Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PkthfyDRF5nP5RcbRHYo6jVsUkc.roa
File: PkthfyDRF5nP5RcbRHYo6jVsUkc.roa (raw, json)
Hash identifier: eYUN6EV7Syi+Ytoc5Wn7tka39IJyLdW1nwutbvnVhzA=
Subject key identifier: 3E:4B:61:7F:20:D1:17:99:CF:E5:17:1B:44:76:28:EA:35:6C:52:47
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81FECF929A8573B2ECF62AE0CE65C77D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PkthfyDRF5nP5RcbRHYo6jVsUkc.roa
Signing time: Wed 07 Feb 2024 05:16:16 +0000
ROA not before: Wed 07 Feb 2024 05:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211443
IP address blocks: 2a0f:b241:a0::/48 maxlen: 48
2a0f:b241:a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:fe:cf:92:9a:85:73:b2:ec:f6:2a:e0:ce:65:c7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e4b617f20d11799cfe5171b447628ea356c5247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:6a:4f:76:9b:4d:e7:d7:71:5f:8a:76:fc:
ab:af:a8:e2:a2:68:e6:71:64:b2:8b:1c:a6:b8:4b:
d1:ca:e5:ef:67:d2:52:29:8b:f2:26:7d:3b:cd:02:
5d:29:60:d0:0b:6e:0b:35:7b:4a:89:a3:08:68:1d:
03:2e:f5:5e:08:3f:cc:ea:6e:3c:85:73:35:27:f0:
51:d4:95:8b:78:2c:de:f4:49:72:0e:ed:6a:34:5c:
3b:a9:72:54:2b:06:85:ea:0b:46:8e:ea:28:c3:13:
0c:fb:03:79:e7:d6:7a:05:ae:b8:95:e0:80:7e:2c:
35:67:69:d5:71:46:9b:38:28:73:1d:01:f5:dc:9f:
33:db:01:ec:63:0f:10:a2:40:ee:1f:d0:65:cc:71:
db:20:0e:1e:a7:4c:d1:16:52:ee:a2:23:01:d1:69:
ff:cf:d5:71:a7:27:a7:fc:2a:f5:ae:53:d0:3f:c3:
85:12:5d:c9:11:78:8d:85:1d:90:b6:85:01:3b:99:
ef:2f:73:f2:4f:78:09:45:6d:0b:29:6b:d0:aa:7d:
b7:d2:c9:ae:76:a6:3c:7a:f0:8a:c4:b4:77:8c:53:
3b:54:90:1c:64:e3:cb:6b:ce:87:0d:a4:64:bf:22:
0d:8e:c3:0f:88:30:0d:25:bb:7c:bd:5f:15:35:65:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:61:7F:20:D1:17:99:CF:E5:17:1B:44:76:28:EA:35:6C:52:47
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PkthfyDRF5nP5RcbRHYo6jVsUkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:a0::/47
Signature Algorithm: sha256WithRSAEncryption
87:21:d6:07:66:36:69:24:9a:3b:87:77:6e:80:17:9a:48:21:
cc:e6:88:5b:20:ff:db:92:e7:2e:c1:59:eb:42:bb:a6:2c:f6:
68:04:8d:9d:c9:77:9b:93:f8:7d:4f:5a:76:5d:4f:20:e0:12:
93:5f:49:85:a7:84:48:dc:c2:b9:6f:ca:cf:ad:4d:65:73:75:
5e:e0:61:0b:55:84:8e:4f:7f:40:b0:3d:fe:37:68:61:f7:6f:
60:3a:f0:e2:61:2b:ce:c2:6d:e5:58:53:2e:12:1d:fb:5a:d7:
4c:97:91:20:e7:c1:44:71:19:45:36:59:37:11:d8:09:44:c5:
64:fb:0e:9f:c7:bc:37:d9:d8:e8:4a:0b:dd:8e:58:54:55:0f:
41:d5:f1:76:49:f2:17:33:14:df:b2:f3:f8:84:45:22:88:ae:
dd:fe:16:a3:d2:9b:cd:dc:9a:d6:5a:7d:d8:78:d2:71:f4:93:
4c:5a:0c:57:38:9e:98:0d:09:9b:7d:f4:43:44:cd:3b:57:bc:
f3:9f:4f:9b:cc:04:85:d4:c7:fc:03:b9:6e:1b:79:0a:db:86:
b3:b4:a2:cb:dc:32:c7:11:4b:92:57:ce:c7:e9:0a:a2:4a:34:
b6:63:cc:dd:72:5d:c6:25:52:ec:76:92:6d:e8:ed:1e:9c:73:
8b:02:a9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org