Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/plOAL6xqVY0UQKMOwH4TjJ-WmQE.roa
File: plOAL6xqVY0UQKMOwH4TjJ-WmQE.roa (raw, json)
Hash identifier: 6LeyMfv8NXhxx5GllyINNv+T65vCTpPPG0xinFw3CQc=
Subject key identifier: A6:53:80:2F:AC:6A:55:8D:14:40:A3:0E:C0:7E:13:8C:9F:96:99:01
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7DFB9265D91957ED9B55718AD1F5F1A1
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/plOAL6xqVY0UQKMOwH4TjJ-WmQE.roa
Signing time: Tue 06 Feb 2024 10:34:15 +0000
ROA not before: Tue 06 Feb 2024 10:34:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197737
IP address blocks: 2a0f:b241:e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:fb:92:65:d9:19:57:ed:9b:55:71:8a:d1:f5:f1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 10:34:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a653802fac6a558d1440a30ec07e138c9f969901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:41:93:24:64:3c:e0:67:69:8c:6d:25:59:
f9:df:59:5e:5a:49:ad:15:f9:83:63:7d:1d:20:45:
f1:32:1a:1e:40:49:ee:f6:b1:d5:33:cf:cb:13:d7:
8a:fb:8b:c2:eb:f8:7f:4d:c0:82:b2:b4:c4:7c:39:
19:91:81:30:dc:1b:f9:2a:67:38:35:37:bb:29:96:
fb:b3:61:8f:fb:8e:57:88:6b:7c:61:d5:43:7e:87:
66:28:97:4b:2e:07:25:7c:71:20:a4:26:5f:0a:ec:
57:3e:f7:ac:3b:50:d3:b9:31:fa:87:d0:c3:c7:ca:
48:8c:46:c4:4e:72:ef:62:ca:5d:0f:b3:b3:e1:c1:
44:54:f9:5b:da:c4:e0:a3:2e:3d:7d:b8:38:26:15:
b9:69:43:a3:c2:e4:b1:e2:82:ef:63:23:18:d1:38:
97:f0:f0:ed:6f:14:27:ba:e0:20:2f:81:e2:db:5b:
a0:93:0d:5b:9a:47:4e:69:80:a1:be:fc:98:df:c9:
a0:65:ca:21:7c:7d:04:1d:a1:45:52:85:6f:34:13:
09:63:d1:d6:23:90:83:40:a3:c6:01:b7:0c:d5:ca:
02:0a:42:df:1c:0a:f8:26:75:15:9d:ff:09:8e:8b:
93:30:59:d0:48:df:35:eb:c7:09:65:3f:73:30:6d:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:53:80:2F:AC:6A:55:8D:14:40:A3:0E:C0:7E:13:8C:9F:96:99:01
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/plOAL6xqVY0UQKMOwH4TjJ-WmQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e::/48
Signature Algorithm: sha256WithRSAEncryption
18:02:6d:7e:21:5e:f9:88:b8:41:dc:aa:7d:8c:4e:1c:a8:f8:
2c:b7:a9:b0:3b:d5:ca:b5:ee:12:b4:62:62:32:15:45:80:4a:
b3:b0:90:dc:44:6f:2d:50:07:33:c5:d2:ef:59:0f:6a:a7:5b:
9b:74:44:3f:0e:40:90:48:68:11:c4:3c:57:bd:2e:54:40:be:
88:67:50:f2:b1:66:a5:b8:e4:e6:53:80:f2:e6:08:3a:3e:2a:
d2:24:96:23:44:c0:f7:3b:90:45:94:c3:01:22:54:99:a2:00:
99:49:f8:e9:ec:8c:31:bf:f6:ca:9d:18:a5:58:d8:ad:8f:e4:
26:26:3b:75:70:7e:ad:0d:00:b2:4f:d3:1f:93:c8:0b:9c:31:
1a:24:76:3c:d1:e2:21:3a:0c:65:69:b9:3a:fb:7b:db:65:3f:
5c:47:cf:fd:46:91:67:53:6f:e4:50:1f:23:69:e8:9a:b8:3e:
55:74:59:73:e5:25:6b:2f:71:cf:b0:59:a6:a4:34:cd:78:02:
d7:af:38:20:4a:33:42:fa:d6:11:ba:ac:66:87:c2:8d:52:fc:
ba:81:6b:2c:4a:39:b8:b7:f4:6d:ef:e9:50:38:9a:fc:7c:e6:
df:a7:fc:e4:fb:ea:d7:4f:e2:58:7e:78:28:4d:60:af:ea:4e:
dc:99:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org