Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/td7Xcb0hzeTvLNzJTHoNIDAOEQQ.roa
File: td7Xcb0hzeTvLNzJTHoNIDAOEQQ.roa (raw, json)
Hash identifier: iddBu/c6II+rre4ZYjw7Ux4ConBOH1SM0wpKxRLxS/A=
Subject key identifier: B5:DE:D7:71:BD:21:CD:E4:EF:2C:DC:C9:4C:7A:0D:20:30:0E:11:04
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAD90F27BA87BEE6936C77893C548C4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/td7Xcb0hzeTvLNzJTHoNIDAOEQQ.roa
Signing time: Tue 06 Feb 2024 18:28:17 +0000
ROA not before: Tue 06 Feb 2024 18:28:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216118
IP address blocks: 2a0f:b241:10a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ad:90:f2:7b:a8:7b:ee:69:36:c7:78:93:c5:48:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:28:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5ded771bd21cde4ef2cdcc94c7a0d20300e1104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:7e:3b:44:00:dd:60:7b:3e:1c:40:7c:6d:
67:aa:0b:cb:e0:96:d2:05:c5:f4:91:24:92:b5:cf:
c7:31:d2:1c:c5:e3:83:4a:83:bc:c5:20:e0:b2:66:
5a:e9:28:06:68:8a:b5:98:c3:36:ee:99:df:ac:0b:
37:3f:b9:2e:40:81:b5:40:02:d5:4d:c3:2a:22:f4:
c0:35:83:b6:3b:a7:8d:b8:ba:ea:af:20:fa:a6:ad:
03:d4:e4:58:5a:54:5a:58:e0:1a:ee:a3:62:1f:2b:
6f:21:92:a9:d5:29:f5:b1:3c:6b:b3:da:4f:b2:c8:
78:2b:1d:5b:dd:0e:57:5d:8b:82:d1:c2:20:6e:01:
91:da:be:48:5b:c3:56:bc:3b:a6:98:7d:ec:55:60:
68:6e:0e:c0:4a:df:02:fa:2a:da:68:0c:0c:20:e0:
47:f7:34:5b:e6:fe:e6:b0:6f:8d:b5:36:41:6b:3f:
ff:64:db:e3:b0:97:12:18:14:65:ef:1e:6a:f0:c2:
77:a7:ba:46:ea:da:b2:98:f1:1a:97:f9:99:b4:9e:
53:57:4d:ca:c8:61:fe:88:43:09:2f:b2:6f:61:a5:
2f:2b:d9:67:43:0b:d6:20:62:22:11:46:12:2f:3c:
0a:22:65:4c:93:02:75:93:69:87:db:55:dd:b4:8a:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DE:D7:71:BD:21:CD:E4:EF:2C:DC:C9:4C:7A:0D:20:30:0E:11:04
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/td7Xcb0hzeTvLNzJTHoNIDAOEQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:10a::/48
Signature Algorithm: sha256WithRSAEncryption
24:8f:1d:22:29:cf:69:b8:0d:35:3e:6e:1d:49:69:80:6d:62:
87:a7:a5:ed:c6:4e:74:2d:57:f4:c4:25:9e:46:c7:35:88:41:
1c:d8:9f:a2:5d:84:0b:ca:28:23:d2:0a:a0:3a:9c:2a:fb:70:
07:1a:bc:41:89:90:5b:a3:f0:e7:dd:b1:7c:38:da:50:8e:d2:
1f:3d:4e:e5:ee:1c:cb:19:74:4a:d1:87:79:22:62:c4:e6:a4:
d4:2d:b0:8f:3c:95:d5:9e:4a:e2:73:d7:52:fe:64:76:63:2c:
0f:3f:43:d0:fe:70:60:76:29:a2:e8:ce:15:cf:fd:36:d1:f7:
99:90:4f:0a:9e:50:f7:82:8d:3f:80:19:fa:f4:2e:5e:65:7e:
c3:c9:a2:9c:91:61:e5:29:62:58:6c:0e:d2:59:f9:80:40:45:
3e:b1:d6:b8:44:17:08:75:27:dc:cd:22:a4:8b:26:28:5e:79:
10:e6:ed:f2:20:1b:d7:8d:9c:cb:89:89:ec:f3:73:9f:ed:61:
43:b6:78:64:80:74:ad:75:30:ae:91:a9:9c:bf:3f:d1:3c:af:
c6:6b:9c:5c:42:15:4a:8f:11:81:d0:e6:f3:e7:ec:a6:58:52:
b5:bd:38:d3:43:87:14:b8:62:30:d1:31:b9:f1:84:61:5d:33:
35:13:b2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org