Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/x8dDUTGhsIo41uzY_9yRQTVRF4A.roa
File: x8dDUTGhsIo41uzY_9yRQTVRF4A.roa (raw, json)
Hash identifier: 97bvGKVcmMT7gV7IEzRkQTCV8sLMdAtF2bf54mzv+H4=
Subject key identifier: C7:C7:43:51:31:A1:B0:8A:38:D6:EC:D8:FF:DC:91:41:35:51:17:80
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96AC166D2F770D45E1797C753EA66D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/x8dDUTGhsIo41uzY_9yRQTVRF4A.roa
Signing time: Tue 06 Feb 2024 18:03:17 +0000
ROA not before: Tue 06 Feb 2024 18:03:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215887
IP address blocks: 2a0f:b241:57::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:ac:16:6d:2f:77:0d:45:e1:79:7c:75:3e:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7c7435131a1b08a38d6ecd8ffdc914135511780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f7:fc:02:f9:d8:d7:dc:c5:7b:b1:00:3c:8e:
42:32:14:c4:1f:a5:21:79:53:b1:53:1a:9e:bf:28:
6f:58:c0:08:f1:0e:02:4d:28:ea:01:b2:6c:d3:37:
c5:04:75:b9:c8:b3:7f:46:2b:04:1e:46:40:93:e6:
e7:42:1e:f3:86:7b:9d:c8:be:f7:88:e2:c3:7e:20:
a9:4a:fb:a3:82:a6:91:4e:92:00:44:b6:52:e0:8c:
a8:b7:62:d5:6c:d3:a8:a3:51:6f:39:1a:e4:b4:05:
c0:2b:86:a9:90:c0:aa:21:38:82:79:5f:31:78:ea:
e2:58:7d:90:f4:0d:25:1e:9e:8c:87:9c:0a:74:d0:
a6:bf:09:43:cc:44:43:89:cc:a0:84:40:5e:b9:52:
c0:55:2e:6f:5c:a0:81:0b:d2:56:b1:56:ac:0f:4d:
04:e2:68:56:46:b7:86:a2:32:6d:26:84:9e:65:52:
14:96:d6:28:f3:4d:1e:df:c8:e4:ac:4c:92:7f:ee:
38:11:18:a4:7a:1c:1d:ca:b4:a9:1e:7d:99:ce:0e:
00:59:a6:19:83:3d:a3:ef:49:23:73:81:0c:86:5f:
cf:bb:cd:e7:21:72:38:5c:3b:dc:6f:0e:80:f6:55:
8e:08:12:c5:98:7d:2b:73:47:60:69:21:35:44:25:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C7:43:51:31:A1:B0:8A:38:D6:EC:D8:FF:DC:91:41:35:51:17:80
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/x8dDUTGhsIo41uzY_9yRQTVRF4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:57::/48
Signature Algorithm: sha256WithRSAEncryption
33:01:bd:44:4a:49:0b:b0:0a:09:87:a9:7b:cf:1b:94:9f:a8:
b0:13:14:69:55:76:a3:56:c5:20:9d:c1:9f:9b:ba:b9:fc:48:
56:4f:be:26:f3:1f:95:d2:f9:3a:68:fc:3c:21:ea:d7:8a:d3:
fe:b8:01:ca:ca:22:e3:73:11:ed:7b:c9:d2:a1:73:57:a0:6f:
84:bb:94:7f:56:6f:c4:e7:05:88:8e:58:ef:e1:32:03:15:5f:
87:41:cb:0f:69:30:4d:1d:90:b2:e0:7d:29:ac:df:6c:06:a9:
bc:00:d0:c2:f6:83:8b:71:b3:63:27:cb:57:6e:05:a3:a4:1e:
c3:f8:a2:1f:42:91:56:dd:71:da:f8:e2:f0:d2:15:e6:93:84:
0c:8b:fc:65:9c:15:d4:25:b4:b0:ee:ea:95:12:b3:ff:35:f7:
b6:77:8b:48:67:33:ee:78:d4:01:2f:93:be:c4:8b:bb:b5:59:
4c:df:55:95:52:77:70:1d:57:2b:e8:5a:b7:a3:5c:00:1d:0a:
a4:f4:12:94:d1:7f:4d:f4:92:75:6e:1b:ae:e2:a4:09:a5:ef:
09:3e:f0:ee:76:5b:e4:43:3f:56:4d:5d:48:15:b3:89:b7:76:
38:39:71:cc:f9:a7:5d:16:55:68:84:8e:3b:f5:ca:35:f4:56:
64:4f:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org