Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XnO0_uwefEKxDoWQvnYeqsqfLaI.roa
File: XnO0_uwefEKxDoWQvnYeqsqfLaI.roa (raw, json)
Hash identifier: D+TPU6ZzHAlFHgvB8jWpMW3wM01nrXVQWWspbZaKF1s=
Subject key identifier: 5E:73:B4:FE:EC:1E:7C:42:B1:0E:85:90:BE:76:1E:AA:CA:9F:2D:A2
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAD8F42D8D5F9AB91272AADD86F1FFA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XnO0_uwefEKxDoWQvnYeqsqfLaI.roa
Signing time: Tue 06 Feb 2024 18:28:17 +0000
ROA not before: Tue 06 Feb 2024 18:28:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216089
IP address blocks: 2a0f:b241:108::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ad:8f:42:d8:d5:f9:ab:91:27:2a:ad:d8:6f:1f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:28:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e73b4feec1e7c42b10e8590be761eaaca9f2da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:57:21:69:fe:d9:f1:2e:86:7b:5b:88:8f:
8a:0a:02:57:2f:1e:90:74:16:c5:6a:9e:ad:69:3a:
3d:ad:29:37:c7:29:4c:14:b5:74:70:c1:25:01:77:
2b:aa:9c:49:27:83:01:de:9f:5b:f5:46:6d:77:ac:
c8:e6:34:bd:0f:cc:70:23:aa:76:86:d5:c9:6f:f9:
a4:f2:0d:6c:94:d8:a6:22:9b:f4:1d:ee:4f:ca:2f:
8a:9a:37:54:18:d9:ac:3a:6a:24:cd:7f:a4:c6:13:
9e:b0:11:ab:a4:15:ed:a8:dc:e8:c7:2b:7d:ed:77:
a7:01:e3:eb:d7:97:fe:04:32:a9:86:c2:6d:20:5d:
be:9e:91:db:9d:f4:d0:34:ec:a8:4a:e0:4a:f3:ec:
6b:f1:57:ab:92:f2:ca:45:e1:90:20:5b:84:a2:3e:
00:db:17:44:20:4c:48:4c:4c:36:98:25:d1:f5:5e:
92:d2:72:4c:8e:c2:be:2d:c1:5e:de:62:ed:e7:e5:
c0:3a:73:c6:83:59:ba:0a:3b:84:af:14:59:fb:8c:
ef:fa:04:1c:4f:a1:2d:bd:d9:ac:4b:b0:74:0a:b9:
4b:f5:9a:2e:ef:38:65:63:07:df:cf:3a:17:f7:cc:
84:64:ad:4b:a1:f3:6c:38:85:cf:5a:ab:4f:cd:2c:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:73:B4:FE:EC:1E:7C:42:B1:0E:85:90:BE:76:1E:AA:CA:9F:2D:A2
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XnO0_uwefEKxDoWQvnYeqsqfLaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:108::/48
Signature Algorithm: sha256WithRSAEncryption
07:41:00:ba:76:54:ae:58:59:ce:48:7a:1b:1e:fb:dd:03:ea:
46:2d:d8:a4:aa:eb:51:bc:9d:61:eb:59:d1:92:7c:8a:eb:49:
71:00:de:98:55:37:de:af:fe:9f:62:bd:51:aa:ea:aa:7a:ea:
f1:0d:56:45:f4:28:b0:05:dc:b0:b9:7b:b5:48:0c:2a:78:13:
d5:54:77:be:25:cc:dd:a3:74:84:42:f9:48:4f:dc:36:b5:a8:
ce:6f:d1:f8:44:40:fd:86:33:d1:4e:3d:b5:17:56:32:bd:54:
23:5a:e7:aa:37:b5:a0:cf:6d:1f:4a:94:a5:8e:70:f5:48:39:
8f:77:86:08:60:06:2d:6c:b1:75:d5:d4:01:41:67:da:88:89:
66:5c:e0:e7:ee:cf:eb:41:46:0b:4e:01:03:ae:da:40:43:a4:
92:b5:6c:56:cd:fe:1d:a9:7c:d9:15:4b:30:6f:5f:2f:fa:a8:
c8:54:4f:16:5a:dc:12:10:b0:9b:da:cd:75:2a:94:73:9c:b3:
3b:df:cc:e7:49:f5:54:f2:97:03:6b:24:4e:0b:6d:2d:f0:1b:
bd:c0:56:43:ca:88:3b:6a:28:a9:81:9b:db:e0:b9:44:08:6f:
a9:8d:a5:eb:3b:63:21:22:fa:26:fb:83:a5:fd:ab:d6:71:10:
27:69:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org