Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9JKxYSFqW58VuQlYd7yhWsFeuHs.roa
File: 9JKxYSFqW58VuQlYd7yhWsFeuHs.roa (raw, json)
Hash identifier: 4aJMSr/ZIn3junuB2WyxDXCZlsF46I/+sTbxwz00kBU=
Subject key identifier: F4:92:B1:61:21:6A:5B:9F:15:B9:09:58:77:BC:A1:5A:C1:5E:B8:7B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB7A2899A2B9B4523C628C0ECD7BD6B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9JKxYSFqW58VuQlYd7yhWsFeuHs.roa
Signing time: Tue 06 Feb 2024 18:39:17 +0000
ROA not before: Tue 06 Feb 2024 18:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211042
IP address blocks: 2a0f:b241:144::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:a2:89:9a:2b:9b:45:23:c6:28:c0:ec:d7:bd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f492b161216a5b9f15b9095877bca15ac15eb87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:27:e2:90:26:37:68:0c:63:20:00:e5:cd:
7c:42:99:80:f0:13:18:d0:07:40:ab:d1:96:99:77:
91:42:49:0c:7e:e1:18:e4:6f:eb:70:8e:71:9d:25:
3b:f6:31:31:d5:81:85:f2:c8:87:ad:94:36:1c:77:
09:2b:7f:d1:6b:f4:bb:b5:a8:95:07:38:2d:44:74:
50:c5:ef:85:0d:42:12:cd:0f:5b:1a:e0:41:c2:e4:
6a:19:29:1c:2a:ca:c7:4a:ba:40:70:ed:3e:71:f2:
0c:b9:30:19:af:24:59:f2:3a:b8:40:3a:df:b2:bd:
a3:91:0d:f9:7c:01:24:ec:04:bc:af:da:d8:85:be:
c9:b0:5b:ad:d6:a7:44:54:d0:bd:da:6c:61:53:62:
3f:df:71:5e:f4:af:21:cb:50:7e:72:18:b7:10:a5:
56:76:42:64:64:2f:9e:f4:94:84:e5:b6:a5:d7:9f:
32:a4:9e:04:51:50:c0:51:85:6c:cf:35:fe:b6:56:
56:47:1a:1d:c2:27:84:60:cd:23:aa:fa:4b:8c:d3:
73:8b:b2:b1:5c:ba:bf:88:7b:e6:5d:b0:d5:45:98:
88:52:29:db:a9:49:e9:be:4f:db:d3:43:e7:18:b4:
87:f1:37:d4:91:c2:b4:e3:b7:15:c7:23:d2:27:1e:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:92:B1:61:21:6A:5B:9F:15:B9:09:58:77:BC:A1:5A:C1:5E:B8:7B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9JKxYSFqW58VuQlYd7yhWsFeuHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:144::/48
Signature Algorithm: sha256WithRSAEncryption
86:47:5d:5b:d2:6d:f0:f3:0a:ee:f7:71:9f:a8:6b:c8:32:dc:
08:dc:c6:e7:be:fc:7d:80:5a:e1:f0:88:9b:e2:d6:e3:0d:c7:
d1:bd:6f:e6:94:91:e7:95:e9:e2:b6:a3:39:b6:79:62:90:6d:
22:4c:ba:48:8b:49:23:f2:62:07:1d:4a:14:0d:ec:06:3a:65:
7f:81:8e:78:cc:4f:75:85:f9:6f:00:00:f3:de:be:be:54:13:
de:73:e1:43:5a:bf:62:1e:f6:a2:5d:77:1b:f5:a8:87:b3:5b:
0f:c7:fd:8c:32:0c:a4:49:12:f2:b2:b2:55:f7:61:c6:d6:3b:
84:90:48:65:b5:22:8d:f3:8b:5f:76:62:6c:9d:3f:53:12:0d:
93:e3:eb:b9:f9:87:ba:43:a5:4a:d1:dc:91:02:46:5e:ff:5f:
d1:ec:f7:a6:e0:72:2b:81:29:01:ad:e6:31:d8:49:37:9a:af:
fe:c5:f2:b3:0c:6d:3b:8a:33:3f:69:96:d3:7c:34:79:f2:df:
45:71:36:89:51:31:de:63:5f:38:df:5f:f2:1e:83:9e:ad:1c:
ba:1e:ac:68:d2:a3:8f:c6:74:97:80:01:5b:a1:ad:07:48:f9:
4d:49:24:b3:47:91:7b:0e:57:88:0d:2b:9a:52:92:7a:4b:2f:
aa:f8:9b:82
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/t6KJmiubRSPGKMDs171rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgzOTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDkyYjE2MTIxNmE1YjlmMTViOTA5NTg3N2JjYTE1YWMxNWViODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBkn4pAmN2gMYyAA5c18QpmA8BMY
0AdAq9GWmXeRQkkMfuEY5G/rcI5xnSU79jEx1YGF8siHrZQ2HHcJK3/Ra/S7taiV
BzgtRHRQxe+FDUISzQ9bGuBBwuRqGSkcKsrHSrpAcO0+cfIMuTAZryRZ8jq4QDrf
sr2jkQ35fAEk7AS8r9rYhb7JsFut1qdEVNC92mxhU2I/33Fe9K8hy1B+chi3EKVW
dkJkZC+e9JSE5bal158ypJ4EUVDAUYVszzX+tlZWRxodwieEYM0jqvpLjNNzi7Kx
XLq/iHvmXbDVRZiIUinbqUnpvk/b00PnGLSH8TfUkcK047cVxyPSJx5mGwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPSSsWEhalufFbkJWHe8oVrBXrh7MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvOUpLeFlTRnFXNThWdVFsWWQ3eWhXc0ZldUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQFE
MA0GCSqGSIb3DQEBCwUAA4IBAQCGR11b0m3w8wru93GfqGvIMtwI3Mbnvvx9gFrh
8Iib4tbjDcfRvW/mlJHnlenitqM5tnlikG0iTLpIi0kj8mIHHUoUDewGOmV/gY54
zE91hflvAADz3r6+VBPec+FDWr9iHvaiXXcb9aiHs1sPx/2MMgykSRLysrJV92HG
1juEkEhltSKN84tfdmJsnT9TEg2T4+u5+Ye6Q6VK0dyRAkZe/1/R7Pem4HIrgSkB
reYx2Ek3mq/+xfKzDG07ijM/aZbTfDR58t9FcTaJUTHeY18431/yHoOerRy6Hqxo
0qOPxnSXgAFboa0HSPlNSSSzR5F7DleIDSuaUpJ6Sy+q+JuC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org