Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xsjrEynV7F9AilIIOn7fPViiErQ.roa
File: xsjrEynV7F9AilIIOn7fPViiErQ.roa (raw, json)
Hash identifier: gM5FC+si/noQfK8njwQ0AJWHVGtuxKbMOtXjf+6QHs8=
Subject key identifier: C6:C8:EB:13:29:D5:EC:5F:40:8A:52:08:3A:7E:DF:3D:58:A2:12:B4
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABBE38C1A94BB76A4C173FA18B9D3A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xsjrEynV7F9AilIIOn7fPViiErQ.roa
Signing time: Tue 06 Feb 2024 18:26:18 +0000
ROA not before: Tue 06 Feb 2024 18:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208185
IP address blocks: 2a0f:b241:f4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:be:38:c1:a9:4b:b7:6a:4c:17:3f:a1:8b:9d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6c8eb1329d5ec5f408a52083a7edf3d58a212b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:b6:01:5c:c5:8d:a9:ac:cb:d0:7f:5b:0a:
52:e6:41:c5:45:dd:b3:08:b4:60:76:a1:a6:bc:4a:
4b:3a:7d:af:ef:06:af:d9:32:55:50:89:29:e0:c3:
fb:29:80:d0:1c:39:f1:d2:dd:12:f9:2c:69:e5:cc:
cf:c1:d9:5f:0d:6a:5e:18:2d:69:41:f8:4a:eb:11:
a9:1f:f5:d7:e9:29:89:9c:f2:9b:a2:37:59:0e:dd:
b2:4a:f5:95:1c:a2:d4:19:7b:1e:14:6e:e4:88:1e:
99:d4:d7:a7:22:19:13:ae:24:9c:af:70:08:36:f3:
52:7b:b6:7d:2a:30:43:bc:65:f3:2c:a2:da:d0:6f:
a6:d5:58:4c:30:b5:08:a2:bd:48:5b:85:fb:14:f9:
27:61:5a:43:4b:52:c2:59:16:30:14:20:10:9c:cf:
58:6d:b4:b1:ee:a8:4b:f2:17:34:e1:b6:76:a4:72:
0a:dd:29:d0:e5:24:ed:39:e5:3e:12:5f:e9:2a:28:
4f:82:e6:6f:ec:ae:25:e5:3f:a2:5f:a0:46:61:26:
13:a6:ac:e9:bc:e3:33:e4:58:3a:fe:a4:68:e9:f5:
b1:16:1f:9a:b0:9c:4b:58:85:9e:33:c8:38:a0:47:
78:fa:15:48:d5:8d:ff:79:d0:14:27:8d:63:66:86:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C8:EB:13:29:D5:EC:5F:40:8A:52:08:3A:7E:DF:3D:58:A2:12:B4
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xsjrEynV7F9AilIIOn7fPViiErQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:f4::/48
Signature Algorithm: sha256WithRSAEncryption
8c:db:53:b4:64:d6:33:14:e7:aa:e7:ad:46:c2:e6:b6:f4:23:
ce:38:0a:dd:cc:02:29:2a:c2:71:53:f8:0e:42:43:5d:c4:5d:
79:93:13:85:d9:e8:63:9e:53:00:8c:2e:7e:a3:df:81:3a:23:
2d:7c:a6:5d:cb:b7:5e:a7:f5:f2:bb:64:ce:5e:09:16:06:e2:
ed:88:63:17:bf:2d:80:51:8b:47:4b:0f:4f:f7:74:81:d0:44:
fa:7e:5d:cf:75:8a:f9:52:60:21:b3:d8:72:f2:f3:93:22:5d:
37:01:a5:eb:ff:b5:f8:02:72:0e:45:8b:17:f0:d7:3a:e4:d9:
4b:a8:e2:62:8a:5b:ee:89:d5:b6:ae:54:d5:da:50:dc:19:3d:
74:b6:22:f0:f1:4b:96:b9:4c:23:d1:3a:26:fd:43:ae:7f:f9:
4e:ba:fb:7d:82:51:93:3b:f1:f7:4d:29:ae:1b:11:7b:19:1e:
c0:b8:7c:c8:b0:4d:d6:d7:f4:c7:39:03:72:1b:8d:10:82:7b:
74:f6:9e:e6:52:7f:f0:c8:d0:7b:bd:e8:a5:66:99:d7:ea:86:
5b:2c:94:2f:76:32:0c:7a:bd:cd:d2:dc:5a:69:25:da:4b:f2:
27:95:3f:a4:7d:5f:51:dc:b2:26:39:52:99:be:65:ef:bf:7a:
ee:75:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org