Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-Cr6tojRVZdzu9EY8ciKKH7FE0U.roa
File: 1-Cr6tojRVZdzu9EY8ciKKH7FE0U.roa (raw, json)
Hash identifier: HXER2X4CGYNQrD3vrPOrAAPEPVJHfZ38L+Q6kZbkAlo=
Subject key identifier: F8:2A:FA:B6:88:D1:55:97:73:BB:D1:18:F1:C8:8A:28:7E:C5:13:45
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F95BCF3D44374E88675F8A924B02A43
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-Cr6tojRVZdzu9EY8ciKKH7FE0U.roa
Signing time: Tue 06 Feb 2024 18:02:16 +0000
ROA not before: Tue 06 Feb 2024 18:02:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209018
IP address blocks: 2a0f:b241:41::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:95:bc:f3:d4:43:74:e8:86:75:f8:a9:24:b0:2a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:02:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f82afab688d1559773bbd118f1c88a287ec51345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:49:e2:1d:ee:76:4f:64:8a:f8:e9:2b:5f:
0e:cc:60:69:48:1e:9c:84:c7:56:7f:72:48:e6:dc:
27:e3:3a:f8:bc:db:a6:13:0c:c2:7c:34:47:d6:8c:
16:85:25:23:1f:ff:c5:da:7b:d9:10:92:cd:4e:ff:
e5:e7:2a:94:41:c3:14:b0:f3:49:26:20:3d:93:08:
b5:78:1a:46:aa:0e:a3:c5:67:5f:1f:8e:2c:5a:68:
00:9e:95:30:b8:0c:17:2f:28:d9:32:ca:f6:c3:cc:
92:53:04:41:ba:15:d3:c2:c4:b4:37:6e:a0:86:ca:
d3:44:f9:49:af:2d:fb:e8:e5:61:ed:f9:bd:a6:ae:
75:5c:fa:19:e7:1d:a3:a1:82:4c:bf:78:8b:44:13:
91:85:95:8d:8f:e5:5a:0e:ee:0f:16:fb:3c:de:a0:
38:69:24:e4:67:7d:80:19:6d:42:5c:37:3f:66:0f:
54:83:7d:e2:1f:8c:fd:11:86:99:e9:b3:98:77:ce:
d0:e9:ba:61:52:62:5c:7d:df:0b:73:65:a6:23:c2:
03:cd:35:92:fe:68:84:14:14:4c:c7:2a:0d:9b:eb:
e1:51:09:0b:95:c8:6d:8f:ed:5c:0d:66:9a:ef:7a:
90:36:e7:4a:61:a2:94:22:6f:e6:72:4f:45:ac:ab:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2A:FA:B6:88:D1:55:97:73:BB:D1:18:F1:C8:8A:28:7E:C5:13:45
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-Cr6tojRVZdzu9EY8ciKKH7FE0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:41::/48
Signature Algorithm: sha256WithRSAEncryption
59:e9:a0:ce:a4:31:05:ef:ce:15:e0:06:ce:6c:bc:d6:df:0e:
0d:7d:e3:ef:1c:50:9a:cf:a9:e6:cd:b0:d9:ac:85:a3:8a:a8:
30:3a:a2:2e:17:93:c9:f7:cd:59:e6:e2:32:bd:dd:6d:d6:71:
91:64:4c:17:c5:6f:90:2a:85:e0:60:e7:8d:e6:4d:35:ec:31:
ab:a0:78:bf:6b:06:b4:0e:c7:d8:9e:8d:65:59:22:10:fe:b3:
f2:43:a2:87:a5:48:23:d5:5e:21:a4:3a:a2:39:f6:e1:13:b9:
c1:b3:46:4e:50:d0:dd:f8:c2:c7:18:bf:5e:d5:1b:79:ff:61:
96:b2:a1:76:4e:34:62:9b:0e:aa:52:87:6d:0c:8d:48:c7:93:
99:de:d7:81:9b:5b:d9:64:c5:3d:c5:a8:11:8d:98:3e:b7:12:
44:94:9a:26:04:f5:4a:2d:03:2b:ad:da:39:df:5a:7b:54:f9:
69:8f:44:be:f1:24:7f:0a:e2:08:f9:f6:23:23:6d:78:de:9f:
d7:97:b5:e3:5a:10:c0:ea:da:f8:1e:1f:0a:23:68:f4:81:51:
81:1f:0a:01:0b:9d:be:b9:23:10:8a:4d:10:35:78:44:9e:47:
65:ba:d2:85:04:c1:a4:be:98:b9:06:5b:66:81:6f:58:dd:c0:
ee:b6:1a:8f
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAY1/lbzz1EN06IZ1+KkksCpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODJhZmFiNjg4ZDE1NTk3NzNiYmQxMThmMWM4OGEyODdlYzUxMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSVJ4h3udk9kivjpK18OzGBpSB6c
hMdWf3JI5twn4zr4vNumEwzCfDRH1owWhSUjH//F2nvZEJLNTv/l5yqUQcMUsPNJ
JiA9kwi1eBpGqg6jxWdfH44sWmgAnpUwuAwXLyjZMsr2w8ySUwRBuhXTwsS0N26g
hsrTRPlJry376OVh7fm9pq51XPoZ5x2joYJMv3iLRBORhZWNj+VaDu4PFvs83qA4
aSTkZ32AGW1CXDc/Zg9Ug33iH4z9EYaZ6bOYd87Q6bphUmJcfd8Lc2WmI8IDzTWS
/miEFBRMxyoNm+vhUQkLlchtj+1cDWaa73qQNudKYaKUIm/mck9FrKu8VwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPgq+raI0VWXc7vRGPHIiih+xRNFMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvMS1DcjZ0b2pSVlpkenU5RVk4Y2lLS0g3RkUwVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDMvYjg3ZWMwLWY3NWEtNGJiZS1iMDY3LWI3MTc5ODBlNGFk
Ni8xL2JvY1FTazIweEdOeHBfaTJwRUg4TU96ZjRnOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPskEA
QTANBgkqhkiG9w0BAQsFAAOCAQEAWemgzqQxBe/OFeAGzmy81t8ODX3j7xxQms+p
5s2w2ayFo4qoMDqiLheTyffNWebiMr3dbdZxkWRMF8VvkCqF4GDnjeZNNewxq6B4
v2sGtA7H2J6NZVkiEP6z8kOih6VII9VeIaQ6ojn24RO5wbNGTlDQ3fjCxxi/XtUb
ef9hlrKhdk40YpsOqlKHbQyNSMeTmd7XgZtb2WTFPcWoEY2YPrcSRJSaJgT1Si0D
K63aOd9ae1T5aY9EvvEkfwriCPn2IyNteN6f15e141oQwOra+B4fCiNo9IFRgR8K
AQudvrkjEIpNEDV4RJ5HZbrShQTBpL6YuQZbZoFvWN3A7rYajw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org