Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qxvDc42r9icPJj0j5X83e83Rsbs.roa
File: qxvDc42r9icPJj0j5X83e83Rsbs.roa (raw, json)
Hash identifier: U1MOPn5RxwTFRXdT1z7TcP2cS+2yf8MO0exMcbhTj08=
Subject key identifier: AB:1B:C3:73:8D:AB:F6:27:0F:26:3D:23:E5:7F:37:7B:CD:D1:B1:BB
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAD8F76A474B2474B25BE7D23CE0152
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qxvDc42r9icPJj0j5X83e83Rsbs.roa
Signing time: Tue 06 Feb 2024 18:28:17 +0000
ROA not before: Tue 06 Feb 2024 18:28:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216107
IP address blocks: 2a0f:b241:109::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ad:8f:76:a4:74:b2:47:4b:25:be:7d:23:ce:01:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:28:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab1bc3738dabf6270f263d23e57f377bcdd1b1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:78:ff:f4:8e:64:5a:6d:f0:24:df:5c:17:
a7:bc:65:1c:0f:c5:82:0f:41:ce:6a:af:fd:de:71:
df:c6:10:f0:63:a8:9c:24:92:c5:27:05:32:7b:80:
e8:c5:ef:af:5d:33:a7:d3:ca:86:56:93:5a:4b:e0:
b5:6e:73:66:59:34:39:28:19:8c:92:1a:d5:64:0d:
f0:ca:13:23:e1:16:d2:28:40:1e:0c:7a:c6:63:18:
66:ea:08:62:8c:9b:aa:de:17:48:50:ab:f9:16:25:
a0:8f:24:c7:31:d0:ef:97:75:2a:7e:39:65:b0:ac:
49:54:22:c9:18:61:47:69:93:04:96:d0:77:af:20:
0c:e8:94:08:54:e3:12:cc:42:c4:14:72:ff:18:8e:
43:dd:77:6a:fb:03:5a:5b:84:01:a5:5d:bf:02:a3:
82:f0:9a:75:cf:ad:fb:64:ee:0d:ae:f8:3b:9c:3e:
19:07:73:6c:e5:3b:3b:04:43:88:d2:cf:42:79:ac:
34:9c:4d:3c:54:da:2d:6f:b3:9a:38:d0:f4:dd:c3:
65:eb:fe:ba:ee:1b:97:b3:88:d4:21:75:c6:2e:b8:
e3:48:13:ff:d0:48:77:bb:4c:27:be:f2:04:b7:45:
63:a9:93:54:b2:0c:f3:f5:11:21:42:d4:1a:6d:aa:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1B:C3:73:8D:AB:F6:27:0F:26:3D:23:E5:7F:37:7B:CD:D1:B1:BB
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qxvDc42r9icPJj0j5X83e83Rsbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:109::/48
Signature Algorithm: sha256WithRSAEncryption
38:0e:47:18:76:2a:5a:e7:f1:04:75:43:83:a1:4e:36:de:ed:
6b:45:6b:7c:23:d6:8f:6b:75:b1:5d:99:2a:dc:67:cf:ef:6f:
ac:86:a4:9e:08:94:e1:fa:5d:78:38:87:98:44:5b:0e:01:ae:
c7:73:11:e4:54:fd:9c:a4:10:18:71:f9:5a:7b:c8:2b:5e:f8:
7b:ef:14:94:c2:18:f6:ca:6e:1b:b3:5c:28:ca:7d:45:08:77:
ff:cf:4f:71:7b:c9:46:3c:05:1b:54:a0:71:37:23:7f:cf:cf:
f9:33:a5:5e:eb:31:7d:40:cd:4f:a2:12:a1:70:43:7c:a5:f4:
54:31:4d:40:16:94:d2:d3:46:4e:6f:d6:ce:1a:43:89:4b:86:
12:73:7e:f3:44:d6:55:51:52:02:cf:de:df:14:d2:83:35:7d:
be:ec:ea:be:25:56:9b:2a:bb:fe:30:b3:23:69:69:a1:9c:9a:
70:37:3f:f5:aa:29:41:86:28:dd:65:1b:51:c3:13:f1:a0:b1:
0c:fa:83:b6:08:c9:08:70:0d:39:99:69:a6:81:11:6b:5c:2b:
7b:50:37:84:b0:10:93:6b:c3:90:83:3d:d6:42:bf:27:b0:fb:
ea:88:0e:24:a2:2e:53:0d:c4:33:07:9d:9e:ec:86:df:6f:1a:
c4:08:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org