Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/p4WBOdB_oghEOhzjDbDtrX6mn_A.roa
File: p4WBOdB_oghEOhzjDbDtrX6mn_A.roa (raw, json)
Hash identifier: yKVZgVRsGcN6IviFS6+gMyomiuhz+Ge4w0Vbi7dZ5fU=
Subject key identifier: A7:85:81:39:D0:7F:A2:08:44:3A:1C:E3:0D:B0:ED:AD:7E:A6:9F:F0
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F08E3590A552ED3EA036BC4C7F41DE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/p4WBOdB_oghEOhzjDbDtrX6mn_A.roa
Signing time: Wed 07 Feb 2024 05:00:42 +0000
ROA not before: Wed 07 Feb 2024 05:00:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203655
IP address blocks: 2a0f:b241:137::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:8e:35:90:a5:52:ed:3e:a0:36:bc:4c:7f:41:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7858139d07fa208443a1ce30db0edad7ea69ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:41:17:11:a1:07:79:3a:6b:a7:2f:40:53:
74:67:f7:26:5e:2d:93:2e:6c:46:ea:c3:66:35:b1:
78:e3:ef:25:b7:ef:77:46:5c:b2:b8:fe:11:c6:50:
06:a9:bd:d3:16:c1:7f:30:87:13:82:83:d9:ce:28:
f9:db:4c:e5:b0:ad:e6:8b:48:2e:9e:08:76:81:b9:
72:10:ca:6a:e7:35:09:58:42:7b:10:b3:ec:e0:78:
32:00:3f:3f:9d:6c:dc:ae:9a:7a:6f:29:3a:93:f5:
49:cf:03:b1:c0:be:d0:16:cf:03:6c:fd:bf:e8:38:
58:63:74:84:b1:42:29:c9:4f:7c:6a:5a:9e:3e:b7:
5b:24:b1:61:4e:e2:31:7d:76:4d:dd:be:2b:11:ff:
6d:5e:0c:52:ef:04:9b:24:71:a2:7a:80:57:bb:a8:
7a:ae:e3:da:9d:3d:c8:93:27:30:39:f6:8a:8f:ce:
a6:5f:b4:4d:07:0a:3a:a2:fc:9b:7b:ea:7a:ad:a7:
2e:0e:8b:b8:cc:c1:24:97:bf:cb:75:54:02:5f:56:
a7:4d:6d:0e:2c:fd:4e:4e:71:f6:e4:22:08:dd:70:
5e:b0:a5:31:a0:e1:fe:c0:bc:c3:61:c9:38:7a:b0:
16:fa:31:8e:c5:9e:d5:61:85:fe:2a:63:e4:d0:21:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:81:39:D0:7F:A2:08:44:3A:1C:E3:0D:B0:ED:AD:7E:A6:9F:F0
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/p4WBOdB_oghEOhzjDbDtrX6mn_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:137::/48
Signature Algorithm: sha256WithRSAEncryption
14:e9:60:e9:3d:d3:55:33:b2:5c:6d:86:61:cd:46:0a:b7:c6:
c1:e6:62:bf:d2:65:b7:c5:76:24:22:2e:db:43:de:e6:70:93:
6d:be:63:99:9b:f5:7e:98:58:1e:e1:b8:81:8b:3d:cc:68:83:
6c:85:02:ea:54:b6:23:19:00:67:7c:e7:2d:59:d6:d6:f4:42:
46:f2:e6:81:a8:b0:ba:58:a4:ef:01:5a:dc:e8:b1:21:d6:71:
bb:25:f5:6d:99:c9:c1:9e:34:85:f0:93:37:4d:5d:83:0c:85:
9e:66:2e:1a:95:bf:5e:2a:67:92:bb:f1:ce:b2:51:bc:3d:dc:
5c:ad:03:a1:fd:73:c0:4e:64:02:a5:22:2a:ae:ec:09:38:ef:
4b:b5:93:6a:0f:5d:82:63:ef:50:5a:a5:c0:7f:35:56:bd:a4:
6e:00:8e:a8:ac:2b:4b:57:dd:a8:05:3a:03:1c:57:5f:ab:b5:
b3:b4:f7:7a:1a:75:5f:bd:49:88:9a:5d:99:02:6c:07:f6:46:
83:38:22:cf:31:37:8e:70:22:45:32:f4:f5:f8:3a:b6:f9:56:
83:99:9e:c9:a4:35:d8:97:53:e1:6a:21:0e:4e:c1:3b:c4:63:
dc:5e:4c:bf:a8:9b:b1:e3:10:28:1e:19:9c:b8:9b:1d:11:94:
79:6e:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org