Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TWW_YpDo4XO8Co4WxmhLSu7P8-A.roa
File: TWW_YpDo4XO8Co4WxmhLSu7P8-A.roa (raw, json)
Hash identifier: be5bpclSfgN0agNaznG3DSmF3D8VCH7HoMPser20bYQ=
Subject key identifier: 4D:65:BF:62:90:E8:E1:73:BC:0A:8E:16:C6:68:4B:4A:EE:CF:F3:E0
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA80F0304FA1F486E435C88C01BC937
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TWW_YpDo4XO8Co4WxmhLSu7P8-A.roa
Signing time: Tue 06 Feb 2024 18:22:16 +0000
ROA not before: Tue 06 Feb 2024 18:22:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199832
IP address blocks: 2a0f:b241:8e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:0f:03:04:fa:1f:48:6e:43:5c:88:c0:1b:c9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d65bf6290e8e173bc0a8e16c6684b4aeecff3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fb:dd:38:8d:0b:24:5a:c5:0f:9c:6e:2d:90:
92:d9:d4:79:80:fa:02:fe:55:8e:c9:39:15:b7:43:
c1:3e:7e:b9:d3:0e:c5:09:68:e2:1c:3c:83:47:f1:
c9:ff:ad:1c:33:e4:80:17:93:19:dd:0a:f7:c0:9b:
57:cb:e8:2e:1c:63:d9:8f:21:0c:85:23:0d:0e:12:
6e:e4:b0:dd:1e:1f:6e:ec:cc:5c:ca:d9:54:76:30:
36:61:9e:22:ef:fb:19:c3:49:1a:78:b6:b4:d0:28:
82:ba:4b:e0:c6:34:2b:9e:fa:11:05:4d:e4:30:6c:
3a:23:ab:a0:27:f0:5e:5d:7b:ce:8f:90:71:95:e1:
08:8c:f7:68:d9:cc:58:e9:54:0e:73:bc:a7:ec:c1:
e6:64:37:5a:3e:f0:47:a4:4f:f0:a5:05:4e:bc:de:
d4:e1:9a:b2:ee:7d:24:ee:3c:f5:44:e3:e8:27:e0:
d0:10:53:2e:1b:b3:e0:48:ce:e2:92:f3:99:d8:5b:
33:87:b6:c5:e8:b3:6e:cb:ec:e1:f5:ac:5c:f1:8a:
39:ef:41:1c:bd:26:18:46:33:19:27:45:5a:f5:9e:
b5:3c:87:36:eb:e8:44:40:81:36:9d:fe:8f:9a:f3:
9e:86:68:2d:49:44:70:25:c9:af:49:77:a5:1c:76:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:65:BF:62:90:E8:E1:73:BC:0A:8E:16:C6:68:4B:4A:EE:CF:F3:E0
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/TWW_YpDo4XO8Co4WxmhLSu7P8-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:8e::/48
Signature Algorithm: sha256WithRSAEncryption
28:2e:40:4a:76:2f:ab:2e:d8:ec:c3:f2:30:65:f0:f2:6e:8c:
6c:b6:c1:d4:d2:c8:15:c5:d9:bf:04:86:9b:4b:24:29:31:07:
af:71:ce:3a:ce:fd:98:58:a0:51:f3:d0:77:7b:36:c2:49:d5:
b6:45:56:f9:97:84:7e:95:02:31:41:09:60:2a:e7:5d:49:33:
4d:a7:03:9e:0c:36:45:3f:c1:71:2f:d7:28:a5:46:a1:bc:9e:
92:f1:59:54:b4:cc:ab:43:05:92:05:5a:f6:79:c3:e9:5f:e3:
19:6a:7f:67:f1:e5:93:d4:fe:e8:33:bc:c2:f4:95:20:b3:28:
4b:c4:e3:29:2a:6a:9f:ce:ad:0f:0a:4f:43:7c:19:db:97:74:
dc:2f:10:41:5f:46:04:d4:70:a3:48:40:39:52:6c:53:81:d2:
14:d9:57:4a:e0:5d:ea:70:cb:01:78:0a:2e:c6:0d:3d:81:cc:
6d:0d:fb:a3:ee:3f:aa:89:35:2b:f0:5c:bb:6f:7a:20:34:b5:
6e:da:d3:3f:40:05:bf:7a:5d:d6:21:66:3e:2c:b0:f3:18:a0:
38:d2:1c:60:90:7c:f7:8a:5b:bd:f5:cf:c1:21:97:6d:3d:2a:
0f:b8:b0:7a:bf:f7:c7:03:0d:40:37:8f:f1:9a:b0:20:2f:67:
8e:08:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org