Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MZbsD02zjl8nyYUp9Q66X-T0PCo.roa
File: MZbsD02zjl8nyYUp9Q66X-T0PCo.roa (raw, json)
Hash identifier: nqy0DqnO6tsXHBTao8EQ8hSWV9JaMgGTUc5k4EIPdKw=
Subject key identifier: 31:96:EC:0F:4D:B3:8E:5F:27:C9:85:29:F5:0E:BA:5F:E4:F4:3C:2A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB5CC2940B4D20DF1645896F6AA91F9
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MZbsD02zjl8nyYUp9Q66X-T0PCo.roa
Signing time: Tue 06 Feb 2024 18:37:16 +0000
ROA not before: Tue 06 Feb 2024 18:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198005
IP address blocks: 2a0f:b241:12a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b5:cc:29:40:b4:d2:0d:f1:64:58:96:f6:aa:91:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3196ec0f4db38e5f27c98529f50eba5fe4f43c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:22:61:14:7e:22:6e:89:6a:04:4a:06:44:
05:aa:5f:68:d4:ce:e3:61:e0:7b:32:67:15:8d:ac:
74:44:42:cf:d3:3e:db:7d:1b:3c:98:e5:61:c0:76:
d1:4f:fe:4d:af:48:0f:07:2a:54:72:4e:d2:f9:c7:
e5:e0:b5:af:b3:db:c2:61:52:7f:22:d0:3a:8b:5a:
8d:b7:80:18:8c:fe:5c:6d:2b:c7:7b:72:7b:11:0f:
21:55:45:d2:1c:65:b8:b0:30:63:39:2a:6b:6a:7f:
55:8e:4c:bc:57:97:23:a6:5b:3c:54:eb:db:d3:e3:
07:ab:4e:b4:35:ba:82:8d:46:c5:ec:86:6d:73:02:
54:ad:30:d6:3d:12:f0:11:2d:3a:43:2a:06:df:87:
29:37:a1:57:de:0e:e5:db:ae:05:bb:31:4c:97:88:
77:45:f1:cf:18:66:3f:3b:dc:c1:93:8f:df:21:b7:
d3:e5:26:0d:3c:47:1e:19:98:57:fa:dc:03:f2:d6:
82:ec:51:85:c6:b4:ce:67:65:93:9e:2d:03:56:13:
b8:81:f2:eb:ca:86:d7:a6:29:db:f1:92:3e:7d:ce:
a7:85:58:cb:ef:1a:4c:df:18:c6:e1:26:47:cb:60:
10:e4:25:63:ad:95:a0:1b:e5:ef:d5:df:8e:45:88:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:EC:0F:4D:B3:8E:5F:27:C9:85:29:F5:0E:BA:5F:E4:F4:3C:2A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MZbsD02zjl8nyYUp9Q66X-T0PCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12a::/48
Signature Algorithm: sha256WithRSAEncryption
15:98:0e:ff:7b:54:cc:2e:10:2d:18:bc:12:c3:2d:a8:34:49:
1b:14:c2:90:10:a7:b3:86:83:06:1f:e0:a3:b9:55:b5:90:bc:
7b:d3:5e:38:42:4f:02:01:d8:47:37:2c:bc:a3:7f:4a:f5:04:
84:be:da:d7:ad:ba:3c:aa:51:90:1a:32:60:69:99:51:99:19:
55:a8:ad:36:69:5a:08:7f:59:e6:5d:f2:b9:77:c6:ab:f5:8f:
06:44:18:d2:0c:3c:5b:71:d7:da:47:fc:12:03:70:e5:ca:03:
9d:ac:25:b0:29:6c:ec:54:71:9d:b0:bd:23:86:6a:b2:d3:41:
c5:33:80:19:6a:bb:6e:9a:35:b0:c0:e0:f3:c5:bb:2b:48:68:
3f:bd:9c:cb:b2:46:f4:22:05:97:c8:dc:3e:1b:15:c0:a1:a8:
4d:61:bc:81:af:b3:35:f8:37:5c:de:3c:5a:51:b0:a8:35:b4:
d6:22:25:bf:4c:7d:e1:87:97:96:57:f6:bd:68:f7:4a:05:80:
95:aa:9f:75:6d:4f:13:30:43:76:3b:28:87:58:fd:b5:6e:4b:
26:c1:5d:1c:e9:b3:1d:da:32:6a:86:8d:c5:17:62:76:69:b4:
10:61:79:53:91:ae:97:8d:46:b4:24:28:00:bf:63:31:5b:50:
d3:68:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org