Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0FQj3Yk65zh8AOr6dq7wHDXKCw0.roa
File: 0FQj3Yk65zh8AOr6dq7wHDXKCw0.roa (raw, json)
Hash identifier: 6OgifJqD3KQxLRxq5MrleX9osQaMGAWTKrACW1dVFo0=
Subject key identifier: D0:54:23:DD:89:3A:E7:38:7C:00:EA:FA:76:AE:F0:1C:35:CA:0B:0D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F949BC207D911620CF3753A94503BE4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0FQj3Yk65zh8AOr6dq7wHDXKCw0.roa
Signing time: Tue 06 Feb 2024 18:01:02 +0000
ROA not before: Tue 06 Feb 2024 18:01:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207831
IP address blocks: 2a0f:b241:3f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:94:9b:c2:07:d9:11:62:0c:f3:75:3a:94:50:3b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:01:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d05423dd893ae7387c00eafa76aef01c35ca0b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:da:a9:c4:46:9e:4c:b9:af:78:32:cc:c9:
b7:8a:a3:4e:97:da:55:e4:c2:ff:3e:83:92:05:bb:
04:c4:c3:76:09:47:03:c2:11:d1:0c:75:d7:72:ae:
f8:98:cb:ce:c4:c6:ba:f3:18:d2:0b:e8:cf:0b:c5:
0d:76:08:7c:22:59:41:c6:93:6a:03:19:82:cf:f3:
90:8f:9e:fb:df:53:aa:1d:0d:67:7c:a1:ba:c7:1b:
06:52:1f:d0:4f:8d:90:dc:32:73:b2:5e:ea:b7:fe:
d7:4b:11:44:bc:1d:96:38:a7:87:65:86:8b:32:53:
59:1a:3b:7e:e5:76:e9:d7:f8:ad:2b:45:76:62:1d:
35:fc:6e:1b:75:1c:74:71:f3:d3:ce:84:65:e6:99:
dd:9b:e1:aa:d4:53:19:ae:ab:a5:72:a9:88:f1:4a:
95:8b:49:74:ab:c2:c6:27:e6:81:e7:9e:20:a8:c1:
00:4e:90:6e:7a:58:41:fb:db:a7:f5:68:78:6a:ee:
fb:7a:26:04:df:21:81:99:0b:1e:0b:20:a9:66:96:
65:fc:50:af:51:a0:29:ce:62:69:f3:2c:22:c6:5f:
25:95:2e:07:3f:db:37:69:a4:25:6a:ed:e7:2e:b4:
b0:0b:1f:ad:5c:02:61:af:8d:b4:fe:61:e9:c8:51:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:23:DD:89:3A:E7:38:7C:00:EA:FA:76:AE:F0:1C:35:CA:0B:0D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0FQj3Yk65zh8AOr6dq7wHDXKCw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:3f::/48
Signature Algorithm: sha256WithRSAEncryption
75:dc:88:e6:9a:d3:71:20:e8:51:65:9b:cc:bb:eb:53:bc:10:
ce:c9:ec:b7:a7:8d:74:23:ce:9c:80:6a:55:c2:2d:aa:28:76:
e4:2f:a1:35:26:e1:3e:f2:ca:69:0b:32:48:3d:74:cf:fa:5b:
ac:2e:ac:28:57:a2:38:b8:ca:16:2b:7c:27:56:09:3b:cc:4e:
f0:6d:c6:52:0f:20:33:3e:33:79:15:94:a1:c5:1e:53:ba:41:
ad:cf:c7:1d:7f:01:39:70:e2:c6:84:2d:1e:21:b9:4a:a4:c8:
b7:8b:ed:28:3c:23:be:37:68:b7:04:ca:53:39:85:8a:23:eb:
44:38:28:2d:0f:9d:18:b4:36:3e:a4:74:5c:00:93:38:70:74:
f8:bb:f6:23:56:c6:81:de:da:b6:c4:cb:36:05:ec:62:99:9b:
2b:6b:8f:d1:95:a0:c0:b8:a7:24:1b:48:13:d3:9c:49:8e:1e:
e8:d8:c8:ad:3e:ca:92:33:38:6b:50:12:6b:ec:70:d0:1a:c0:
8f:89:2d:5d:8b:c8:26:51:eb:3e:d1:d0:a0:96:77:f8:a3:b6:
1a:a6:8b:fc:c3:3b:15:f7:03:57:21:ba:f8:ed:44:7a:d8:2d:
ad:ed:4d:35:65:fc:61:17:9a:a3:dc:ae:72:cb:3d:f9:2b:9e:
0b:e2:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org