Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/89eS9Oj7-3xuPE7DsqpSB8eXGfc.roa
File: 89eS9Oj7-3xuPE7DsqpSB8eXGfc.roa (raw, json)
Hash identifier: 7E8XUn0m4uNkB2Ikbuj5L9T2Pc+TGMf7aJPHg5KQed8=
Subject key identifier: F3:D7:92:F4:E8:FB:FB:7C:6E:3C:4E:C3:B2:AA:52:07:C7:97:19:F7
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F067889F6D1531CD1E28E8399C178F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/89eS9Oj7-3xuPE7DsqpSB8eXGfc.roa
Signing time: Wed 07 Feb 2024 05:00:32 +0000
ROA not before: Wed 07 Feb 2024 05:00:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60379
IP address blocks: 2a0f:b241:66::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:67:88:9f:6d:15:31:cd:1e:28:e8:39:9c:17:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3d792f4e8fbfb7c6e3c4ec3b2aa5207c79719f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:18:d6:fe:9d:23:96:06:33:0a:16:77:6e:
f8:05:3b:c4:43:c6:f2:c7:79:45:6f:48:ef:94:77:
59:f8:4a:ae:40:b5:95:ca:a5:92:8e:e1:e5:84:94:
58:71:5d:89:62:7d:20:61:f0:64:8d:cb:7e:4a:88:
55:80:10:06:30:43:24:51:6b:36:ed:9a:13:0b:88:
fa:bd:ea:40:92:63:98:6b:85:4d:47:f1:7d:e1:ed:
09:1d:ef:df:c3:e7:70:ff:4c:bc:f9:c5:c7:b5:b4:
ef:33:6a:35:72:77:29:2f:21:ee:cf:ce:88:02:4e:
31:24:61:9b:d7:6e:a8:2f:32:b4:26:dd:b6:63:49:
04:b8:a3:11:0e:70:94:cc:ad:1a:a8:49:ba:47:0a:
14:0f:b6:d8:5f:de:b5:b1:31:db:93:4e:fc:c9:28:
ae:d5:4e:5d:77:63:32:b2:88:a7:52:a7:38:33:ab:
29:ab:76:e6:02:71:b1:0b:15:bf:a8:48:4f:b4:03:
42:27:4a:af:e9:e2:82:19:13:a4:9a:81:34:e8:ec:
5c:17:59:e6:66:c5:2c:8a:01:27:ed:4d:9e:61:39:
ea:e2:25:4b:47:8f:2c:d0:90:86:12:16:48:f9:d4:
94:57:c1:7b:ec:dd:83:95:a7:63:0b:bb:c1:fd:3a:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D7:92:F4:E8:FB:FB:7C:6E:3C:4E:C3:B2:AA:52:07:C7:97:19:F7
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/89eS9Oj7-3xuPE7DsqpSB8eXGfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:66::/48
Signature Algorithm: sha256WithRSAEncryption
7b:86:09:29:28:cd:7e:ce:73:ca:ec:5e:42:a3:d2:ce:00:b8:
9f:65:0d:93:49:07:50:03:b4:05:19:6b:3f:52:56:c5:25:e0:
76:c5:ec:44:b1:60:78:61:83:19:73:7f:da:f9:b6:35:0a:c8:
de:cb:3f:21:0b:eb:68:12:24:e7:79:2f:6d:70:b1:e1:80:36:
12:78:f3:a6:2b:8b:a8:5c:b3:47:21:9d:39:57:78:33:b1:d3:
f9:df:dc:f6:8e:6f:69:74:c7:8b:a4:ba:08:c0:48:03:f3:c0:
c9:d6:d1:05:4b:76:0f:cf:c0:12:e1:88:e3:2c:6e:57:f3:06:
5d:39:23:4d:c1:41:4f:b9:f1:ac:70:6e:5c:6c:67:a7:ac:3c:
93:66:5d:05:6f:05:b0:71:51:1b:91:c2:9c:af:a6:6c:36:3a:
87:53:bd:8f:3a:d8:e0:e2:38:52:8c:45:f1:12:c8:de:c0:f1:
89:dd:04:d4:49:ff:76:54:79:07:23:57:b2:96:8f:9f:df:09:
3e:1b:20:fd:f0:fe:e9:57:8d:2a:4a:13:52:b4:6c:75:05:7f:
1f:67:07:e5:5a:d7:c4:59:53:d2:e3:7f:37:69:cc:41:d9:85:
6f:80:e9:de:39:b3:58:f3:9b:ca:de:d5:55:13:06:c2:e4:96:
a3:a9:89:8f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2B8GeIn20VMc0eKOg5nBePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUwMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2Q3OTJmNGU4ZmJmYjdjNmUzYzRlYzNiMmFhNTIwN2M3OTcxOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMwY1v6dI5YGMwoWd274BTvEQ8by
x3lFb0jvlHdZ+EquQLWVyqWSjuHlhJRYcV2JYn0gYfBkjct+SohVgBAGMEMkUWs2
7ZoTC4j6vepAkmOYa4VNR/F94e0JHe/fw+dw/0y8+cXHtbTvM2o1cncpLyHuz86I
Ak4xJGGb126oLzK0Jt22Y0kEuKMRDnCUzK0aqEm6RwoUD7bYX961sTHbk078ySiu
1U5dd2MysoinUqc4M6spq3bmAnGxCxW/qEhPtANCJ0qv6eKCGROkmoE06OxcF1nm
ZsUsigEn7U2eYTnq4iVLR48s0JCGEhZI+dSUV8F77N2DladjC7vB/TqiLQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPPXkvTo+/t8bjxOw7KqUgfHlxn3MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvODllUzlPajctM3h1UEU3RHNxcFNCOGVYR2ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQBm
MA0GCSqGSIb3DQEBCwUAA4IBAQB7hgkpKM1+znPK7F5Co9LOALifZQ2TSQdQA7QF
GWs/UlbFJeB2xexEsWB4YYMZc3/a+bY1Csjeyz8hC+toEiTneS9tcLHhgDYSePOm
K4uoXLNHIZ05V3gzsdP539z2jm9pdMeLpLoIwEgD88DJ1tEFS3YPz8AS4YjjLG5X
8wZdOSNNwUFPufGscG5cbGenrDyTZl0FbwWwcVEbkcKcr6ZsNjqHU72POtjg4jhS
jEXxEsjewPGJ3QTUSf92VHkHI1eylo+f3wk+GyD98P7pV40qShNStGx1BX8fZwfl
WtfEWVPS4383acxB2YVvgOneObNY85vK3tVVEwbC5JajqYmP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org