Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/tGVW6HIxRJPgxQ1Un9LArhbtJes.roa
File: tGVW6HIxRJPgxQ1Un9LArhbtJes.roa (raw, json)
Hash identifier: gMIhLoff7dT2G0axQW4tPAcNvXH+Tmp076woPFzY6Qw=
Subject key identifier: B4:65:56:E8:72:31:44:93:E0:C5:0D:54:9F:D2:C0:AE:16:ED:25:EB
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F93A585645C4FB23C7D6CCA2D498AE8
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/tGVW6HIxRJPgxQ1Un9LArhbtJes.roa
Signing time: Tue 06 Feb 2024 17:59:59 +0000
ROA not before: Tue 06 Feb 2024 17:59:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57156
IP address blocks: 2a0f:b241:2f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:93:a5:85:64:5c:4f:b2:3c:7d:6c:ca:2d:49:8a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:59:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b46556e872314493e0c50d549fd2c0ae16ed25eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:c7:11:a2:21:66:69:cc:e4:c5:30:e0:89:
e2:81:b2:78:06:6f:0b:90:ff:26:ca:c3:ca:6a:cd:
29:e7:04:e0:f5:d9:7b:c3:be:17:b9:4b:62:47:23:
30:73:fc:73:ed:ff:ac:98:c5:ac:25:ff:6a:15:38:
f2:cd:ea:63:b2:6d:ed:0f:23:c4:4e:7b:49:36:da:
1d:17:99:d2:74:44:2f:4a:ba:f1:5a:8f:3b:b3:bf:
02:db:c8:01:3f:47:03:eb:56:19:c1:fc:28:dc:27:
b8:dd:25:2b:35:1d:f5:42:c6:4e:c9:7a:e5:f4:17:
3c:94:91:85:47:70:31:3f:55:b6:28:18:d6:32:97:
be:8f:ed:11:f9:61:1a:90:cd:b4:ee:a1:01:dc:12:
0f:a9:c7:c3:d7:5b:b2:80:12:a4:d7:39:f0:b2:06:
bd:f1:c2:b3:b8:c8:c9:af:10:7c:97:54:2a:51:d7:
9e:94:d3:9f:7b:bb:90:81:ca:72:71:6e:b7:d8:3c:
b6:6a:2c:8f:2a:f0:52:e9:13:1e:91:0e:7c:62:8b:
ac:62:22:06:0e:95:5d:d4:3b:f5:8a:dd:f7:02:45:
25:74:99:1b:6b:ab:dc:b5:74:87:3c:07:dd:aa:e0:
ad:90:0b:ed:32:11:8c:90:3a:a4:ad:51:39:6c:15:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:56:E8:72:31:44:93:E0:C5:0D:54:9F:D2:C0:AE:16:ED:25:EB
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/tGVW6HIxRJPgxQ1Un9LArhbtJes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:2f::/48
Signature Algorithm: sha256WithRSAEncryption
66:ff:73:56:22:8b:82:8e:c2:2d:2a:35:74:63:88:94:0c:a8:
ca:d4:a3:00:8f:a7:43:9d:7b:d4:43:2c:3d:31:95:78:15:63:
d5:ad:a5:39:c3:d1:c0:4d:f6:dc:a5:05:09:da:f8:92:14:c3:
ee:67:60:86:f1:f0:60:77:72:a3:59:7d:32:6f:d3:85:a0:83:
3f:e7:c1:78:24:5b:53:09:6a:6f:9a:e8:7b:99:af:05:74:9d:
7c:cd:e0:83:f7:b2:fa:64:1a:5f:73:ce:9c:b9:10:5f:58:78:
60:50:07:c5:bd:45:57:72:a7:94:53:6e:78:32:ad:90:f9:8f:
b5:0c:6c:cc:a6:88:ec:02:07:b4:50:57:5a:07:76:3c:30:c1:
22:e5:ed:f3:67:a2:82:75:92:77:3b:cb:56:4a:a9:3d:a1:a2:
4d:c4:37:a6:b6:5d:86:75:c2:58:3e:1d:c9:69:6d:fa:ae:84:
df:c4:00:9c:e5:da:a5:0b:c2:cc:22:07:31:d8:9d:ce:d6:08:
53:76:af:3d:03:5d:19:11:d0:eb:63:16:ab:f9:fc:6d:ad:2c:
b4:a4:1c:b1:d0:ec:7e:34:1d:ba:45:99:6f:d4:5e:6b:ae:db:
32:64:23:2f:c6:5d:36:25:6e:e5:50:70:b2:c6:f5:a1:5b:e6:
b6:bd:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org