Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7qgU7bUEsBAi3WyeLarR2nFfdas.roa
File: 7qgU7bUEsBAi3WyeLarR2nFfdas.roa (raw, json)
Hash identifier: dodqYqY1XX1O4mVjfWexSu8ScXNJbf4S0Q0/KPjB+DY=
Subject key identifier: EE:A8:14:ED:B5:04:B0:10:22:DD:6C:9E:2D:AA:D1:DA:71:5F:75:AB
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAF607C32D42DA1B2B08E8D40BE1593
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7qgU7bUEsBAi3WyeLarR2nFfdas.roa
Signing time: Tue 06 Feb 2024 18:30:16 +0000
ROA not before: Tue 06 Feb 2024 18:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60438
IP address blocks: 2a0f:b241:125::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:af:60:7c:32:d4:2d:a1:b2:b0:8e:8d:40:be:15:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eea814edb504b01022dd6c9e2daad1da715f75ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:cf:77:b5:16:bc:47:7e:23:c1:5e:7b:d1:
d5:70:5a:48:3a:4f:c7:fd:59:1b:13:3e:8e:b8:71:
8e:ad:ea:cb:23:af:9a:fc:4f:fe:63:77:50:b8:b1:
ba:b1:ab:e8:4e:a9:51:5f:03:7e:1e:cb:13:5e:28:
09:a2:60:d7:e0:03:af:09:47:6b:4d:a1:74:ef:1b:
3d:39:9d:11:ae:6e:74:01:47:ba:c4:3c:a7:c8:3f:
d7:56:05:8f:a6:fa:6e:db:52:de:43:3f:23:a7:cf:
5d:37:73:f0:6f:21:49:eb:21:34:8d:cb:db:8c:f4:
e4:1f:f6:66:ba:af:38:c2:c9:5d:5e:b5:21:63:29:
53:68:21:86:4b:dd:bc:98:f4:b0:0f:59:9a:37:88:
08:4e:4b:6d:04:f5:ec:c8:7f:c3:2a:b2:88:79:16:
ea:af:56:f3:76:23:da:67:75:a3:7f:e3:e8:b1:26:
e5:e0:07:b7:a0:d7:14:1b:36:d7:55:74:78:b8:e7:
56:a5:1a:69:d7:65:ca:14:a4:3a:19:3b:be:bd:92:
7b:ec:e2:2d:12:8a:b0:ef:f3:15:86:19:3c:47:c5:
31:89:ac:74:49:5f:8e:dd:ac:6a:ec:4e:b5:d2:ed:
79:2f:4e:38:16:f8:b8:47:c6:21:4a:8c:51:3f:e5:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A8:14:ED:B5:04:B0:10:22:DD:6C:9E:2D:AA:D1:DA:71:5F:75:AB
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7qgU7bUEsBAi3WyeLarR2nFfdas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:125::/48
Signature Algorithm: sha256WithRSAEncryption
61:3b:ea:18:a5:1e:db:ee:2d:f6:a5:0a:f4:b7:32:ef:8c:bd:
63:a2:e4:d5:b6:80:8f:03:04:d8:55:26:ce:69:27:15:5b:71:
35:2c:68:07:71:af:30:c0:5a:e6:dc:ba:c6:5d:5b:21:ea:3e:
54:8c:11:4d:ae:69:ac:29:2b:2f:ef:43:0e:be:9d:04:a9:db:
1d:93:e2:b3:b9:49:0c:21:ae:f3:59:ce:e8:ee:82:e5:07:23:
64:1b:47:3f:5d:66:02:b3:7b:a1:0b:db:bc:9d:b9:51:70:a9:
b3:2b:9f:60:fd:08:f2:12:fd:81:33:d4:0d:73:22:c8:de:8b:
c6:dd:c3:db:ae:1e:2a:c3:1a:c0:56:46:b9:d2:4f:a3:f9:68:
b8:f2:f1:8a:ad:6c:f1:4e:d4:33:8c:82:4a:1b:02:3d:b1:db:
7f:67:66:07:a6:7e:9d:88:f6:11:23:85:51:50:00:2e:53:9f:
cf:0c:f3:7c:42:83:c0:14:f5:d2:47:e7:98:4e:b5:0e:67:3d:
52:a5:16:eb:bc:44:1b:95:12:72:da:cf:c2:73:7f:66:2a:f2:
1a:02:58:0e:64:3d:45:5a:a7:bd:54:51:b8:1b:d0:fa:02:44:
e8:2d:0a:ef:23:32:34:31:69:e2:78:e2:4c:aa:4c:4f:98:00:
20:46:23:28
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/r2B8MtQtobKwjo1AvhWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWE4MTRlZGI1MDRiMDEwMjJkZDZjOWUyZGFhZDFkYTcxNWY3NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop7Pd7UWvEd+I8Fee9HVcFpIOk/H
/VkbEz6OuHGOrerLI6+a/E/+Y3dQuLG6savoTqlRXwN+HssTXigJomDX4AOvCUdr
TaF07xs9OZ0Rrm50AUe6xDynyD/XVgWPpvpu21LeQz8jp89dN3PwbyFJ6yE0jcvb
jPTkH/Zmuq84wsldXrUhYylTaCGGS928mPSwD1maN4gITkttBPXsyH/DKrKIeRbq
r1bzdiPaZ3Wjf+PosSbl4Ae3oNcUGzbXVXR4uOdWpRpp12XKFKQ6GTu+vZJ77OIt
Eoqw7/MVhhk8R8Uxiax0SV+O3axq7E610u15L044Fvi4R8YhSoxRP+XofQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO6oFO21BLAQIt1sni2q0dpxX3WrMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvN3FnVTdiVUVzQkFpM1d5ZUxhclIybkZmZGFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQEl
MA0GCSqGSIb3DQEBCwUAA4IBAQBhO+oYpR7b7i32pQr0tzLvjL1jouTVtoCPAwTY
VSbOaScVW3E1LGgHca8wwFrm3LrGXVsh6j5UjBFNrmmsKSsv70MOvp0Eqdsdk+Kz
uUkMIa7zWc7o7oLlByNkG0c/XWYCs3uhC9u8nblRcKmzK59g/QjyEv2BM9QNcyLI
3ovG3cPbrh4qwxrAVka50k+j+Wi48vGKrWzxTtQzjIJKGwI9sdt/Z2YHpn6diPYR
I4VRUAAuU5/PDPN8QoPAFPXSR+eYTrUOZz1SpRbrvEQblRJy2s/Cc39mKvIaAlgO
ZD1FWqe9VFG4G9D6AkToLQrvIzI0MWnieOJMqkxPmAAgRiMo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org