Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oE_iF_Yx9ODUiuS9D6-zfHIrr14.roa
File: oE_iF_Yx9ODUiuS9D6-zfHIrr14.roa (raw, json)
Hash identifier: ISrpoltTDtcLngMtTxpImX307yil0UFGLc773U8vSLA=
Subject key identifier: A0:4F:E2:17:F6:31:F4:E0:D4:8A:E4:BD:0F:AF:B3:7C:72:2B:AF:5E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACA89D7F372C3766AC30B614623CF2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oE_iF_Yx9ODUiuS9D6-zfHIrr14.roa
Signing time: Tue 06 Feb 2024 18:27:18 +0000
ROA not before: Tue 06 Feb 2024 18:27:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212347
IP address blocks: 2a0f:b241:101::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:a8:9d:7f:37:2c:37:66:ac:30:b6:14:62:3c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a04fe217f631f4e0d48ae4bd0fafb37c722baf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:5a:a8:b4:f1:23:93:45:32:45:76:26:69:
c0:c7:35:5c:97:c6:2a:c9:a7:12:7a:e3:5c:43:ab:
c5:93:38:d4:ef:d9:e1:9d:2a:93:3d:d8:eb:61:da:
0e:47:f5:20:eb:33:fe:88:69:be:f6:1a:7f:7d:ba:
17:6f:8a:9f:02:96:bf:ad:cb:5b:20:bd:bc:45:62:
14:ac:ae:20:90:d8:37:fa:17:c1:0f:ca:a0:7f:9f:
b8:80:2a:f6:53:f4:db:8b:0d:87:fa:20:d9:95:19:
66:82:6e:f9:30:1f:db:28:d1:63:b9:1c:9f:a9:23:
af:fc:8b:df:e5:82:57:cb:3a:54:ad:b0:6e:47:c1:
0f:08:11:de:9c:8e:7f:99:a1:05:31:d1:03:db:db:
89:56:52:6e:88:5a:6a:57:a7:aa:43:fb:8c:5d:0d:
3f:fb:d1:2f:19:64:47:28:6d:37:04:ec:78:77:79:
58:28:1f:5b:3e:07:8f:2e:e6:b3:ff:39:0d:bd:7b:
c0:8f:b0:7f:dd:cb:c9:4f:80:0b:a3:7f:bb:cd:13:
df:c1:72:69:be:ba:cf:a3:bb:2a:fc:f4:24:ff:26:
f0:16:a6:04:c4:6a:48:1e:bf:c8:b2:d5:5a:0a:43:
d1:78:36:80:c6:98:f9:1e:91:2a:e9:b4:f9:99:0d:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4F:E2:17:F6:31:F4:E0:D4:8A:E4:BD:0F:AF:B3:7C:72:2B:AF:5E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oE_iF_Yx9ODUiuS9D6-zfHIrr14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:101::/48
Signature Algorithm: sha256WithRSAEncryption
10:bc:a1:30:0c:ac:8b:21:ca:6f:0b:87:53:35:97:91:5c:62:
85:13:5b:65:ab:e9:db:ae:49:fd:0a:92:25:bb:d7:ca:6d:38:
fb:88:7a:70:70:65:07:50:77:ce:6f:3d:4b:ab:13:27:6e:2e:
ce:31:fe:e6:74:f1:5b:01:76:83:22:1c:36:f6:79:44:ec:b2:
fe:d5:ed:43:87:2d:12:29:03:4c:64:27:2e:5f:79:3a:4c:82:
5b:19:68:e3:1b:9d:5a:b7:7e:61:96:21:9d:b1:73:76:17:de:
69:73:78:b9:ff:47:e8:4e:6c:d0:f6:df:d7:13:60:54:8f:32:
27:5d:6f:79:bb:54:48:9b:4f:f4:32:d2:79:f2:a0:fc:7b:65:
06:f3:16:c8:4e:e6:cb:3a:39:61:a8:0f:17:dc:91:69:18:8a:
42:96:6c:1d:f7:90:be:d9:da:96:64:50:1b:14:6a:53:be:c8:
9f:04:bb:9c:6f:f1:ea:f1:1f:62:7f:ea:03:4a:45:3c:6b:4f:
28:48:3d:7d:12:34:d5:9d:4a:27:74:6d:b5:6f:4b:6e:42:c4:
11:10:d9:8a:88:ab:2a:81:c2:a8:53:e4:c3:c7:49:d1:8d:02:
b3:59:66:1f:ab:a2:85:4a:77:5a:7e:f1:0c:d6:1e:01:03:0f:
f9:d8:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org