Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mDuO5dDcLD7bKlEjhBYSjIaCsFM.roa
File: mDuO5dDcLD7bKlEjhBYSjIaCsFM.roa (raw, json)
Hash identifier: gTgOtuvoZOI+BuIfMm5JV/+D6uqgsGXGC3dL1amzSC0=
Subject key identifier: 98:3B:8E:E5:D0:DC:2C:3E:DB:2A:51:23:84:16:12:8C:86:82:B0:53
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABB8C09CFAE79D1000232512D495C8
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mDuO5dDcLD7bKlEjhBYSjIaCsFM.roa
Signing time: Tue 06 Feb 2024 18:26:16 +0000
ROA not before: Tue 06 Feb 2024 18:26:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205431
IP address blocks: 2a0f:b241:ec::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:b8:c0:9c:fa:e7:9d:10:00:23:25:12:d4:95:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=983b8ee5d0dc2c3edb2a51238416128c8682b053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:b7:3e:b6:ae:b3:6d:93:f2:7a:c6:79:9f:
ed:26:c6:d2:60:97:b6:1c:74:05:ed:94:1b:51:f1:
92:1a:18:ee:39:08:3a:ca:19:34:5d:36:8b:e0:34:
e3:0e:35:20:20:eb:24:0c:ef:e5:23:44:ba:54:b1:
58:69:56:54:c8:45:93:1d:a3:b6:7c:fd:1f:7a:b3:
dd:e8:60:60:b7:be:bb:2c:23:3a:83:0a:b0:b0:43:
d6:ce:ac:1e:40:45:01:ad:b9:e8:b5:0e:dc:d4:9d:
35:ee:d2:46:e1:0e:1f:3f:f6:de:87:28:c5:b8:11:
30:ba:00:78:4f:ef:7f:4f:99:62:0c:a4:dd:cd:03:
54:54:3a:6e:16:48:26:43:11:1b:7c:b1:3c:aa:61:
bf:23:56:e3:31:aa:84:b8:49:a4:3c:c7:ee:8d:3d:
29:21:c6:65:4e:16:a9:06:e5:cc:2f:57:dc:7b:f3:
78:33:42:f1:23:f5:73:2d:53:ec:51:3b:92:60:a3:
e0:93:4f:ff:05:67:03:80:16:f4:ae:bd:36:0f:62:
3a:3e:54:bd:31:49:66:12:5b:5c:1b:78:2c:55:c3:
4c:aa:d9:89:98:b4:c1:d3:cd:87:d1:f7:d3:66:53:
2f:fc:31:4d:f2:6c:e6:b2:8a:c9:1c:53:40:a6:b4:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3B:8E:E5:D0:DC:2C:3E:DB:2A:51:23:84:16:12:8C:86:82:B0:53
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mDuO5dDcLD7bKlEjhBYSjIaCsFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:ec::/48
Signature Algorithm: sha256WithRSAEncryption
76:2d:95:99:e8:be:b9:86:4e:5e:9c:f3:54:3b:fe:d1:54:1c:
0f:2e:10:62:92:ed:7a:a5:08:a6:44:8c:60:07:a5:46:5a:ab:
ee:ee:af:5c:6c:5e:4b:78:b9:d7:45:17:05:77:06:39:ff:cb:
1c:07:d9:64:1e:d8:09:4b:74:fc:e6:5a:ca:c9:00:28:05:8b:
40:4f:8c:d3:e1:8a:95:77:c2:96:bd:32:b1:fd:61:04:65:b2:
63:b6:f5:6f:11:65:e7:e4:37:b2:38:d0:99:87:11:1a:fe:b9:
9d:d1:29:70:52:95:f6:4f:65:58:03:a1:83:bc:72:cd:83:c5:
45:e9:bb:8e:33:f3:06:fa:14:b4:3c:95:12:d1:df:6b:98:cf:
02:53:60:a2:96:30:91:22:46:c9:18:be:3e:32:ee:b1:e2:14:
c7:ab:dd:d9:fc:c0:bd:44:56:26:d2:21:27:27:9c:fe:40:6c:
86:5b:23:4a:4a:f2:7e:69:1e:99:c9:8d:66:20:37:f1:d5:ba:
98:61:a9:51:5b:8a:38:88:0c:86:90:c4:53:7b:21:00:8c:57:
bc:50:03:be:90:3a:a4:55:4c:c0:43:5a:b5:33:e8:7a:0b:39:
11:53:77:5a:80:64:86:b3:bf:5a:7d:6a:aa:d5:a9:bc:4c:d8:
67:3f:67:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 09:08:08 2024 by rpki-client on console-ams.rpki-client.org