Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7Z6HF_TeTnKTs9WXIovY2USOVWU.roa
File: 7Z6HF_TeTnKTs9WXIovY2USOVWU.roa (raw, json)
Hash identifier: U97uvQHq3uBIkBgTEU9aRQWl0mh48V5xLMVadn9yQEI=
Subject key identifier: ED:9E:87:17:F4:DE:4E:72:93:B3:D5:97:22:8B:D8:D9:44:8E:55:65
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0BF9619541E6FB23C369E73E84021
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7Z6HF_TeTnKTs9WXIovY2USOVWU.roa
Signing time: Wed 07 Feb 2024 05:00:54 +0000
ROA not before: Wed 07 Feb 2024 05:00:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216121
IP address blocks: 2a0f:b241:10b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:bf:96:19:54:1e:6f:b2:3c:36:9e:73:e8:40:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed9e8717f4de4e7293b3d597228bd8d9448e5565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:38:7f:3b:b9:a6:ef:a6:fa:f3:c1:e5:4e:
c2:b5:72:3c:e5:a2:68:00:1f:bc:7a:b9:1e:aa:41:
64:e5:b7:18:0a:02:81:01:c0:91:2d:a7:fd:45:c0:
75:80:0c:ba:aa:a4:26:b4:21:50:04:f1:84:7d:3c:
93:4c:a0:18:3d:15:b4:2c:ed:93:2c:67:cc:30:50:
43:8a:43:00:66:87:11:74:28:c6:6f:2a:39:fb:13:
d0:fe:c1:15:a0:5b:26:48:ee:00:b9:87:f9:8c:de:
71:a5:c2:8e:a2:fd:b7:e9:84:10:71:30:74:4a:48:
f8:88:0a:05:52:ed:98:62:b0:9a:10:8b:f6:6a:a4:
d3:3f:4b:93:f6:10:c4:92:3b:0f:bc:20:e9:18:a5:
3b:ae:4d:e8:56:d3:4f:70:c1:f7:87:8b:1a:f2:bc:
0b:4c:c3:0a:49:9d:95:80:9a:23:9d:da:4e:69:59:
9b:a8:6c:69:2f:71:56:15:5d:21:4c:7c:09:f7:ea:
69:2a:f3:db:a3:1e:3c:98:c9:13:78:73:13:d9:29:
c3:75:34:2a:06:33:0b:bb:49:c4:c7:81:f1:c5:12:
ea:8b:38:ae:ae:35:69:8f:79:e9:00:46:99:6c:69:
b2:f3:8b:28:56:59:30:21:80:72:80:ee:13:69:29:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:87:17:F4:DE:4E:72:93:B3:D5:97:22:8B:D8:D9:44:8E:55:65
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7Z6HF_TeTnKTs9WXIovY2USOVWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:10b::/48
Signature Algorithm: sha256WithRSAEncryption
63:cd:9d:6a:f2:d3:7a:de:0a:75:fb:d0:84:26:60:7e:82:d5:
58:eb:65:1d:94:a9:5f:17:74:57:ff:a1:2e:47:d9:63:89:e7:
0d:0e:5a:25:e9:31:e4:d5:8d:8b:d8:f6:9b:8c:06:30:3f:84:
97:ea:44:0b:02:0e:00:66:82:d6:d6:3a:8c:2f:cc:e2:63:50:
de:c7:ad:a1:e7:39:05:03:7d:d1:19:90:c7:b7:7d:2a:4e:fc:
a4:a7:45:57:e7:3d:96:26:89:14:04:7c:59:bd:99:86:86:bb:
b0:14:f4:aa:9c:1a:3d:e1:85:4d:ea:c2:e2:d3:8d:b2:d9:b1:
14:65:1e:dd:38:88:6c:4b:fb:67:3c:1b:ae:e1:2e:a2:68:82:
bb:df:43:96:43:a1:d2:62:74:3f:e5:b5:52:c2:18:c2:f1:06:
c6:35:57:96:d6:e4:60:e0:81:1e:ac:36:ec:23:39:6b:01:91:
fb:83:16:58:07:49:00:b3:24:5d:11:7d:cf:3f:0b:fe:13:a9:
b9:87:e5:9b:77:76:9b:3b:e5:41:20:74:14:9a:9e:6e:12:aa:
95:99:73:dd:2b:f2:c2:c4:8d:6b:df:70:a7:04:ee:f7:c5:c9:
0d:6c:1d:46:b9:66:3f:c7:4e:7c:64:f5:2b:d2:28:90:1d:ef:
10:ab:8b:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2B8L+WGVQeb7I8Np5z6EAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUwMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDllODcxN2Y0ZGU0ZTcyOTNiM2Q1OTcyMjhiZDhkOTQ0OGU1NTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNc4fzu5pu+m+vPB5U7CtXI85aJo
AB+8erkeqkFk5bcYCgKBAcCRLaf9RcB1gAy6qqQmtCFQBPGEfTyTTKAYPRW0LO2T
LGfMMFBDikMAZocRdCjGbyo5+xPQ/sEVoFsmSO4AuYf5jN5xpcKOov236YQQcTB0
Skj4iAoFUu2YYrCaEIv2aqTTP0uT9hDEkjsPvCDpGKU7rk3oVtNPcMH3h4sa8rwL
TMMKSZ2VgJojndpOaVmbqGxpL3FWFV0hTHwJ9+ppKvPbox48mMkTeHMT2SnDdTQq
BjMLu0nEx4HxxRLqiziurjVpj3npAEaZbGmy84soVlkwIYBygO4TaSmMkQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO2ehxf03k5yk7PVlyKL2NlEjlVlMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvN1o2SEZfVGVUbktUczlXWElvdlkyVVNPVldVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQEL
MA0GCSqGSIb3DQEBCwUAA4IBAQBjzZ1q8tN63gp1+9CEJmB+gtVY62UdlKlfF3RX
/6EuR9ljiecNDlol6THk1Y2L2PabjAYwP4SX6kQLAg4AZoLW1jqML8ziY1Dex62h
5zkFA33RGZDHt30qTvykp0VX5z2WJokUBHxZvZmGhruwFPSqnBo94YVN6sLi042y
2bEUZR7dOIhsS/tnPBuu4S6iaIK730OWQ6HSYnQ/5bVSwhjC8QbGNVeW1uRg4IEe
rDbsIzlrAZH7gxZYB0kAsyRdEX3PPwv+E6m5h+Wbd3abO+VBIHQUmp5uEqqVmXPd
K/LCxI1r33CnBO73xckNbB1GuWY/x058ZPUr0iiQHe8Qq4t0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org