Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qS6Zi_1PyBVPQV9ElPjDEk5ku1U.roa
File: qS6Zi_1PyBVPQV9ElPjDEk5ku1U.roa (raw, json)
Hash identifier: tVt0zfOJfCJoNFNOEED7X6T6RbswAhDoeZWq0O/3pwk=
Subject key identifier: A9:2E:99:8B:FD:4F:C8:15:4F:41:5F:44:94:F8:C3:12:4E:64:BB:55
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0B56ADD4BD113F9175E4F2FA468B7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qS6Zi_1PyBVPQV9ElPjDEk5ku1U.roa
Signing time: Wed 07 Feb 2024 05:00:52 +0000
ROA not before: Wed 07 Feb 2024 05:00:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215747
IP address blocks: 2a0f:b241:54::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:b5:6a:dd:4b:d1:13:f9:17:5e:4f:2f:a4:68:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a92e998bfd4fc8154f415f4494f8c3124e64bb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:24:96:9a:6f:de:44:8d:9e:ad:0b:65:33:4b:
6c:c5:33:0d:da:41:14:27:08:8f:8e:08:9b:0f:97:
33:59:76:0f:97:5b:1d:30:3d:e4:0e:c6:72:99:b6:
53:ee:69:a2:48:f2:6e:8d:ea:be:83:ba:5a:98:e9:
97:2e:f1:1d:a1:a8:62:c0:03:d1:63:8a:0a:1e:b5:
4a:1f:a6:1e:82:f1:3f:ba:d1:91:e5:b3:c1:e4:76:
21:e7:8e:64:0a:87:3e:44:12:a4:2a:b4:83:9d:84:
90:d9:9a:2d:d2:a6:b6:e8:b8:b1:a9:8c:67:80:13:
00:74:5a:21:35:3d:a1:47:e8:fc:bc:1f:9e:37:3b:
72:e8:73:0b:80:38:9e:41:03:cf:b8:6c:05:ee:39:
fd:4f:b4:c1:40:3d:d4:8a:7f:c3:99:06:dc:b6:2a:
b4:8a:0e:8a:cb:e0:92:6d:9a:77:10:1d:2a:f4:9a:
c1:06:77:cf:b6:f4:6d:91:d5:8b:da:ed:5d:c8:17:
3a:2c:52:6f:83:e6:9b:78:1d:dc:fa:d0:04:5e:15:
dc:22:20:4c:65:e5:74:18:c2:b6:6a:da:13:67:99:
6c:ae:a9:d6:2b:ea:b4:8d:6c:0f:89:f8:1c:d2:90:
53:94:8d:75:ab:fd:ed:32:7c:72:b2:77:ef:b7:7f:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:99:8B:FD:4F:C8:15:4F:41:5F:44:94:F8:C3:12:4E:64:BB:55
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qS6Zi_1PyBVPQV9ElPjDEk5ku1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:54::/48
Signature Algorithm: sha256WithRSAEncryption
69:1a:34:b3:82:da:cf:35:82:cd:8b:18:07:d6:0e:ff:91:04:
e0:04:85:6b:71:2e:9a:14:23:0f:66:4a:49:0a:4f:82:3b:5b:
ca:81:67:c9:39:cd:d9:5d:19:9b:e4:39:59:e5:5b:34:70:d3:
37:44:53:40:ef:62:9c:2c:cd:3d:01:dd:28:c5:9e:4e:99:10:
0d:6e:54:c0:cf:63:94:dc:2a:c5:d0:bd:d3:db:5f:43:0d:d7:
ca:d5:cd:0d:b6:c2:1d:1e:72:b1:9e:9b:68:10:16:01:6a:c8:
6e:06:37:c5:c4:bc:02:ea:a0:4e:d5:ab:2f:62:03:73:f6:c8:
e6:fc:28:41:08:a6:a6:5b:9e:29:ff:36:04:37:6c:98:67:3e:
d2:0c:e3:8b:86:98:a7:ba:ff:cb:78:24:9e:17:e6:96:73:fc:
6e:70:1d:53:9c:d2:66:d6:06:39:25:09:a6:78:ed:4f:96:d9:
7e:19:7e:83:3a:44:72:11:02:fb:69:1a:7b:06:25:60:18:63:
74:21:fe:84:3d:0a:95:e2:09:ac:31:c5:71:8f:25:f4:34:10:
48:91:17:47:36:a4:89:2e:a5:bd:e0:26:19:d9:75:ef:05:aa:
45:a6:a7:41:fd:dd:c1:50:06:57:45:c6:ce:08:93:ac:dd:92:
03:88:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org