Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pkDofaVFhbSHxFFbjHX6tBpIE1g.roa
File: pkDofaVFhbSHxFFbjHX6tBpIE1g.roa (raw, json)
Hash identifier: pYJgOy4uk3aMKo29g3HlgooyBKZRqWEZcDIVloKnEAg=
Subject key identifier: A6:40:E8:7D:A5:45:85:B4:87:C4:51:5B:8C:75:FA:B4:1A:48:13:58
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F072539F7CA5437C9904FA3A0880FE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pkDofaVFhbSHxFFbjHX6tBpIE1g.roa
Signing time: Wed 07 Feb 2024 05:00:35 +0000
ROA not before: Wed 07 Feb 2024 05:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198663
IP address blocks: 2a0f:b241:7a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:72:53:9f:7c:a5:43:7c:99:04:fa:3a:08:80:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a640e87da54585b487c4515b8c75fab41a481358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:40:ec:c9:a3:e3:dc:1c:0a:d4:b2:f6:b3:
52:92:be:b9:73:64:ad:d0:cd:ac:7a:ae:a3:a7:a2:
90:c0:e9:10:67:96:11:4f:5a:47:64:35:30:b9:9d:
ed:2c:44:78:2a:47:38:c6:6f:2b:ca:ea:3e:d5:9f:
d8:2b:cc:54:3c:a2:b7:6f:df:3d:02:a2:d5:69:48:
7b:66:18:8e:20:ea:a8:0c:d0:5e:7a:94:1d:45:44:
c6:e2:d3:38:13:2e:ff:81:38:2b:a0:56:42:e6:26:
de:36:23:f5:f8:a0:91:87:b8:c5:35:76:55:f7:67:
58:4a:28:ed:31:33:00:fd:22:bc:70:a8:74:34:82:
3d:1d:3c:b9:6b:fc:cf:36:87:aa:8e:f1:7b:4b:80:
d8:2f:56:f8:f2:cd:e5:d2:6b:29:68:26:64:8a:7c:
50:91:3a:86:5f:a1:58:18:5a:14:ab:fb:65:47:41:
5e:af:da:18:6f:59:f9:c8:fe:31:ab:a2:72:c4:5c:
fb:ef:d0:69:89:03:74:ac:97:4d:e3:04:26:31:c7:
98:79:cb:38:56:26:82:b9:ed:e9:bf:bf:8c:9c:d7:
4a:bb:77:1c:4a:7e:c6:d1:a2:01:b0:b0:78:c5:8e:
c0:e4:5d:cd:fd:63:53:e3:c0:fa:bb:43:dc:10:17:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:E8:7D:A5:45:85:B4:87:C4:51:5B:8C:75:FA:B4:1A:48:13:58
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pkDofaVFhbSHxFFbjHX6tBpIE1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:7a::/48
Signature Algorithm: sha256WithRSAEncryption
48:f7:28:d6:0a:75:b6:7f:07:8b:d8:db:94:31:f4:1d:de:8d:
67:ec:26:a0:81:11:a9:ad:17:82:0c:43:1d:48:0d:9e:26:32:
c2:4c:06:98:44:62:4a:b0:be:7e:1e:7a:dc:9c:10:27:85:da:
b2:90:65:b7:49:a7:b3:24:24:0c:92:97:5f:09:3a:43:d1:4a:
53:a5:08:ec:75:8f:08:cc:f3:60:71:fc:90:22:7e:13:1d:7f:
38:db:5e:0e:50:0e:5f:25:77:8f:ae:e4:c2:7d:07:6b:ec:bd:
92:75:b0:00:0e:40:48:2e:e7:82:70:e7:b1:57:62:8e:09:e1:
7c:eb:bc:ca:48:0c:9b:df:84:86:b3:af:6c:13:c3:dc:c0:da:
cb:d6:37:c2:83:c1:d1:c1:d1:dd:10:34:4b:9f:31:2b:86:36:
55:eb:01:8c:df:54:7d:e4:eb:65:27:99:a3:1e:5d:57:10:49:
17:77:87:dd:bb:ab:09:46:23:ed:8e:38:fc:bc:be:60:d6:44:
8a:8b:63:d6:93:34:40:08:34:20:39:c1:d3:ce:e8:af:d9:90:
b6:75:ff:29:0e:74:ff:27:8e:33:de:35:84:8a:71:a0:db:fe:
d4:86:00:86:c2:3a:69:50:55:49:62:30:36:41:e2:48:6a:ef:
a6:24:c4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org