Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/tsJ6mwp3x-I7mRqsUbdDr2qSVC8.roa
File: tsJ6mwp3x-I7mRqsUbdDr2qSVC8.roa (raw, json)
Hash identifier: Tb6SmHFX+qvirz9o0GQBY+ACPE75KN2OFv6P9DvdvJk=
Subject key identifier: B6:C2:7A:9B:0A:77:C7:E2:3B:99:1A:AC:51:B7:43:AF:6A:92:54:2F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0A00B8B9816CA888840E1809F6FDF
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/tsJ6mwp3x-I7mRqsUbdDr2qSVC8.roa
Signing time: Wed 07 Feb 2024 05:00:46 +0000
ROA not before: Wed 07 Feb 2024 05:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210152
IP address blocks: 2a0f:b241:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:a0:0b:8b:98:16:ca:88:88:40:e1:80:9f:6f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c27a9b0a77c7e23b991aac51b743af6a92542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:96:95:23:48:6c:2f:83:05:7d:01:e9:6b:
09:2c:f8:f1:46:87:25:59:e6:55:52:a6:fc:c3:24:
b5:c6:b0:ce:e5:cf:6f:65:b2:12:24:70:ad:8d:31:
f5:3a:d3:11:ec:fe:cd:ff:c3:0e:f4:36:fe:f7:ed:
38:3b:57:b9:9b:a9:2c:25:c7:32:be:e4:27:c7:90:
02:fc:db:80:80:a5:40:17:b8:aa:52:69:ea:74:d8:
9f:15:d0:6f:d6:bd:fd:d6:50:77:a6:d7:03:73:a0:
ad:2a:7a:35:38:11:cf:2d:46:bd:2a:1f:d0:04:4f:
d4:6d:0b:cc:14:f9:e6:e5:74:08:93:91:b5:18:cd:
e5:46:88:ae:32:9f:2f:8c:7f:b8:c6:f8:c2:5f:77:
8b:5b:3c:20:22:78:c0:44:c0:3b:ac:e4:7d:e4:7e:
f5:38:5f:d1:c9:e5:7e:6e:b5:69:e5:5d:de:9e:51:
8e:80:6f:7f:8c:8f:43:b8:f3:f7:59:dc:8f:fb:92:
f3:d0:10:f2:08:80:1d:86:69:25:72:26:91:0c:95:
0b:1b:cc:41:5a:15:19:e4:80:51:34:bb:81:74:57:
ff:43:96:b9:3f:4b:19:2f:cb:5e:9c:e1:75:37:f7:
9e:c4:3a:c4:15:22:03:23:cf:ce:fc:09:1a:13:2b:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C2:7A:9B:0A:77:C7:E2:3B:99:1A:AC:51:B7:43:AF:6A:92:54:2F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/tsJ6mwp3x-I7mRqsUbdDr2qSVC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:a::/48
Signature Algorithm: sha256WithRSAEncryption
1a:b1:46:78:b5:04:ad:da:49:5d:21:2d:da:3d:fc:5b:78:b4:
cc:71:7e:f6:2a:6b:cf:93:24:ae:cb:01:8a:78:3a:3f:18:25:
20:90:45:51:f9:2b:95:0c:a8:c3:fd:55:44:77:c4:02:ac:98:
9a:bb:1a:81:c7:21:2c:58:d1:d1:35:6c:16:4a:70:cf:6b:15:
18:6b:16:90:e5:af:c4:c1:d6:37:79:a8:54:02:c9:0f:df:ea:
22:c6:53:e7:be:48:98:a5:d7:3d:cf:96:98:35:c2:b3:55:aa:
77:18:a2:11:42:38:9e:f3:e4:7f:61:c0:3e:31:17:00:4f:66:
8b:0e:7a:d6:64:13:b6:57:ad:11:b5:3c:af:05:91:d1:f9:39:
7d:5c:64:9c:8d:2f:0c:c8:fd:94:c3:13:97:46:6e:ed:f8:be:
49:dd:b3:46:2f:43:8a:f1:81:fd:0c:52:f4:24:a7:5d:75:e2:
95:d5:21:4e:f6:35:4d:2d:7e:de:f9:d9:6c:fc:d4:36:2c:bb:
46:db:d4:0e:a7:a8:d3:c7:4b:96:60:27:47:4f:80:0f:29:22:
b1:df:34:97:c0:1c:80:0d:74:9a:4c:76:90:41:56:28:92:30:
85:8c:57:45:f9:18:2d:53:d5:4d:a5:e9:00:e4:8f:05:f5:6a:
fc:28:2b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org