Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/tMG3Di1Jw28ebFHUxmQ_PZMnoxM.roa
File: tMG3Di1Jw28ebFHUxmQ_PZMnoxM.roa (raw, json)
Hash identifier: PDkjJsuHsYr1TbNA5b0bxLMYeiI0kQ55R9eo0oHkDY0=
Subject key identifier: B4:C1:B7:0E:2D:49:C3:6F:1E:6C:51:D4:C6:64:3F:3D:93:27:A3:13
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA725A395E19CA1BAFE943AE2327837
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/tMG3Di1Jw28ebFHUxmQ_PZMnoxM.roa
Signing time: Tue 06 Feb 2024 18:21:16 +0000
ROA not before: Tue 06 Feb 2024 18:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199094
IP address blocks: 2a0f:b241:7e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a7:25:a3:95:e1:9c:a1:ba:fe:94:3a:e2:32:78:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4c1b70e2d49c36f1e6c51d4c6643f3d9327a313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:19:f3:93:7c:71:fc:a0:44:2a:22:f5:ea:
d3:3c:18:ef:bb:84:46:82:ff:79:ed:99:7a:ab:0d:
23:1f:af:b4:83:f3:5c:39:af:eb:86:ad:00:08:39:
ba:d1:f0:b9:f4:a2:a0:22:9a:76:dd:fe:bf:b7:66:
24:a0:c4:0f:da:2d:cc:12:e7:ff:8f:02:a1:4e:15:
02:fb:dd:21:eb:ce:2c:f2:d2:be:80:0a:f0:4d:39:
01:8c:88:bf:fc:1e:85:34:27:50:d6:bf:b8:0f:59:
5d:65:81:ef:c5:b5:4a:72:06:36:86:2b:40:94:6f:
b5:76:e3:19:89:b5:e8:01:86:a4:28:49:13:23:38:
3b:ea:84:0d:45:92:20:7f:7b:bb:1a:5d:99:bb:45:
9b:de:42:6c:78:6a:b4:e8:21:4d:c4:46:c2:94:22:
85:cd:60:aa:71:5d:b1:de:8d:fa:b7:88:d1:7f:a9:
b8:1c:d4:33:86:78:ba:27:5e:91:23:05:be:8e:98:
13:b6:fc:4e:48:97:a4:cf:5d:fd:28:5d:42:a6:d9:
16:b3:01:07:00:24:6a:db:86:59:b6:01:e7:4c:77:
fc:6e:40:6b:47:54:03:88:bb:25:fa:7a:d2:51:1c:
c8:71:30:66:f2:d7:ad:9a:32:0b:7a:0c:65:fa:87:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:B7:0E:2D:49:C3:6F:1E:6C:51:D4:C6:64:3F:3D:93:27:A3:13
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/tMG3Di1Jw28ebFHUxmQ_PZMnoxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:7e::/48
Signature Algorithm: sha256WithRSAEncryption
77:ce:2f:c9:89:ce:da:75:f7:ad:d2:c6:d6:08:99:eb:bf:de:
ba:00:7f:c3:5b:7b:d2:a8:5a:b5:4a:0c:40:4b:90:2b:cc:b2:
2b:49:9e:d2:5a:d5:59:0a:ab:9e:0a:69:fb:96:71:d0:aa:5e:
f1:fc:d6:ce:fe:7b:23:ce:70:19:74:ce:51:55:a3:58:dd:ea:
c8:af:ac:f9:7a:3f:b5:c1:d8:58:65:51:e0:06:29:b2:35:25:
1f:0c:9e:1e:9c:3b:46:3b:16:0b:11:7b:67:d0:4b:cc:cf:b6:
2b:b3:67:08:32:7a:ef:ca:47:f5:c8:65:9f:98:69:01:fd:42:
0c:c9:8e:8a:bf:90:be:a0:ae:ae:24:3c:55:2f:b2:74:bf:5e:
a1:ec:d4:49:51:87:e0:28:20:dd:27:ce:21:69:fd:62:9d:68:
9f:9d:e1:83:60:3d:45:be:8c:1f:a9:15:e5:f3:85:6a:0a:af:
14:dd:d1:c0:33:2e:b0:de:37:5a:7b:a9:39:fb:d6:06:02:14:
c3:47:c4:0b:a9:a8:a0:23:e7:67:40:69:8b:4c:4b:58:41:5d:
f3:32:7d:ea:6d:e9:dc:9b:9d:8a:0b:9b:ba:f9:07:da:70:cf:
0a:4b:79:ba:0d:59:64:bb:de:f4:5a:14:83:6d:43:e3:04:13:
3b:db:41:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org