Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/w06IRtsWFL0SGRc-yhz63hzZNRM.roa
File: w06IRtsWFL0SGRc-yhz63hzZNRM.roa (raw, json)
Hash identifier: UlBWKfAze/zbRc85H2Ayo/Wc+4efOrV5htP9hVgrJew=
Subject key identifier: C3:4E:88:46:DB:16:14:BD:12:19:17:3E:CA:1C:FA:DE:1C:D9:35:13
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E958B50AAB45532E8C1CB39C554F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/w06IRtsWFL0SGRc-yhz63hzZNRM.roa
Signing time: Tue 06 Feb 2024 18:24:18 +0000
ROA not before: Tue 06 Feb 2024 18:24:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200895
IP address blocks: 2a0f:b241:d8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e9:58:b5:0a:ab:45:53:2e:8c:1c:b3:9c:55:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c34e8846db1614bd1219173eca1cfade1cd93513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:12:12:e4:9e:79:6c:e9:07:99:02:32:a2:9b:
b2:bd:0d:a1:0a:77:c9:65:ad:ad:72:41:f8:82:06:
ef:c9:71:8b:3a:3a:d5:af:4a:71:36:9d:51:6b:06:
a9:2d:cf:fd:da:d8:fa:cc:78:eb:1d:1f:f6:1b:1a:
35:dd:69:c5:3b:86:d9:5a:6d:76:4d:42:46:f2:fd:
ea:8e:00:63:bb:ac:0c:34:71:37:28:46:b2:74:1e:
c0:4b:e3:df:ef:a6:74:ae:b0:eb:78:51:ec:36:e9:
b8:85:a9:e9:b9:36:50:d1:de:7c:03:f4:c2:a2:27:
85:db:08:e7:11:3e:98:11:a9:ea:76:ca:66:cf:9c:
d2:1a:3d:22:a2:83:cc:a6:89:82:87:77:75:89:02:
6d:75:f8:32:52:f2:71:61:3a:d8:d7:f9:ff:ab:b4:
78:1f:a0:2e:cd:84:b5:66:ed:2e:b4:0f:cb:6e:42:
a7:d5:c0:b9:f3:81:d7:bc:db:87:3c:0e:a5:c5:52:
59:18:66:61:0f:39:21:28:11:51:0b:3b:bb:80:76:
3c:7b:d3:6a:96:f8:ee:ff:7f:e0:47:69:bc:29:86:
93:c5:d9:c6:64:fa:60:92:61:40:57:04:02:64:f8:
00:2a:00:15:62:da:ec:80:a0:96:b5:15:5b:36:4f:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:88:46:DB:16:14:BD:12:19:17:3E:CA:1C:FA:DE:1C:D9:35:13
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/w06IRtsWFL0SGRc-yhz63hzZNRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d8::/48
Signature Algorithm: sha256WithRSAEncryption
33:14:9b:9c:9f:54:a2:4e:e6:e0:db:9d:12:fd:d8:f9:5a:24:
f4:83:b9:12:2d:e2:a7:c9:9c:aa:30:ac:83:dc:ed:7e:aa:30:
17:93:12:a6:8f:c8:f4:d8:5f:86:5d:dc:89:9e:55:90:92:03:
ed:95:1d:29:81:e1:11:b2:7d:87:80:6f:e1:9b:ac:2d:42:8d:
ca:ca:24:18:f8:a0:3f:92:e1:45:e5:c1:08:1b:f7:d0:1a:b1:
e4:d3:3e:a4:67:f9:f9:d0:91:3b:4f:60:d5:9f:9b:c9:83:81:
e3:65:6b:19:a9:84:14:05:72:38:9f:18:9c:96:3a:0d:5c:d9:
4a:f3:3e:4d:4d:64:c7:91:f8:b3:48:57:1c:f9:10:96:5d:c7:
8b:57:39:e6:dc:68:c6:e7:7b:53:bc:7b:d3:4d:dc:9f:ec:39:
aa:90:f1:a7:58:3d:6c:8c:6a:b4:a9:ca:97:9b:3b:13:54:42:
c0:8a:40:22:18:ac:0a:e6:fd:4d:de:cb:68:ce:66:d7:ad:a3:
02:34:f5:46:9c:aa:f0:ea:5f:de:b6:fa:5c:53:1f:17:ca:76:
05:c7:8c:a1:92:a0:43:95:c0:ff:de:6c:cd:af:64:89:a2:5a:
2d:38:28:ab:6c:4f:6f:a4:fb:30:b0:48:43:ba:ad:16:e7:85:
a9:ad:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org