Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6G0O05gIJ6wTJEWebpERignuUN4.roa
File: 6G0O05gIJ6wTJEWebpERignuUN4.roa (raw, json)
Hash identifier: FTBq9iu5uByyXpfql2Tgy7kyPViAXv/bZmEauBU7rXE=
Subject key identifier: E8:6D:0E:D3:98:08:27:AC:13:24:45:9E:6E:91:11:8A:09:EE:50:DE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F05FC8D3392068E7C9D63752BAE61B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6G0O05gIJ6wTJEWebpERignuUN4.roa
Signing time: Wed 07 Feb 2024 05:00:30 +0000
ROA not before: Wed 07 Feb 2024 05:00:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49548
IP address blocks: 2a0f:b241:116::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:5f:c8:d3:39:20:68:e7:c9:d6:37:52:ba:e6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e86d0ed3980827ac1324459e6e91118a09ee50de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:2f:15:53:38:50:09:b5:34:35:27:db:34:
de:71:6a:ae:af:e8:45:45:b4:d8:36:11:ab:37:6a:
8e:71:3d:41:93:4b:81:18:4a:38:5b:2b:03:6e:3f:
1c:d6:3a:f9:02:20:01:72:f8:33:04:fe:c7:89:0a:
90:6b:42:76:69:fd:60:53:b6:e3:7b:f6:15:67:d9:
ae:32:06:92:eb:f9:31:11:27:10:3c:5d:51:e1:cc:
3c:cc:c3:e7:04:84:d5:77:e1:80:2b:db:d6:2d:bf:
39:95:e9:10:31:fd:db:5f:5b:9a:de:33:c4:aa:b2:
09:64:23:f6:c4:f3:ec:05:90:c0:fe:f3:49:5b:6a:
42:29:00:8d:1a:8e:11:c9:ad:89:df:1a:4b:22:e0:
72:fb:a5:34:a7:a9:d1:e4:a5:0d:41:1a:04:b3:ee:
e3:bc:9d:10:44:75:3e:2c:90:90:6f:cc:af:cf:6c:
3b:e3:db:f2:58:c2:a0:3c:8e:2d:49:81:a3:1b:c6:
76:7c:fd:14:18:92:ec:41:26:77:fa:77:71:16:61:
cf:8b:91:72:7a:ae:8a:2f:4b:e7:e2:ce:6c:c4:d6:
ff:4e:28:f6:f9:8c:d2:1e:1f:36:e2:91:27:20:18:
c2:46:f9:e8:8a:8a:44:bb:29:92:2c:b9:2b:72:8a:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:0E:D3:98:08:27:AC:13:24:45:9E:6E:91:11:8A:09:EE:50:DE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6G0O05gIJ6wTJEWebpERignuUN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:116::/48
Signature Algorithm: sha256WithRSAEncryption
7c:d7:ac:ba:31:7b:14:b5:e4:a5:79:7b:33:75:1e:a9:1c:d4:
7b:c2:cf:92:cd:90:5e:8a:6b:05:14:81:34:e5:d5:27:a9:39:
5b:0d:87:09:cc:14:41:25:39:5a:cd:72:1f:b0:65:87:42:46:
2b:31:25:ea:b4:d8:36:a0:f3:58:e7:07:68:3a:44:6c:c4:08:
50:b1:1e:fb:ed:31:5e:b4:0f:d2:dd:c7:04:70:00:89:d4:c1:
e8:6a:a0:e3:72:5c:8c:b7:b1:55:43:d8:00:9b:16:7d:6d:c3:
c1:cc:09:3b:36:9a:eb:bf:df:9e:cd:fd:f2:5d:ed:2c:ed:f0:
87:92:3c:07:0d:f5:85:25:b2:b1:ec:0c:c8:cf:20:61:1b:69:
3c:a8:61:4c:ea:2a:fe:24:28:19:5a:00:55:23:9d:e7:ea:f2:
ab:86:d3:8c:9b:85:6b:6c:6d:8e:66:38:18:69:35:a8:23:30:
2c:e4:4e:fd:3e:23:a8:cf:7c:48:76:d8:eb:d7:71:eb:5a:83:
19:d0:5c:93:d4:9a:dd:a9:70:89:f5:ba:21:63:83:e9:bb:26:
1c:44:6e:c0:84:98:c1:d2:f9:d4:fa:ce:b0:af:ac:66:8a:dd:
e0:59:62:87:43:03:a9:0f:5d:e7:77:a4:4e:8a:5c:ed:3e:b9:
e8:8a:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org