Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/F-9Ea3mvZBYd_wtxZAsH3z1t50o.roa
File: F-9Ea3mvZBYd_wtxZAsH3z1t50o.roa (raw, json)
Hash identifier: JdifIYr5tpsARXUt5dcQJ4mWTM+57M2h7XcCigIG9tM=
Subject key identifier: 17:EF:44:6B:79:AF:64:16:1D:FF:0B:71:64:0B:07:DF:3D:6D:E7:4A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F08257A2D08B7DA2C65E894A6FE13A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/F-9Ea3mvZBYd_wtxZAsH3z1t50o.roa
Signing time: Wed 07 Feb 2024 05:00:39 +0000
ROA not before: Wed 07 Feb 2024 05:00:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200262
IP address blocks: 2a0f:b241:ab::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:82:57:a2:d0:8b:7d:a2:c6:5e:89:4a:6f:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17ef446b79af64161dff0b71640b07df3d6de74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:cd:ec:91:96:3c:08:1e:82:e2:f5:d1:37:
f8:a6:a4:f5:4b:35:88:0b:f0:c6:a3:ba:d1:89:52:
ae:cf:f3:3c:60:2f:41:b4:18:12:58:a6:ce:12:b8:
e2:cb:7d:61:a6:fe:6d:1a:b1:77:1e:4e:dd:f2:15:
06:ef:40:6a:89:6d:98:a0:ae:f4:a7:e2:3a:13:3d:
ba:2f:96:39:07:5d:24:0a:d1:70:6e:9c:55:61:fd:
f5:65:06:8b:e0:91:e7:22:0a:a2:29:57:21:d8:65:
87:3d:a4:b3:48:44:ae:e6:38:f7:f9:c4:e4:e6:3c:
88:84:7c:54:35:cd:03:7a:fc:5e:15:e0:c5:23:8b:
eb:b2:7b:17:dd:8c:93:de:af:59:d3:d3:cc:0e:82:
f0:6f:b2:dc:32:c6:6b:10:ab:ee:1d:dc:3f:b4:09:
d4:11:bd:53:05:60:61:cc:53:99:28:5c:b0:fc:2d:
82:fa:08:f0:dc:30:30:16:15:51:6d:a3:06:ea:53:
19:24:83:18:6d:66:ac:e4:02:6c:e6:3f:53:bc:9c:
c9:bd:a2:31:b6:24:54:7b:46:14:9c:8c:6a:f1:75:
d5:64:d3:08:01:f6:1a:32:57:ec:59:a7:95:51:fa:
90:1b:47:1e:24:7a:45:7d:23:66:25:31:4c:b0:01:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:44:6B:79:AF:64:16:1D:FF:0B:71:64:0B:07:DF:3D:6D:E7:4A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/F-9Ea3mvZBYd_wtxZAsH3z1t50o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:ab::/48
Signature Algorithm: sha256WithRSAEncryption
63:e1:2a:95:2b:11:ea:cb:a6:37:e1:93:df:1f:95:1e:09:43:
a7:f5:2d:37:da:06:01:31:d2:cb:c1:77:d2:05:de:4e:b2:f5:
d3:da:20:50:81:f9:b0:bf:bd:2c:75:76:7a:c7:ba:80:b4:06:
1a:1d:00:fc:36:11:ad:19:f4:c5:3d:34:c3:a4:13:a2:6d:c0:
0c:f8:db:ef:51:54:88:c8:0a:95:47:3e:51:59:68:40:86:9a:
61:c7:47:1a:b5:3e:6d:c5:5e:a9:e6:30:15:e4:31:96:1f:90:
89:54:b3:37:f9:ec:9b:24:fb:22:d5:43:78:3a:2b:c2:3b:3d:
37:0c:9f:47:9b:8e:ad:04:b0:37:eb:31:40:c1:90:81:3f:46:
5b:13:64:9d:5d:f0:d6:ae:75:9a:58:ae:a0:ba:6c:2b:e3:57:
d8:17:a7:bf:c6:fd:f5:2f:88:0d:86:26:8f:24:47:55:ce:bd:
84:a6:65:cf:bf:3c:cb:6a:bc:62:86:4a:5c:4b:e5:ea:e9:51:
99:60:93:76:5c:de:a2:b7:10:12:3f:ac:02:15:fa:e7:35:9a:
50:76:47:ed:07:20:79:04:79:dc:1f:bb:cb:45:b0:8f:0a:90:
d8:d4:de:02:f2:9e:07:70:8f:15:d5:6c:72:b5:99:c4:ad:3e:
5e:95:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org