Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TCNS1wv5QeSS1e6D7UYH1tSOfoQ.roa
File: TCNS1wv5QeSS1e6D7UYH1tSOfoQ.roa (raw, json)
Hash identifier: 939VtVesgNts/n5wHv1XY5y6lzGx2a2Otcvjk2/gg68=
Subject key identifier: 4C:23:52:D7:0B:F9:41:E4:92:D5:EE:83:ED:46:07:D6:D4:8E:7E:84
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F097391DEDE928410956FB4144BD33
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TCNS1wv5QeSS1e6D7UYH1tSOfoQ.roa
Signing time: Wed 07 Feb 2024 05:00:44 +0000
ROA not before: Wed 07 Feb 2024 05:00:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207414
IP address blocks: 2a0f:b241:13d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:97:39:1d:ed:e9:28:41:09:56:fb:41:44:bd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c2352d70bf941e492d5ee83ed4607d6d48e7e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:cb:48:61:3a:6a:77:a7:3e:2f:39:fd:0e:
60:85:df:48:72:13:b1:3b:50:01:0c:c0:6f:a1:ea:
eb:44:3b:a2:e7:8b:72:d9:67:c6:c6:c7:ed:0c:d0:
64:e4:f8:a5:2e:96:1c:ea:d0:c1:7e:33:77:78:15:
a4:a9:d8:be:a8:98:e7:fc:12:8c:88:6c:87:fd:50:
3e:7b:1c:4d:6e:49:ab:a0:07:7c:fc:95:17:f1:6b:
ca:3f:a9:c5:ba:d3:cc:7d:b3:8b:20:0b:97:dc:b5:
80:8e:00:60:f7:41:b5:68:ef:7e:de:14:a3:8e:f8:
91:d7:e5:72:50:7a:26:a9:bd:be:bb:74:7a:37:67:
f2:d6:10:67:5d:68:27:31:b5:95:c8:f2:d6:21:8d:
78:ca:bd:bf:09:96:b0:70:53:ad:61:0b:f3:a8:e4:
1f:8a:84:4b:c8:cc:9b:df:26:63:03:15:89:ff:ca:
49:be:0a:e4:b3:b7:a9:c9:23:c2:fb:91:8a:04:9e:
8c:d4:3e:fd:93:b4:b3:2b:d2:87:aa:6a:2e:12:f7:
d5:a3:5f:49:41:53:30:19:e6:76:42:dc:7f:05:7e:
1c:00:b6:ba:ae:d9:64:be:39:a1:3b:29:e3:a8:64:
bb:0f:6a:1d:42:99:87:4a:7a:75:81:a3:61:9a:b8:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:52:D7:0B:F9:41:E4:92:D5:EE:83:ED:46:07:D6:D4:8E:7E:84
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TCNS1wv5QeSS1e6D7UYH1tSOfoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:13d::/48
Signature Algorithm: sha256WithRSAEncryption
7d:59:1e:10:e6:15:ef:d0:be:ad:fe:5e:78:5d:8d:e3:27:7f:
40:f3:3e:f4:a6:09:61:c2:e3:1c:09:9b:5a:b1:63:7e:1b:70:
b6:c6:6c:d0:74:66:7f:5e:d5:7f:f3:a6:f4:5c:5b:b7:ff:c7:
d3:7e:4e:a0:86:a0:08:d8:f6:9b:bc:db:aa:d9:04:53:23:ba:
e4:3e:3f:94:65:9f:63:bf:7b:09:54:ca:67:7b:c2:bb:0e:8f:
c8:2b:2c:86:e1:b8:b0:8f:0e:63:a2:13:5a:24:7d:cf:21:a0:
92:1b:36:22:3c:b4:16:9a:80:78:ec:e6:31:b5:78:26:38:65:
81:ec:cf:aa:06:a9:2e:14:dd:fd:1e:48:45:7c:51:45:c9:0f:
4a:5a:4d:27:93:93:88:cf:56:e5:8b:9a:0b:7b:c8:a7:48:3f:
3b:cf:db:7b:70:67:9b:5b:6c:7e:14:a8:33:6a:7d:26:55:61:
65:27:46:b0:fd:cc:e3:f1:ba:00:9b:5e:0e:b9:78:c1:1c:02:
0d:c0:77:54:9b:b1:38:d9:72:b5:0e:36:0e:ca:77:ac:91:96:
9a:82:f3:37:6b:b0:d9:0a:e5:2c:9f:04:56:4b:fe:ca:28:9c:
90:87:7d:49:6d:1d:77:ba:a9:74:83:4a:16:7c:c9:53:f2:32:
46:bd:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org