Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XOulfgIuh6WiSFO_8hAeazopYzE.roa
File: XOulfgIuh6WiSFO_8hAeazopYzE.roa (raw, json)
Hash identifier: yYhMP33UdaqmQfFWPWpaZ4bMblmoBOS4cjbGmhZ6RDA=
Subject key identifier: 5C:EB:A5:7E:02:2E:87:A5:A2:48:53:BF:F2:10:1E:6B:3A:29:63:31
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8D82EEB068E945FC4FC74399B1E004
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XOulfgIuh6WiSFO_8hAeazopYzE.roa
Signing time: Tue 06 Feb 2024 17:53:16 +0000
ROA not before: Tue 06 Feb 2024 17:53:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215665
IP address blocks: 2a0f:b241:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8d:82:ee:b0:68:e9:45:fc:4f:c7:43:99:b1:e0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:53:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ceba57e022e87a5a24853bff2101e6b3a296331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:8e:3b:65:c4:09:37:04:a4:94:5e:0a:ca:
31:83:58:36:4d:57:a4:c1:91:c7:b8:8e:17:f2:15:
11:4a:4c:ef:68:30:68:c4:fa:b1:29:4f:7d:f3:a6:
ac:1a:4b:1d:6c:f7:1d:c7:52:f7:7a:62:58:2d:94:
e0:0d:c6:90:f6:62:a4:bd:78:1b:24:f5:35:f8:be:
5f:18:02:87:2c:69:02:75:4b:41:cb:cd:1c:b0:d2:
21:c1:25:ea:6a:cf:d9:65:8b:44:c4:9c:25:63:ee:
74:a5:d2:09:58:8d:48:7c:da:bf:65:14:7e:c5:8b:
35:f6:74:84:0a:3a:c3:de:5f:e2:16:62:a0:b4:58:
ef:24:02:df:db:5c:b6:c8:70:95:10:70:60:cc:bf:
09:09:0c:10:5b:c5:a5:b7:84:4c:12:6c:a2:f0:68:
4e:e4:1c:0a:7b:22:a1:ca:93:01:19:74:76:c9:06:
bc:63:8e:b2:2d:74:d4:7b:3b:a1:16:52:ac:c5:44:
97:a6:88:0b:18:7a:f7:c2:ad:2c:00:05:e1:92:d6:
d8:dc:08:54:d9:03:96:ee:db:9e:ef:ac:ba:9a:5d:
09:f6:18:d4:9a:60:80:13:de:6d:aa:1c:3a:96:b3:
87:59:0b:8b:49:d5:5b:b1:8a:8f:39:fc:c9:70:9a:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:A5:7E:02:2E:87:A5:A2:48:53:BF:F2:10:1E:6B:3A:29:63:31
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XOulfgIuh6WiSFO_8hAeazopYzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:25::/48
Signature Algorithm: sha256WithRSAEncryption
8a:47:4e:1a:2c:67:50:00:84:ee:17:4d:12:7b:93:7e:dd:8e:
df:f9:fa:45:48:6b:cf:cb:41:ca:88:4e:b0:6f:5a:ca:32:4f:
23:58:73:55:81:f3:2b:00:71:42:50:a3:a4:12:e6:cf:a3:ba:
81:1c:95:91:d6:85:ee:4d:a0:64:c7:04:ab:a2:03:47:be:1e:
dd:53:2b:8f:1f:5d:55:8c:30:9d:20:fc:30:de:bc:4e:f7:9c:
51:e3:01:a2:7d:12:67:77:d7:8e:da:31:82:25:0c:56:eb:5d:
6f:3d:31:62:b4:76:14:e6:ad:e9:ba:69:46:3b:98:db:37:ec:
7d:cc:83:66:03:17:8e:ba:51:79:2e:67:dc:39:b4:f6:83:51:
e8:e3:26:46:21:02:63:eb:f0:b5:55:47:fa:86:3a:b1:82:aa:
25:a1:50:6a:27:3b:b6:f2:78:b1:ed:a3:31:4d:75:65:fe:81:
05:42:8b:c8:cc:32:38:94:67:1c:9f:7c:a7:06:12:c6:3e:56:
72:bd:36:7c:b7:66:be:ca:28:be:dc:37:98:61:49:41:b1:22:
fb:55:21:60:5e:20:fe:40:01:5d:ba:16:58:72:e5:11:7d:6e:
76:bf:ac:47:7a:47:54:e8:ef:3a:b7:18:8d:70:c3:d7:99:52:
db:53:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org