Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/K81_XZqEN2c7V2SAScU69YDFxp8.roa
File: K81_XZqEN2c7V2SAScU69YDFxp8.roa (raw, json)
Hash identifier: ZghgZ00DzxKly3ZMv+2/UkBS5x+UkoDE4xxrOU9hHpg=
Subject key identifier: 2B:CD:7F:5D:9A:84:37:67:3B:57:64:80:49:C5:3A:F5:80:C5:C6:9F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E1CC2F88B8DBEC034738CB92829B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/K81_XZqEN2c7V2SAScU69YDFxp8.roa
Signing time: Tue 06 Feb 2024 18:24:16 +0000
ROA not before: Tue 06 Feb 2024 18:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200728
IP address blocks: 2a0f:b241:cb::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e1:cc:2f:88:b8:db:ec:03:47:38:cb:92:82:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bcd7f5d9a8437673b57648049c53af580c5c69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5e:86:9c:b4:bb:b2:d9:7f:83:95:58:6e:b1:
2b:8e:fd:0e:98:15:29:d8:e5:16:43:88:fa:f8:b0:
4b:17:50:e3:f9:e4:9f:27:e1:52:ce:24:0e:6e:b4:
99:8e:0e:f1:cc:ec:58:27:9e:97:65:b6:e9:ba:36:
96:46:3c:ae:92:de:2b:4c:0a:55:d0:42:30:65:c2:
ca:49:3c:8a:de:58:71:be:d4:81:a9:5f:78:09:9c:
aa:e5:b0:ec:0c:20:99:31:00:3d:6c:00:58:49:12:
f3:59:36:cd:30:0b:fd:55:7a:c6:35:6c:9f:41:73:
0e:25:29:ba:45:10:4b:f5:9c:86:4c:69:23:c6:38:
e4:ce:fd:32:98:57:80:9a:13:32:19:47:4b:2c:52:
ae:bf:37:97:cf:4f:c6:af:00:ce:95:60:09:be:16:
50:8b:19:f7:84:28:31:fb:b4:3b:7e:7b:a4:45:f4:
aa:1c:ef:dd:ff:04:98:99:67:04:01:cd:72:6f:bf:
43:0d:4b:40:16:67:f1:8d:8a:1c:62:3d:c4:62:4c:
26:6b:ea:4b:44:54:12:6f:58:fb:c5:79:82:c4:d0:
95:ae:7e:4e:67:c0:93:07:67:61:d0:0c:d7:98:3c:
58:94:3c:df:bc:b6:15:6f:f9:2b:dc:30:94:55:04:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CD:7F:5D:9A:84:37:67:3B:57:64:80:49:C5:3A:F5:80:C5:C6:9F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/K81_XZqEN2c7V2SAScU69YDFxp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:cb::/48
Signature Algorithm: sha256WithRSAEncryption
6b:9c:df:1b:e2:54:bb:30:f1:a4:f2:3a:91:a5:33:6e:34:b3:
2c:61:5b:1f:ac:bf:26:04:e0:ad:f2:42:b3:fe:3e:fe:11:ea:
cc:09:ac:80:b8:66:c4:60:5a:57:c4:fb:ad:bd:74:5d:b6:9e:
ee:12:a3:67:2f:db:a2:6b:7d:de:46:af:a9:df:bc:6c:f9:e6:
ce:f1:ad:d3:97:b8:84:7a:0a:39:49:36:22:a8:b1:bf:5d:d2:
16:96:dd:f4:3a:44:06:ce:65:a0:51:c6:34:c6:09:40:52:2f:
c9:ad:3d:ff:02:d0:6f:e2:41:0b:07:25:5f:c1:24:e2:f3:5f:
9f:08:d4:b8:ba:70:06:6f:47:db:4b:aa:72:6a:6d:26:4e:ca:
33:35:18:ad:e7:da:5e:0b:1b:82:51:25:28:1d:6d:46:35:53:
a7:96:6f:94:3e:7e:ff:a2:c9:fc:16:b4:20:75:2f:ce:dc:c6:
53:bb:60:9e:c6:8a:c2:19:2e:fc:1c:ae:fd:5c:e0:3a:0f:75:
b4:65:e2:86:b4:5f:02:27:10:ff:39:23:ab:97:ad:0b:10:cb:
74:dc:86:ad:d9:67:0d:92:6b:73:f3:a5:72:e6:ef:ba:80:e3:
05:fe:7d:50:76:ff:b8:c8:db:ab:56:82:29:5e:aa:f1:93:1e:
3e:ae:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org