
File: niPwVWqOgmhoONcS5Fh0ZIIc2mY.roa (raw, json)
Hash identifier: zOErjRTUwz36ClenXKO2cRv6Lk5wlA5FCUgw5+X0Dag=
Subject key identifier: 9E:23:F0:55:6A:8E:82:68:68:38:D7:12:E4:58:74:64:82:1C:DA:66
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81EBA874E4CDD219C39E60091BD90D4C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/niPwVWqOgmhoONcS5Fh0ZIIc2mY.roa
Signing time: Wed 07 Feb 2024 04:55:21 +0000
ROA not before: Wed 07 Feb 2024 04:55:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199594
IP address blocks: 2a0f:b241:6b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:eb:a8:74:e4:cd:d2:19:c3:9e:60:09:1b:d9:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 04:55:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e23f0556a8e82686838d712e4587464821cda66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:56:3e:cd:af:85:46:d5:e3:a4:24:5a:e6:
aa:8c:42:e0:15:5a:67:29:a0:4b:2d:01:57:b5:b4:
f3:0d:3c:00:22:50:16:f4:73:e1:21:45:4b:86:84:
38:8f:7a:b1:2f:c7:d7:3a:bc:00:b0:fd:13:d2:9f:
f4:f6:a7:b8:b4:df:a4:60:c3:a5:d3:43:aa:04:c8:
5c:de:a4:c3:35:a6:ec:7e:3e:e6:38:19:3b:10:b6:
ed:92:c4:08:1e:24:6b:4e:d6:93:c9:78:a3:16:de:
13:34:3f:35:51:14:8e:3f:bc:2f:e5:cf:d3:e3:0b:
03:5e:c1:e4:c0:e7:3d:d7:0c:61:48:a8:94:ba:dd:
15:84:79:58:b4:81:54:ba:8d:70:5c:ed:72:a0:98:
18:8f:bf:a1:8c:a4:a3:1f:9c:45:5c:29:15:57:d4:
2e:1e:f6:22:05:f4:10:82:f7:7d:96:3a:2d:53:3e:
50:06:64:0c:2a:06:d1:79:7f:ef:d8:b9:2f:bb:d2:
20:25:de:3e:21:1d:de:f2:00:bb:48:c5:6c:d9:80:
e4:00:28:03:90:6c:a8:d6:f7:6b:ea:34:55:2b:8a:
7b:44:c3:2c:dc:f0:63:f5:76:b3:f1:1a:93:93:15:
48:32:90:9d:38:a8:a6:25:5c:ef:43:ed:c1:6b:af:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:23:F0:55:6A:8E:82:68:68:38:D7:12:E4:58:74:64:82:1C:DA:66
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/niPwVWqOgmhoONcS5Fh0ZIIc2mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:6b::/48
Signature Algorithm: sha256WithRSAEncryption
86:00:98:e9:37:9f:c8:4a:cd:ac:b9:59:7a:06:6c:f5:26:a7:
fb:31:d2:c5:0a:01:59:84:33:05:da:81:29:99:74:2a:50:df:
35:f1:0c:17:b3:83:b4:83:22:18:13:ef:86:d9:af:e9:0c:0a:
48:c4:f2:db:65:16:b5:f5:a0:40:51:b6:c6:69:3a:17:46:0b:
75:40:64:5e:4a:6a:38:8c:de:bd:99:62:e9:0a:9e:dc:a6:6e:
ec:75:f2:81:9a:95:09:46:7c:59:1d:27:8b:9c:18:59:f9:7b:
03:cb:3d:a0:2c:a6:5b:47:57:9d:06:66:2f:ca:f9:c5:80:43:
23:28:b1:c2:3e:3e:d5:7e:10:5d:5e:e5:aa:ba:27:7a:3d:4e:
de:e4:7b:44:c8:0f:03:39:aa:c6:1a:5f:e4:78:22:ed:fd:be:
0f:7a:f4:4f:2a:30:12:62:16:58:e7:93:60:91:8a:79:cc:7a:
92:d0:13:5b:aa:99:5d:27:d0:3c:49:89:92:9a:a0:7d:34:ea:
22:01:4a:91:0d:f1:40:45:4f:41:9f:33:03:50:df:46:ca:1e:
6a:05:9d:70:e9:93:8e:65:c2:2f:c0:ff:12:86:3c:da:6a:33:
71:b7:a1:9b:88:db:21:11:a4:04:bb:c3:05:8e:dc:be:b3:b1:
63:67:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org