Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8Rji0H-u_xgNn3dLwZxMOQoH9W4.roa
File: 8Rji0H-u_xgNn3dLwZxMOQoH9W4.roa (raw, json)
Hash identifier: hWDBywWH13dX6M6kFBdv48XYsscjHjKpgYnGxCWFpNA=
Subject key identifier: F1:18:E2:D0:7F:AE:FF:18:0D:9F:77:4B:C1:9C:4C:39:0A:07:F5:6E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96A8B43514A19442F51C6D354CE60F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8Rji0H-u_xgNn3dLwZxMOQoH9W4.roa
Signing time: Tue 06 Feb 2024 18:03:16 +0000
ROA not before: Tue 06 Feb 2024 18:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59799
IP address blocks: 2a0f:b241:65::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:a8:b4:35:14:a1:94:42:f5:1c:6d:35:4c:e6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f118e2d07faeff180d9f774bc19c4c390a07f56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:1d:6f:6b:5b:cc:3b:b9:e4:d9:65:41:71:
16:b4:03:ae:5d:b5:3f:41:14:0f:fe:64:dd:24:55:
16:34:74:07:6e:d8:3b:6e:97:41:51:2b:d6:f4:dd:
16:36:61:77:1a:e7:a5:a9:46:30:a4:8c:50:38:0d:
1c:4d:05:d0:f2:12:11:3a:17:11:c8:1e:b8:68:08:
8b:d1:64:9e:6e:97:87:57:14:70:da:5d:83:94:80:
28:61:20:59:2a:1c:b5:82:e9:dc:ad:23:3e:17:36:
35:33:70:32:3e:d9:78:f4:e1:68:74:81:96:54:80:
4f:87:38:3c:61:d1:34:cd:ce:8f:ad:6f:6b:cd:22:
c4:ea:a1:31:be:8b:61:a1:69:e9:2d:dc:0b:5e:5c:
eb:62:79:84:50:f9:84:e1:c1:19:b4:ac:46:1f:2f:
64:dc:37:55:87:04:e9:4a:b6:c6:b2:45:d8:35:f3:
a2:86:63:5c:4b:1a:62:48:a8:b6:b3:12:91:e5:69:
69:7e:9d:a9:51:30:d2:8d:a1:30:54:6f:42:e4:d1:
90:35:1a:db:3a:9f:2d:c9:7e:41:1f:79:53:7d:8f:
e9:17:33:57:6c:b2:4f:b3:8d:8b:bc:66:af:1b:92:
3b:94:16:cf:a2:e9:24:bf:0f:56:5e:2b:47:89:ec:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:18:E2:D0:7F:AE:FF:18:0D:9F:77:4B:C1:9C:4C:39:0A:07:F5:6E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8Rji0H-u_xgNn3dLwZxMOQoH9W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:65::/48
Signature Algorithm: sha256WithRSAEncryption
2d:a5:b9:09:b7:0f:3d:15:eb:a8:b0:b2:cb:84:e6:aa:a6:a8:
59:1b:07:8a:53:e8:19:0c:b4:6b:6a:59:95:ae:1c:ab:b1:1d:
16:c0:7e:66:46:77:d4:43:67:b4:69:a3:0e:52:c8:c6:9d:28:
3b:fd:76:ef:d2:f0:98:b1:ba:2c:77:75:5a:b2:93:17:52:71:
34:5a:f8:07:64:00:3a:fd:5c:a9:f3:35:79:7b:b2:aa:c3:05:
7a:3a:d2:4c:7b:34:85:1b:7b:cd:11:2e:73:85:be:d9:05:55:
ce:4c:06:b0:07:72:71:96:88:ef:db:f1:25:83:8f:e1:08:55:
d6:96:f4:2f:02:c9:64:d7:a5:97:25:6a:54:d6:3d:74:fc:15:
7d:94:11:93:18:07:44:98:d7:c8:c2:02:dc:9a:56:f4:25:fb:
8d:bf:bd:e1:aa:8b:ed:02:12:b4:32:b1:9a:b0:ec:bc:3a:81:
51:36:21:4d:19:4e:b7:c7:a5:6c:41:42:de:e3:d8:04:a9:a2:
21:f4:19:c4:cd:6e:9c:a9:6e:32:4e:98:98:63:44:98:03:ca:
b0:60:dd:ea:8e:0f:01:35:ca:98:cc:0a:56:23:5a:0c:fa:18:
9b:e2:d1:68:d3:e8:e8:7c:93:25:db:7a:af:6e:41:25:ce:99:
33:1b:13:52
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/lqi0NRShlEL1HG01TOYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTE4ZTJkMDdmYWVmZjE4MGQ5Zjc3NGJjMTljNGMzOTBhMDdmNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZMdb2tbzDu55NllQXEWtAOuXbU/
QRQP/mTdJFUWNHQHbtg7bpdBUSvW9N0WNmF3GuelqUYwpIxQOA0cTQXQ8hIROhcR
yB64aAiL0WSebpeHVxRw2l2DlIAoYSBZKhy1guncrSM+FzY1M3AyPtl49OFodIGW
VIBPhzg8YdE0zc6PrW9rzSLE6qExvothoWnpLdwLXlzrYnmEUPmE4cEZtKxGHy9k
3DdVhwTpSrbGskXYNfOihmNcSxpiSKi2sxKR5Wlpfp2pUTDSjaEwVG9C5NGQNRrb
Op8tyX5BH3lTfY/pFzNXbLJPs42LvGavG5I7lBbPoukkvw9WXitHiezW9wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPEY4tB/rv8YDZ93S8GcTDkKB/VuMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvOFJqaTBILXVfeGdObjNkTHdaeE1PUW9IOVc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQBl
MA0GCSqGSIb3DQEBCwUAA4IBAQAtpbkJtw89FeuosLLLhOaqpqhZGweKU+gZDLRr
almVrhyrsR0WwH5mRnfUQ2e0aaMOUsjGnSg7/Xbv0vCYsbosd3VaspMXUnE0WvgH
ZAA6/Vyp8zV5e7KqwwV6OtJMezSFG3vNES5zhb7ZBVXOTAawB3Jxlojv2/Elg4/h
CFXWlvQvAslk16WXJWpU1j10/BV9lBGTGAdEmNfIwgLcmlb0JfuNv73hqovtAhK0
MrGasOy8OoFRNiFNGU63x6VsQULe49gEqaIh9BnEzW6cqW4yTpiYY0SYA8qwYN3q
jg8BNcqYzApWI1oM+hib4tFo0+jofJMl23qvbkElzpkzGxNS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org