Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/p_suOQo9JGTRLPdfroHeXWQT6c8.roa
File: p_suOQo9JGTRLPdfroHeXWQT6c8.roa (raw, json)
Hash identifier: gxpyuGzsqjNntiXgU+oHO+Oi1iXSgVpzOIbS/4Z326k=
Subject key identifier: A7:FB:2E:39:0A:3D:24:64:D1:2C:F7:5F:AE:81:DE:5D:64:13:E9:CF
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABB6CDD51539328C0EC1072C3DFA6E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/p_suOQo9JGTRLPdfroHeXWQT6c8.roa
Signing time: Tue 06 Feb 2024 18:26:16 +0000
ROA not before: Tue 06 Feb 2024 18:26:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204375
IP address blocks: 2a0f:b241:ea::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:b6:cd:d5:15:39:32:8c:0e:c1:07:2c:3d:fa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7fb2e390a3d2464d12cf75fae81de5d6413e9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b0:7a:dc:7c:f9:c7:eb:ad:df:c3:2c:93:f3:
03:2d:fb:83:5d:28:a3:13:7a:9c:ee:73:3e:e8:bd:
72:c4:19:0e:61:c3:5a:30:97:5b:7e:8d:cb:99:fe:
14:13:53:b9:37:e7:4c:ea:e9:1f:c1:50:1c:4c:68:
56:d7:65:0b:7a:14:2f:9b:09:f1:cd:96:f3:a3:31:
e7:83:29:61:50:56:70:5a:aa:3b:d3:97:38:d7:d7:
db:e7:24:37:e6:dd:97:ee:c5:c2:30:56:3c:99:ac:
c9:b4:7f:c1:df:c3:f4:81:0f:af:2c:4b:5e:e1:8c:
64:86:ec:9e:94:e2:2b:4a:a8:12:f9:c0:67:29:f4:
e8:b8:16:82:a5:74:73:43:eb:37:ef:a9:54:b4:e3:
d2:99:0a:1e:ac:26:9a:29:c3:9e:ee:bf:e1:46:48:
c3:54:a9:7b:a7:6e:db:74:a0:a1:8a:12:26:1e:cd:
26:5e:06:31:6b:06:bc:a8:f4:79:43:c7:c5:44:33:
ac:ad:35:25:11:8a:0d:36:8d:91:15:04:d3:39:af:
96:d4:6f:75:f8:ed:26:f2:de:41:11:27:46:b1:5e:
b8:8b:1d:35:be:64:9c:80:eb:1b:99:76:bd:6e:6c:
24:0b:7e:55:7f:36:66:0e:cc:3b:83:d9:fe:41:fc:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FB:2E:39:0A:3D:24:64:D1:2C:F7:5F:AE:81:DE:5D:64:13:E9:CF
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/p_suOQo9JGTRLPdfroHeXWQT6c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:ea::/48
Signature Algorithm: sha256WithRSAEncryption
55:a9:a4:b8:c4:78:cc:a1:c3:61:4d:5f:1d:a4:2d:00:2c:1d:
0d:8e:af:47:77:2f:7a:60:b8:99:21:26:ca:05:ab:07:0e:99:
27:e9:c7:5a:1f:f0:3a:f9:bf:a1:b7:bd:a4:d6:ff:33:c5:13:
3f:d6:b6:be:29:b3:f4:9f:8d:87:45:c8:0f:e2:6a:82:6e:1f:
91:a8:b1:66:8c:6f:e3:52:88:85:dc:08:07:b1:35:28:1a:d4:
e4:3b:98:9c:91:3c:c8:a3:9e:28:ad:92:e0:cf:b5:4a:bd:66:
f6:c7:2a:34:87:0e:a5:23:f4:8e:f4:59:11:cf:d6:a1:47:f2:
1c:1e:63:4d:4b:1d:10:e9:19:69:13:06:26:98:dd:bf:a9:66:
2d:07:4d:93:17:03:ec:03:db:57:54:23:4d:91:25:93:4b:43:
c5:fa:ef:16:41:2a:35:d8:d4:09:83:b7:70:6b:10:d4:3a:e8:
90:eb:40:65:f6:1d:34:9b:0b:11:5f:2d:c3:b6:d4:10:b4:e2:
b2:5e:9d:fa:aa:d8:ba:12:13:d0:b4:b6:3c:3c:76:60:dd:64:
8b:8d:88:bf:e2:f4:9c:da:82:5b:24:c7:dd:c6:da:a1:47:cd:
ba:29:16:05:2b:c8:ac:4c:2c:7d:6e:53:73:cc:bf:ac:87:f4:
f3:7c:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org