Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/37tSt7ScJM7CWhn6CTdI2nQ38xA.roa
File: 37tSt7ScJM7CWhn6CTdI2nQ38xA.roa (raw, json)
Hash identifier: MwWpjNvQSP1O/UG2GMF7fPBfeDeB1HcTUEvIwEn7uEU=
Subject key identifier: DF:BB:52:B7:B4:9C:24:CE:C2:5A:19:FA:09:37:48:DA:74:37:F3:10
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA63917CEA12611E24BB150712B8E69
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/37tSt7ScJM7CWhn6CTdI2nQ38xA.roa
Signing time: Tue 06 Feb 2024 18:20:16 +0000
ROA not before: Tue 06 Feb 2024 18:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198125
IP address blocks: 2a0f:b241:78::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a6:39:17:ce:a1:26:11:e2:4b:b1:50:71:2b:8e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfbb52b7b49c24cec25a19fa093748da7437f310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:4a:d0:7b:df:1e:ab:49:77:35:3e:4e:e4:
a7:17:6e:a7:48:64:8f:fd:48:74:5d:1b:04:08:42:
55:82:df:76:d3:5d:c3:6d:82:f9:34:3a:3f:90:09:
8e:5b:87:9d:2a:c5:a2:de:53:a1:5b:e4:e3:17:91:
50:b8:53:eb:01:b9:88:94:b2:0a:80:e7:6e:e8:08:
f9:6b:fd:91:18:5f:42:15:af:a6:97:e9:01:dd:94:
43:fe:a8:aa:54:58:f3:9e:7a:99:3c:43:4a:b0:f3:
90:1d:59:89:c4:2c:00:7c:f9:8a:97:65:cd:2c:19:
a2:d0:a6:71:a8:52:54:1d:01:5c:36:ce:4d:e2:50:
26:66:a0:e4:02:0c:03:07:16:62:d8:27:32:42:3f:
45:0a:af:da:b8:3b:5f:a6:63:03:2f:44:8e:5d:6b:
05:dc:c4:f1:2d:2d:6e:63:da:2c:86:3f:cb:6b:d2:
aa:1c:77:4e:93:be:e2:05:ac:35:94:48:bf:60:80:
55:2e:9c:7c:b2:34:4d:5c:8e:29:c2:35:36:68:da:
84:75:04:50:7f:b2:86:88:f7:87:df:58:48:18:81:
8d:35:3d:47:c0:28:5d:4b:ea:08:56:1b:9d:fa:86:
25:02:97:85:3d:cb:cb:d1:25:2b:fa:10:1b:24:6e:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BB:52:B7:B4:9C:24:CE:C2:5A:19:FA:09:37:48:DA:74:37:F3:10
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/37tSt7ScJM7CWhn6CTdI2nQ38xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:78::/48
Signature Algorithm: sha256WithRSAEncryption
50:41:cc:e9:89:4b:06:c8:0d:68:3d:75:bf:1f:ca:bb:23:fd:
9e:c3:20:9c:8b:12:94:3f:48:3e:60:f1:86:da:23:bc:0f:63:
95:0d:b4:26:db:93:a7:94:26:32:0b:56:da:c6:c0:b3:74:ce:
57:ad:ab:73:1b:0c:35:57:29:71:d2:04:02:06:1c:1b:b8:61:
a2:1a:95:6c:95:a6:86:77:53:9b:6f:bd:ab:6b:ec:d9:7b:d1:
4c:44:2e:da:7d:b4:01:e7:0f:57:c0:4a:d2:12:91:f3:ca:3e:
ce:25:37:cd:4f:ad:a2:d6:4f:a3:c1:fe:f7:ed:eb:79:39:e4:
eb:bb:6a:1c:f4:7d:e0:5e:67:bd:9e:aa:88:6e:01:86:63:4c:
ce:f4:38:3e:6b:84:8e:fb:b7:21:be:0a:e7:2a:41:55:61:59:
6d:54:10:a6:5a:3d:1d:80:ba:ed:08:5d:e8:09:43:5b:30:80:
fd:20:7f:14:20:28:cb:f2:2b:8a:61:85:11:76:dc:c5:91:48:
67:41:b7:23:b9:55:46:46:d9:20:76:f1:52:2d:b6:e5:dc:36:
0e:10:84:09:47:fc:f3:b5:00:af:19:f4:10:59:98:9d:34:4d:
79:e5:a7:36:f7:00:14:96:ba:d5:db:58:f1:5a:c1:f5:1a:46:
3a:d4:96:28
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/pjkXzqEmEeJLsVBxK45pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmJiNTJiN2I0OWMyNGNlYzI1YTE5ZmEwOTM3NDhkYTc0MzdmMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GJK0HvfHqtJdzU+TuSnF26nSGSP
/Uh0XRsECEJVgt92013DbYL5NDo/kAmOW4edKsWi3lOhW+TjF5FQuFPrAbmIlLIK
gOdu6Aj5a/2RGF9CFa+ml+kB3ZRD/qiqVFjznnqZPENKsPOQHVmJxCwAfPmKl2XN
LBmi0KZxqFJUHQFcNs5N4lAmZqDkAgwDBxZi2CcyQj9FCq/auDtfpmMDL0SOXWsF
3MTxLS1uY9oshj/La9KqHHdOk77iBaw1lEi/YIBVLpx8sjRNXI4pwjU2aNqEdQRQ
f7KGiPeH31hIGIGNNT1HwChdS+oIVhud+oYlApeFPcvL0SUr+hAbJG5fcwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFN+7Ure0nCTOwloZ+gk3SNp0N/MQMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvMzd0U3Q3U2NKTTdDV2huNkNUZEkyblEzOHhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQB4
MA0GCSqGSIb3DQEBCwUAA4IBAQBQQczpiUsGyA1oPXW/H8q7I/2ewyCcixKUP0g+
YPGG2iO8D2OVDbQm25OnlCYyC1baxsCzdM5XratzGww1Vylx0gQCBhwbuGGiGpVs
laaGd1Obb72ra+zZe9FMRC7afbQB5w9XwErSEpHzyj7OJTfNT62i1k+jwf737et5
OeTru2oc9H3gXme9nqqIbgGGY0zO9Dg+a4SO+7chvgrnKkFVYVltVBCmWj0dgLrt
CF3oCUNbMID9IH8UICjL8iuKYYURdtzFkUhnQbcjuVVGRtkgdvFSLbbl3DYOEIQJ
R/zztQCvGfQQWZidNE155ac29wAUlrrV21jxWsH1GkY61JYo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org