Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6Sp7FLWLbSbQF5i9ZMqROIhoJ7A.roa
File: 6Sp7FLWLbSbQF5i9ZMqROIhoJ7A.roa (raw, json)
Hash identifier: q8I47b2x3iLKhyWbJmvZgEkAUQJ5+O2dROJyhPLPH+E=
Subject key identifier: E9:2A:7B:14:B5:8B:6D:26:D0:17:98:BD:64:CA:91:38:88:68:27:B0
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABB84CD9256AD2B5B90AC78ECC933F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6Sp7FLWLbSbQF5i9ZMqROIhoJ7A.roa
Signing time: Tue 06 Feb 2024 18:26:16 +0000
ROA not before: Tue 06 Feb 2024 18:26:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205183
IP address blocks: 2a0f:b241:ea::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:b8:4c:d9:25:6a:d2:b5:b9:0a:c7:8e:cc:93:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e92a7b14b58b6d26d01798bd64ca9138886827b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:2d:6f:2b:f4:43:84:35:f1:a2:75:e6:05:
33:94:63:26:b9:4e:04:59:3b:9c:2e:c3:3d:18:69:
e1:a6:6b:35:bf:f0:d8:63:bd:f4:6e:e2:4f:4a:41:
97:71:92:8a:47:75:e0:f5:be:49:e4:64:a0:f3:e6:
bb:5c:90:5d:b3:bc:b3:7d:24:e5:2d:96:c0:9d:e8:
a0:a5:57:0d:92:df:90:5a:f3:3c:80:3d:83:79:2c:
b1:77:c4:c3:95:77:f2:9c:69:07:40:0a:f8:e6:45:
24:e5:5e:78:03:7a:b5:8d:87:27:9a:95:4b:d7:0c:
37:53:23:a8:51:8f:a1:7b:1c:47:3d:f6:eb:39:c3:
a7:4d:73:71:ab:31:b2:82:1d:45:50:1b:53:cb:c5:
c2:bc:00:bb:f4:55:dc:f4:c2:b9:bb:6d:2e:4f:8d:
ef:b7:ab:48:20:5a:9b:9a:84:73:22:9a:fe:02:c9:
39:c4:74:ed:4c:8c:7b:aa:81:26:68:98:94:88:e5:
66:47:2e:a0:db:17:76:ab:ac:c5:9b:f5:87:c0:e9:
de:90:e7:d5:45:38:ef:3c:a9:0b:ec:16:86:f4:cc:
b5:6e:ff:25:97:15:37:d7:26:5d:a0:26:20:81:5e:
28:a1:11:ff:74:b6:0d:94:57:46:c5:1b:47:0a:50:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2A:7B:14:B5:8B:6D:26:D0:17:98:BD:64:CA:91:38:88:68:27:B0
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6Sp7FLWLbSbQF5i9ZMqROIhoJ7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:ea::/48
Signature Algorithm: sha256WithRSAEncryption
05:72:14:cd:a7:bb:c4:d1:1d:ac:af:af:84:41:94:e5:21:1a:
67:1b:26:32:fe:13:b4:16:42:5a:11:40:0a:24:00:56:b5:99:
52:36:3e:c6:a7:80:72:6b:e9:9e:e3:34:ab:fd:b0:2a:4e:ab:
b2:0b:63:ad:dc:be:a5:32:db:c5:1a:46:5d:e7:72:a7:99:91:
f4:37:07:46:e9:a9:f6:45:05:c8:29:fd:83:57:b2:8b:28:fb:
43:e4:e0:25:f2:e7:d8:35:1c:4e:7b:08:98:f0:db:f8:fe:7c:
f2:51:80:32:62:ff:a3:dd:7e:f5:d9:25:c6:f2:25:9d:46:6b:
e1:9e:9a:7b:be:da:a6:35:35:ce:d3:f7:92:02:2c:5d:0c:64:
bd:0c:11:c2:15:78:b5:38:2b:99:c2:92:5f:62:21:e5:5e:60:
d0:36:c0:32:00:e4:43:91:4b:30:e5:4a:12:ae:d7:3c:d1:09:
03:15:ba:f9:c6:a4:92:bd:20:af:a7:71:f8:78:5a:6e:73:94:
52:be:27:d9:da:aa:2a:dc:15:f8:1b:6e:3b:9f:6c:93:24:24:
87:a2:63:40:ff:0d:ab:94:58:5c:d8:f7:78:19:44:aa:79:e2:
36:d9:1c:e3:1e:e1:71:70:b6:6f:dd:cb:40:8c:e6:02:8e:5f:
9f:f9:b2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org