Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9f1qabjGCnOcSwU41Khc4Gix-EY.roa
File: 9f1qabjGCnOcSwU41Khc4Gix-EY.roa (raw, json)
Hash identifier: mgAWuLd5cbNyY8NOFLWtjGUbwNt5G1QNP0o2nnALpQQ=
Subject key identifier: F5:FD:6A:69:B8:C6:0A:73:9C:4B:05:38:D4:A8:5C:E0:68:B1:F8:46
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAE7D0159C11794B46ACE8B252DA5E5
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9f1qabjGCnOcSwU41Khc4Gix-EY.roa
Signing time: Tue 06 Feb 2024 18:29:18 +0000
ROA not before: Tue 06 Feb 2024 18:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57934
IP address blocks: 2a0f:b241:121::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ae:7d:01:59:c1:17:94:b4:6a:ce:8b:25:2d:a5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5fd6a69b8c60a739c4b0538d4a85ce068b1f846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:b0:4c:99:94:9d:8d:9e:47:41:5d:5b:2e:
f8:71:24:1c:9a:5e:48:30:f2:ab:56:60:5d:88:ef:
50:4a:e3:12:28:92:c1:c2:e7:8d:af:e5:b2:e7:e7:
34:5a:b9:04:8a:c6:08:d0:e6:29:91:73:05:64:b5:
ed:11:bc:9b:83:5b:1a:3d:55:f4:ff:71:3c:0c:c1:
62:06:54:ca:34:d5:87:29:63:28:9a:15:cf:af:a9:
54:14:93:0d:12:2f:c4:88:ab:10:c6:16:67:4d:67:
ce:54:75:6a:2e:57:10:93:c4:e2:ce:23:5a:71:7d:
1b:9a:17:31:31:79:2b:32:41:c4:31:67:c3:41:15:
7c:c3:b9:12:d3:30:e6:0e:85:c9:3a:4d:9b:c3:6a:
be:db:6c:f5:78:3d:e5:22:69:cc:db:7c:ae:24:ac:
b5:95:94:a1:5b:34:b1:0e:77:c4:5e:cb:48:35:7a:
cc:f8:b0:2d:54:14:d4:52:81:40:d3:71:1c:3a:54:
b6:27:f6:9a:d9:aa:ce:3c:bc:15:af:8b:2e:fa:35:
5c:63:24:d2:88:1c:71:38:06:d8:a6:6e:b1:93:cc:
46:26:c7:02:05:e6:57:01:50:cf:ca:23:bc:58:95:
4f:7f:6d:c7:bb:a5:e4:4c:e9:76:fe:55:fd:24:7e:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:6A:69:B8:C6:0A:73:9C:4B:05:38:D4:A8:5C:E0:68:B1:F8:46
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9f1qabjGCnOcSwU41Khc4Gix-EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:121::/48
Signature Algorithm: sha256WithRSAEncryption
29:49:3a:27:c5:9b:e6:15:66:2c:51:d3:3d:b7:d9:1d:46:28:
68:d1:32:07:7a:20:42:7d:e8:9d:33:80:4a:b5:37:f3:9a:7f:
92:c6:2b:21:dd:85:4d:1e:1b:97:13:1c:40:26:84:84:40:cd:
bc:13:e5:fe:97:05:5f:9a:6a:25:2d:b4:f5:0e:c1:5c:56:6e:
86:02:13:51:52:3a:2f:73:4f:6c:ce:c9:38:8b:cb:d9:d2:ae:
7a:45:37:10:20:ac:ea:e6:a8:fc:48:6c:fe:a1:b7:34:db:9a:
12:4e:b5:25:7b:c3:f5:03:86:c7:52:b6:2f:f4:d2:a3:cd:0d:
82:79:d9:3f:28:6e:b9:d2:76:07:70:aa:59:11:ab:a7:ea:04:
35:57:f3:4d:5c:5d:a5:8d:4c:3e:42:5a:a8:7c:8d:f7:59:7d:
bb:0f:ef:c5:9b:88:23:e1:f6:b9:d7:f0:03:6c:f7:73:ae:5f:
44:89:77:4f:23:5c:df:16:9e:9d:86:ef:a3:1a:0c:ea:10:8f:
93:66:b2:50:17:24:34:ea:ea:ed:18:fc:ec:7f:ab:05:d8:66:
11:b8:34:7c:25:6e:69:f0:90:f1:b4:77:9b:1f:87:66:30:52:
52:ba:ae:a0:2c:37:c7:8b:68:8f:98:96:b3:77:fe:aa:1e:e5:
28:92:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org