Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lK7zlPHw6y_dDmWhf4fQtokG1oc.roa
File: lK7zlPHw6y_dDmWhf4fQtokG1oc.roa (raw, json)
Hash identifier: wSy6M6XXkyvpn1tD8O7QXYQ1MobRmpyC+Iydj+QWqxk=
Subject key identifier: 94:AE:F3:94:F1:F0:EB:2F:DD:0E:65:A1:7F:87:D0:B6:89:06:D6:87
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E149FB50E8CDECF4C6DFB1B37E75
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lK7zlPHw6y_dDmWhf4fQtokG1oc.roa
Signing time: Tue 06 Feb 2024 18:24:16 +0000
ROA not before: Tue 06 Feb 2024 18:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200716
IP address blocks: 2a0f:b241:ca::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e1:49:fb:50:e8:cd:ec:f4:c6:df:b1:b3:7e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94aef394f1f0eb2fdd0e65a17f87d0b68906d687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:ca:e2:7a:fa:4b:c5:42:d0:0c:0a:7e:da:
06:85:2d:90:d2:eb:6e:e4:35:73:26:ad:a0:aa:b9:
f1:2b:61:a6:12:ab:db:9b:09:21:e2:de:99:39:10:
6a:7a:e0:cf:f8:da:52:7e:62:0f:43:6f:45:0a:d0:
34:6e:f9:d7:d0:e2:1d:67:35:b8:32:e9:ef:89:52:
ed:a6:fe:bf:91:f5:fd:ba:73:21:fd:0e:5b:12:36:
85:82:54:eb:44:f3:1b:22:b1:0d:24:5a:ea:f2:eb:
3d:03:05:87:e1:53:65:2f:b4:e7:73:0d:8e:94:3f:
fa:1f:ce:56:21:c8:5f:e5:af:f5:ea:2c:fa:23:51:
a8:0c:a4:96:1e:4d:ef:ab:42:8b:32:41:6d:33:8e:
f5:64:69:f8:92:5b:44:aa:59:3d:4b:16:b1:56:c2:
07:bd:6a:f7:35:34:a8:79:cb:3f:72:11:d4:49:b3:
37:97:6b:8c:bc:8c:32:b8:fe:49:8c:6d:05:2a:85:
7c:aa:f9:b2:02:19:70:f9:e9:bf:1a:ec:29:d9:54:
d2:a0:cb:d4:8c:25:46:13:02:17:aa:f2:4b:3f:5a:
a8:3c:c5:5e:cc:5b:90:b3:af:db:84:38:72:56:a7:
04:ba:78:ca:e7:6e:bf:5c:2d:29:44:53:3d:ce:4c:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:F3:94:F1:F0:EB:2F:DD:0E:65:A1:7F:87:D0:B6:89:06:D6:87
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lK7zlPHw6y_dDmWhf4fQtokG1oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:ca::/48
Signature Algorithm: sha256WithRSAEncryption
32:1b:7c:7c:26:17:62:9e:ef:0a:b8:d0:56:98:4c:e9:85:57:
fe:be:e4:2b:dc:8e:8b:94:a8:e4:aa:bd:d9:43:37:1b:70:31:
9b:7a:3b:d2:41:1b:5e:00:06:ef:03:0c:4a:b8:fd:8f:42:44:
5c:3c:fc:2a:da:5f:54:74:01:42:e1:ec:af:ca:65:ac:17:cb:
e9:64:79:f1:bd:88:3e:0a:24:2a:1a:c8:34:30:24:ee:99:db:
30:c2:1c:fd:42:ea:53:94:8b:bb:fe:0f:c1:72:16:b6:39:9b:
2d:03:6a:63:31:2a:91:4c:d7:e4:95:73:62:c4:0d:0b:a1:a1:
4a:01:4d:2d:13:95:e2:7d:3b:ac:af:3c:fa:aa:5d:c1:68:cb:
10:43:02:40:a0:ec:3f:f9:3e:65:0e:e0:6e:8c:f7:1d:62:5b:
1a:7e:aa:dc:d3:b9:24:9b:19:32:ff:00:50:ce:6f:99:82:bd:
1d:a3:4b:75:b0:f4:96:14:bb:06:bc:be:1c:83:5e:d4:6f:ca:
fa:58:65:a8:98:a9:86:88:00:b2:6d:e1:ac:9a:85:88:54:ea:
55:1d:20:e7:9b:29:e6:3e:33:5a:3e:37:32:23:d8:4b:50:79:
4f:7c:d9:6d:7f:59:71:66:9f:93:e7:38:c3:f3:d5:dd:03:f1:
25:52:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org