Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/V41ITxd8oi94Qmm62WaLAskfJZs.roa
File: V41ITxd8oi94Qmm62WaLAskfJZs.roa (raw, json)
Hash identifier: DWqd6NERpsUzGLshZf/ZW0jNdZ8M/VNF3Vkdx/3sYYQ=
Subject key identifier: 57:8D:48:4F:17:7C:A2:2F:78:42:69:BA:D9:66:8B:02:C9:1F:25:9B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F06C8848BB617D23554C49F2E823E1
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/V41ITxd8oi94Qmm62WaLAskfJZs.roa
Signing time: Wed 07 Feb 2024 05:00:33 +0000
ROA not before: Wed 07 Feb 2024 05:00:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197761
IP address blocks: 2a0f:b241:129::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:6c:88:48:bb:61:7d:23:55:4c:49:f2:e8:23:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=578d484f177ca22f784269bad9668b02c91f259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:8a:c1:3c:c5:51:6d:8c:95:4c:eb:c3:77:
1c:7d:f7:40:9c:66:23:4d:6a:a7:3b:94:c4:da:38:
e9:e2:c6:2c:d5:1f:10:e3:9d:01:f7:23:76:d1:87:
c6:37:55:8f:94:49:4a:b5:db:ac:60:16:e5:85:1f:
ae:f8:e1:e6:c8:09:d5:41:1d:d3:60:1b:9b:25:89:
d9:9f:93:be:f4:81:ba:6f:91:27:bf:9f:df:59:b5:
64:f0:66:a0:83:15:82:3a:22:f5:2a:68:13:2b:a5:
1e:45:0f:18:a1:1e:db:e0:3a:4b:90:ea:dc:2f:4a:
9a:3a:a9:62:db:1a:de:bf:13:f2:d0:79:8b:f7:4b:
ea:09:08:41:e6:80:ee:dc:a4:0d:29:c6:80:aa:2e:
14:0d:21:b5:99:3e:08:38:53:5c:ba:91:01:41:43:
19:ff:25:20:9e:0a:8d:16:1a:ea:65:b4:dd:94:bb:
9d:92:1f:da:32:b6:c8:ee:c3:41:a5:9b:d7:15:56:
8d:68:8e:40:1a:ea:d1:08:36:fa:01:9a:e9:cd:22:
15:cc:89:69:49:b1:a1:bb:7c:48:47:89:07:44:e0:
85:d9:f9:0e:35:34:7b:a2:9a:05:fd:0a:ee:5a:f4:
88:fc:55:3c:d7:d3:2f:8d:35:77:da:e4:4c:be:ad:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:48:4F:17:7C:A2:2F:78:42:69:BA:D9:66:8B:02:C9:1F:25:9B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/V41ITxd8oi94Qmm62WaLAskfJZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:129::/48
Signature Algorithm: sha256WithRSAEncryption
70:f2:8f:66:87:7d:00:73:91:6e:1b:46:2a:34:6c:74:0e:d8:
48:67:36:80:e1:93:84:3c:71:82:69:73:65:5a:d3:10:6d:29:
ae:b4:1f:f6:23:5d:1b:61:aa:17:36:ab:65:da:3c:7c:16:bd:
73:c5:ce:e5:81:21:99:8d:e2:bd:18:f8:1e:ee:e0:f9:0e:10:
db:19:9d:c4:36:39:bb:36:6c:08:c3:1c:ba:27:43:3a:5f:e4:
db:aa:4a:e2:9e:a6:87:46:18:d9:6e:5a:8d:20:1f:12:99:7f:
4a:c1:2e:e1:89:26:01:84:12:1c:3a:4e:a0:00:5a:01:eb:ff:
a0:03:12:c9:66:ba:15:f0:3e:d7:b5:ed:66:f8:82:3d:f4:11:
f2:05:02:1e:1e:d0:a7:41:bf:f9:89:c6:2c:5b:0b:02:2b:31:
b8:31:6e:1c:31:e2:0e:c7:00:21:40:1f:bc:84:47:4f:10:f3:
f4:19:bb:12:58:36:ba:a1:76:d3:ee:56:f4:b1:71:46:16:4c:
4e:d7:d3:20:17:51:87:d5:e2:41:34:9d:f1:03:07:f4:14:e6:
75:9a:53:b1:a2:cf:27:86:be:db:ac:54:49:b6:3c:45:27:ca:
00:3f:01:c4:00:f0:e6:30:2b:b5:f0:8f:23:18:3a:5d:5b:92:
f7:87:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org