Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9E7k044Fy7JXr6RGceKxrRY7FWY.roa
File: 9E7k044Fy7JXr6RGceKxrRY7FWY.roa (raw, json)
Hash identifier: VhdFUuIE5wDbQKivr4fPNYMLOBKQRNK8RWZumdRqUnw=
Subject key identifier: F4:4E:E4:D3:8E:05:CB:B2:57:AF:A4:46:71:E2:B1:AD:16:3B:15:66
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACAC3819EBB6EF096D4CA9633F65F3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9E7k044Fy7JXr6RGceKxrRY7FWY.roa
Signing time: Tue 06 Feb 2024 18:27:19 +0000
ROA not before: Tue 06 Feb 2024 18:27:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215917
IP address blocks: 2a0f:b241:105::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:ac:38:19:eb:b6:ef:09:6d:4c:a9:63:3f:65:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f44ee4d38e05cbb257afa44671e2b1ad163b1566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:ee:7e:31:2e:3c:51:81:1a:2b:90:be:ac:
29:30:50:d9:0d:e8:b8:7d:ac:9f:d3:ea:b7:ae:e5:
8a:ed:1d:e7:cc:36:e0:f2:7d:18:4a:de:69:9d:95:
75:33:03:09:0c:ea:26:47:04:cb:33:48:34:96:50:
c6:fc:ff:28:0f:96:31:58:ce:7b:d2:ef:e0:7f:df:
83:8b:ba:2c:31:0b:55:90:26:06:2e:da:a7:fd:21:
e6:b7:af:89:c3:7e:e0:2e:32:56:72:72:fe:32:a3:
92:c1:01:4e:7a:39:85:20:2a:65:e8:e9:cf:93:31:
34:b5:e9:ab:3c:5e:81:f3:fb:01:4b:02:40:91:9f:
18:07:b7:bd:5c:11:78:13:42:02:13:79:c3:23:48:
3c:b7:12:df:8b:5f:12:96:00:88:f1:56:41:05:c8:
94:d2:8d:25:42:20:b0:d1:d4:72:c6:78:16:41:00:
0e:e5:ef:3c:fe:e3:27:0c:4e:61:85:4a:5c:68:a6:
90:a4:2a:b3:b4:73:18:84:1e:3c:9f:30:06:f9:9c:
16:38:35:35:0e:c7:19:2c:2f:fa:be:11:a9:5b:40:
74:6c:7b:db:13:b3:db:ec:9b:45:c4:5a:d7:c4:16:
e2:90:e8:6f:c0:af:ae:0d:02:ca:b8:56:28:4b:e0:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:E4:D3:8E:05:CB:B2:57:AF:A4:46:71:E2:B1:AD:16:3B:15:66
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9E7k044Fy7JXr6RGceKxrRY7FWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:105::/48
Signature Algorithm: sha256WithRSAEncryption
25:10:09:e5:39:15:65:53:59:84:97:eb:65:f3:5a:26:a6:c9:
80:c7:17:17:0c:cb:87:0a:8c:4d:c3:11:03:a3:d4:3f:0a:74:
42:99:18:0b:5c:fb:49:9b:81:57:3a:a9:b5:c8:a1:d1:ca:9f:
c2:8f:1b:1e:8b:51:4d:84:e3:96:db:bd:1b:0b:b5:e8:90:34:
58:31:a3:f7:5f:a2:d9:28:5e:f9:53:d6:a8:f9:25:7d:3d:47:
5c:00:19:f9:15:0c:f7:69:3b:8a:87:36:36:63:f1:3a:cd:11:
b7:d9:15:54:07:55:09:b9:aa:b2:b7:1e:8d:62:97:0b:b2:24:
85:a3:de:75:a7:32:2f:5f:a6:da:eb:3b:a5:63:77:c1:ea:dd:
22:2e:4f:70:9a:cb:1c:70:f2:f8:30:56:bb:28:b6:84:30:8a:
7f:a1:52:46:bf:d5:5d:be:49:df:6f:a0:3b:f2:cc:4a:16:18:
6b:97:13:f8:65:b9:17:5d:c3:e4:f1:d5:ca:8b:67:a8:62:67:
3a:ed:b4:b1:58:91:d8:56:5a:cd:df:55:ce:61:97:c5:e3:f0:
1f:99:4e:3e:d1:e9:00:41:e8:aa:fd:90:11:07:31:64:4c:28:
48:2e:f9:7b:bc:39:d7:44:aa:4e:c0:10:b0:0e:60:b0:74:d3:
85:7a:db:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/rKw4Geu27wltTKljP2XzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNzE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDRlZTRkMzhlMDVjYmIyNTdhZmE0NDY3MWUyYjFhZDE2M2IxNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIPufjEuPFGBGiuQvqwpMFDZDei4
fayf0+q3ruWK7R3nzDbg8n0YSt5pnZV1MwMJDOomRwTLM0g0llDG/P8oD5YxWM57
0u/gf9+Di7osMQtVkCYGLtqn/SHmt6+Jw37gLjJWcnL+MqOSwQFOejmFICpl6OnP
kzE0temrPF6B8/sBSwJAkZ8YB7e9XBF4E0ICE3nDI0g8txLfi18SlgCI8VZBBciU
0o0lQiCw0dRyxngWQQAO5e88/uMnDE5hhUpcaKaQpCqztHMYhB48nzAG+ZwWODU1
DscZLC/6vhGpW0B0bHvbE7Pb7JtFxFrXxBbikOhvwK+uDQLKuFYoS+BzfwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPRO5NOOBcuyV6+kRnHisa0WOxVmMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvOUU3azA0NEZ5N0pYcjZSR2NlS3hyUlk3RldZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQEF
MA0GCSqGSIb3DQEBCwUAA4IBAQAlEAnlORVlU1mEl+tl81ompsmAxxcXDMuHCoxN
wxEDo9Q/CnRCmRgLXPtJm4FXOqm1yKHRyp/Cjxsei1FNhOOW270bC7XokDRYMaP3
X6LZKF75U9ao+SV9PUdcABn5FQz3aTuKhzY2Y/E6zRG32RVUB1UJuaqytx6NYpcL
siSFo951pzIvX6ba6zulY3fB6t0iLk9wmssccPL4MFa7KLaEMIp/oVJGv9Vdvknf
b6A78sxKFhhrlxP4ZbkXXcPk8dXKi2eoYmc67bSxWJHYVlrN31XOYZfF4/AfmU4+
0ekAQeiq/ZARBzFkTChILvl7vDnXRKpOwBCwDmCwdNOFett3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:07 2024 by rpki-client on console-ams.rpki-client.org