Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lcYWWOMAL9Z6Vkn-A2D-IpXhvjs.roa
File: lcYWWOMAL9Z6Vkn-A2D-IpXhvjs.roa (raw, json)
Hash identifier: j04QLGLhR+BZXW3YqdYofd7E1bI6bDlKBQz6bCnDFfA=
Subject key identifier: 95:C6:16:58:E3:00:2F:D6:7A:56:49:FE:03:60:FE:22:95:E1:BE:3B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB79F182A7B83DFB426B477B3DED40A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lcYWWOMAL9Z6Vkn-A2D-IpXhvjs.roa
Signing time: Tue 06 Feb 2024 18:39:16 +0000
ROA not before: Tue 06 Feb 2024 18:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209762
IP address blocks: 2a0f:b241:13f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:9f:18:2a:7b:83:df:b4:26:b4:77:b3:de:d4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95c61658e3002fd67a5649fe0360fe2295e1be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:30:0e:88:ca:40:35:8a:11:da:29:b4:93:
0c:cd:60:a4:e1:92:9f:21:56:af:da:42:d4:f5:23:
1c:a3:25:b3:41:5f:06:6c:99:f6:d7:62:6f:e6:db:
19:5c:52:aa:44:a2:bd:0b:17:77:40:23:e2:67:5b:
b6:a8:9d:49:b2:60:b9:b8:de:6c:2a:48:68:7c:53:
67:3f:22:6b:3a:18:ed:2e:d4:69:84:4a:15:54:13:
e5:90:1e:99:35:cb:77:db:15:7a:f6:b8:47:d5:25:
70:a1:e6:f9:3b:a6:ff:74:13:06:90:c7:99:87:54:
96:9b:fe:51:7b:e5:d3:6a:b7:a2:fb:db:11:73:f2:
42:23:84:1c:e9:35:5a:e5:7e:49:1a:29:d9:aa:cb:
d4:a3:70:96:ee:64:5a:57:bd:ba:86:e7:18:8a:4b:
58:68:38:a7:11:eb:88:56:c0:04:b7:55:cd:a1:5b:
98:88:4b:9b:53:c3:31:94:f3:d7:f1:a4:0f:0f:99:
6e:75:e3:36:d2:49:36:45:7b:1c:db:6c:c0:6a:04:
77:53:6a:48:94:73:98:53:42:09:72:89:e5:b6:5a:
4c:5d:f8:20:b6:94:7c:17:c2:72:00:ac:22:29:cf:
13:7b:90:ca:67:76:47:5d:9c:24:92:94:9b:fd:0b:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:16:58:E3:00:2F:D6:7A:56:49:FE:03:60:FE:22:95:E1:BE:3B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lcYWWOMAL9Z6Vkn-A2D-IpXhvjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:13f::/48
Signature Algorithm: sha256WithRSAEncryption
07:c5:da:38:43:b9:6e:d4:46:bf:d9:8d:74:d7:22:07:57:91:
cb:ff:6a:c2:8b:50:6f:f0:42:df:54:14:20:e0:df:38:fd:f0:
80:8b:f7:ee:28:c4:35:db:64:03:5b:fa:ec:a8:67:08:4f:db:
ef:9c:88:1f:b8:7c:38:81:80:94:3d:6d:12:5a:b4:b5:58:ec:
5e:de:87:91:10:68:91:b6:0f:02:94:11:0a:e7:ce:4f:92:4e:
5f:03:0d:11:6a:7d:15:cf:dd:17:98:3b:4a:2b:75:ad:b2:3d:
de:ef:d7:70:5f:c9:b6:eb:4c:88:71:9d:9b:bf:e0:3c:03:67:
5e:36:24:66:60:f1:56:83:cd:8f:fa:a0:d9:36:15:78:cd:79:
62:49:be:d1:44:b2:d9:3f:5a:6c:3b:0d:4e:de:1b:97:df:6f:
ca:67:e1:2c:f4:71:e7:ea:9f:0c:b9:33:f8:8f:2d:78:4b:b0:
24:df:0c:25:fc:e3:cf:66:ed:7f:6c:95:90:51:b5:51:13:2f:
f5:bc:89:54:c1:54:69:ae:10:0a:0f:7d:e7:ae:55:ef:cf:3f:
44:e4:88:59:6c:45:a0:60:64:a4:45:b7:ff:e9:3c:47:df:22:
ad:d1:a1:0d:bc:29:04:b4:38:77:66:23:0c:be:ee:c4:fb:83:
63:e0:e4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org