Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xyrYcl7DIsEqGPSJtm5f8IWoYQw.roa
File: xyrYcl7DIsEqGPSJtm5f8IWoYQw.roa (raw, json)
Hash identifier: Nl0BfnYQcHkwgj4yRZRVG1n117eWF516RdSu10Nff40=
Subject key identifier: C7:2A:D8:72:5E:C3:22:C1:2A:18:F4:89:B6:6E:5F:F0:85:A8:61:0C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA80DEF01BB41E0AFE668D4E8979E84
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xyrYcl7DIsEqGPSJtm5f8IWoYQw.roa
Signing time: Tue 06 Feb 2024 18:22:16 +0000
ROA not before: Tue 06 Feb 2024 18:22:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199741
IP address blocks: 2a0f:b241:8c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:0d:ef:01:bb:41:e0:af:e6:68:d4:e8:97:9e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c72ad8725ec322c12a18f489b66e5ff085a8610c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:f1:a5:a1:cd:82:b4:f0:11:f5:96:57:d4:
4a:22:7a:ca:bb:4b:c9:53:52:e8:a8:71:92:a8:1c:
77:e3:18:a8:63:50:f3:6d:06:5e:98:92:cd:1f:68:
f2:53:8c:14:f6:98:c8:f1:53:03:a6:24:fd:0a:41:
6a:1c:13:73:3c:c3:91:2a:f0:f8:8a:64:b0:6e:cf:
33:b7:a9:1d:33:47:fc:86:26:49:3c:c1:7e:7c:39:
62:5b:b2:14:cc:bf:ad:97:51:66:65:59:4d:7d:66:
81:6e:be:11:33:c9:c8:45:54:a2:5d:48:16:95:2a:
60:82:5a:88:f9:59:d8:6d:1f:d0:80:cd:79:91:19:
92:b0:73:d7:ad:84:dd:b0:f6:27:2e:f5:e5:31:e0:
e5:5c:85:27:87:ab:87:75:55:28:a7:0b:71:f6:b6:
a1:2f:6c:f0:65:30:61:43:54:1e:11:38:eb:6c:46:
ea:1d:ab:7b:2f:19:e5:1d:e3:48:84:8a:77:62:ad:
6a:1a:51:fb:4a:36:08:92:e3:ee:54:38:e8:b3:93:
a8:3c:47:5c:0f:68:84:9f:5b:84:e1:bc:52:68:4f:
9a:fc:b6:bf:6f:29:9a:35:2b:df:c4:74:88:21:a3:
74:ce:75:07:17:3b:69:9c:79:6b:05:f4:e3:5e:fd:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2A:D8:72:5E:C3:22:C1:2A:18:F4:89:B6:6E:5F:F0:85:A8:61:0C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xyrYcl7DIsEqGPSJtm5f8IWoYQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:8c::/48
Signature Algorithm: sha256WithRSAEncryption
04:86:76:13:9d:cc:f4:f8:08:6e:45:8f:1f:d5:5e:1f:2a:90:
d8:50:cd:91:31:55:95:b8:82:2b:13:06:87:2a:4e:19:e4:bc:
e2:8b:07:17:96:74:d6:77:4b:e1:ac:7a:7b:ea:27:a7:02:be:
36:e6:2e:5c:7f:8d:c1:f7:d9:78:cf:03:a8:1e:24:0f:aa:fb:
3c:f1:86:5d:37:ed:2d:a9:d4:72:f5:7f:e1:b7:30:ba:a4:64:
13:48:99:cb:73:6d:17:a3:e9:5c:9a:80:10:34:e9:30:76:22:
39:80:a0:de:2e:1c:de:e5:e4:88:ad:f7:63:bf:db:79:09:d3:
38:a2:54:84:fe:c1:5e:d2:ba:50:1b:34:d1:3b:cf:87:48:25:
12:fb:09:11:0f:69:d2:d5:c6:0c:32:a4:d9:0d:98:2a:a3:21:
76:38:f1:3e:c3:3d:39:ed:8a:b2:80:a7:a7:a5:f3:ac:66:1c:
d1:a0:82:89:b9:ea:e2:19:71:96:47:b2:3f:95:54:66:d6:85:
1f:af:75:51:32:d7:3d:d0:a5:64:75:12:11:8a:3e:8f:07:cf:
4a:42:40:05:06:dc:84:f1:8a:12:19:10:0f:17:58:19:ee:21:
bb:b2:cd:c4:f6:85:49:5f:73:c8:91:e8:12:75:1c:6d:d2:b5:
9f:aa:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org