Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1RVkwvLW6_VakCxkbc9VZH535Sg.roa
File: 1RVkwvLW6_VakCxkbc9VZH535Sg.roa (raw, json)
Hash identifier: VDngeBs9tg02DFonmseTW5Ngn7d6HFzm4ArxYP0vxEo=
Subject key identifier: D5:15:64:C2:F2:D6:EB:F5:5A:90:2C:64:6D:CF:55:64:7E:77:E5:28
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96AFC20EC1A4DD8CB175B81BFC3226
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1RVkwvLW6_VakCxkbc9VZH535Sg.roa
Signing time: Tue 06 Feb 2024 18:03:18 +0000
ROA not before: Tue 06 Feb 2024 18:03:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216336
IP address blocks: 2a0f:b241:5d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:af:c2:0e:c1:a4:dd:8c:b1:75:b8:1b:fc:32:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d51564c2f2d6ebf55a902c646dcf55647e77e528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:23:be:09:d1:43:6f:67:d6:56:76:59:fb:
42:cd:54:cd:25:d9:9b:93:09:03:53:32:ef:18:ac:
43:48:4c:55:0d:7f:57:df:27:8e:fc:74:59:89:f2:
4c:4e:af:04:58:ab:07:a6:8f:95:5e:21:b6:31:c3:
2b:c2:a2:27:8b:d8:6f:62:e1:aa:81:1e:66:29:a7:
65:f1:bd:84:01:a3:cc:d4:d2:ff:f5:ee:ed:32:b8:
06:d9:f9:3c:4c:e9:1d:0b:c8:63:b6:49:12:1d:10:
1f:e7:d5:b7:33:58:2c:4c:bb:ea:5d:98:90:7e:4e:
4d:fb:cd:70:4e:d0:e9:12:7d:ba:64:39:98:3c:e2:
eb:85:41:2f:53:b4:a6:bc:97:b7:78:19:b9:6f:17:
14:47:7f:f4:9b:d4:3c:0c:aa:eb:28:6b:c0:56:d0:
93:c7:d4:3c:a0:67:4a:6c:dc:f0:34:50:55:1b:6e:
63:18:d1:a1:8a:cb:cc:22:fd:18:82:48:04:78:83:
bf:c8:44:a5:9b:29:28:59:5b:2b:0b:37:27:8c:24:
6e:95:1a:fd:7e:fd:9a:9c:62:61:54:70:13:20:c6:
f9:42:61:93:b4:38:e3:1a:de:b2:0e:d3:6e:b8:4d:
96:2e:14:48:2b:6b:a6:66:00:53:ea:78:13:a3:f7:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:64:C2:F2:D6:EB:F5:5A:90:2C:64:6D:CF:55:64:7E:77:E5:28
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1RVkwvLW6_VakCxkbc9VZH535Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:5d::/48
Signature Algorithm: sha256WithRSAEncryption
75:4b:3b:d6:1b:ce:01:f1:3d:81:35:e7:fd:12:03:68:2f:ec:
66:15:cd:a0:7b:df:4f:3f:bc:e8:5b:27:50:03:cd:fe:41:9e:
70:33:c2:82:49:4a:b1:c8:57:ce:94:3f:3a:b1:3f:5d:50:28:
23:2b:cf:b6:c5:10:b3:52:63:4c:d6:d1:4b:d2:81:9d:f8:61:
76:f8:a7:66:fe:95:de:64:b7:75:e0:25:44:42:11:c1:4c:92:
a2:40:68:00:67:1b:e4:ca:fb:77:b2:be:32:4a:a7:38:03:1c:
21:c7:e3:74:48:a4:08:bf:ae:a3:f2:5d:1d:30:58:33:3c:25:
05:44:29:ba:0d:ab:75:37:73:80:99:22:ac:9b:bb:cd:35:61:
d0:b2:e2:b8:ba:69:75:08:44:75:2a:91:43:35:12:ae:40:a8:
09:e4:6d:05:c3:31:d0:43:71:01:ac:87:e2:bb:f7:36:d3:de:
22:d3:38:4e:3c:ca:70:46:07:c2:41:7d:03:87:2a:61:9e:7c:
d4:c4:43:54:92:a5:86:13:da:b9:ca:f5:9e:bc:7e:8a:00:f9:
3e:2c:53:c7:93:be:e0:7e:d2:ee:f1:62:9e:fb:ec:a3:90:80:
74:b2:9f:9c:2d:85:08:f6:a9:93:01:d6:4b:97:c3:70:e0:c9:
de:d0:b8:7e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/lq/CDsGk3Yyxdbgb/DImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTE1NjRjMmYyZDZlYmY1NWE5MDJjNjQ2ZGNmNTU2NDdlNzdlNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUYjvgnRQ29n1lZ2WftCzVTNJdmb
kwkDUzLvGKxDSExVDX9X3yeO/HRZifJMTq8EWKsHpo+VXiG2McMrwqIni9hvYuGq
gR5mKadl8b2EAaPM1NL/9e7tMrgG2fk8TOkdC8hjtkkSHRAf59W3M1gsTLvqXZiQ
fk5N+81wTtDpEn26ZDmYPOLrhUEvU7SmvJe3eBm5bxcUR3/0m9Q8DKrrKGvAVtCT
x9Q8oGdKbNzwNFBVG25jGNGhisvMIv0YgkgEeIO/yESlmykoWVsrCzcnjCRulRr9
fv2anGJhVHATIMb5QmGTtDjjGt6yDtNuuE2WLhRIK2umZgBT6ngTo/c6xwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNUVZMLy1uv1WpAsZG3PVWR+d+UoMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvMVJWa3d2TFc2X1Zha0N4a2JjOVZaSDUzNVNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQBd
MA0GCSqGSIb3DQEBCwUAA4IBAQB1SzvWG84B8T2BNef9EgNoL+xmFc2ge99PP7zo
WydQA83+QZ5wM8KCSUqxyFfOlD86sT9dUCgjK8+2xRCzUmNM1tFL0oGd+GF2+Kdm
/pXeZLd14CVEQhHBTJKiQGgAZxvkyvt3sr4ySqc4Axwhx+N0SKQIv66j8l0dMFgz
PCUFRCm6Dat1N3OAmSKsm7vNNWHQsuK4uml1CER1KpFDNRKuQKgJ5G0FwzHQQ3EB
rIfiu/c2094i0zhOPMpwRgfCQX0DhyphnnzUxENUkqWGE9q5yvWevH6KAPk+LFPH
k77gftLu8WKe++yjkIB0sp+cLYUI9qmTAdZLl8Nw4Mne0Lh+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org