Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Aw0PM6ypnukLmL69-rC4mjq6oHo.roa
File: Aw0PM6ypnukLmL69-rC4mjq6oHo.roa (raw, json)
Hash identifier: RB1XMqAaX2GPIy90AtzbxpbBfab2+1RZ7CC9OzSmzd4=
Subject key identifier: 03:0D:0F:33:AC:A9:9E:E9:0B:98:BE:BD:FA:B0:B8:9A:3A:BA:A0:7A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F096DD10C322BCB495D11D0E91F6A7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Aw0PM6ypnukLmL69-rC4mjq6oHo.roa
Signing time: Wed 07 Feb 2024 05:00:44 +0000
ROA not before: Wed 07 Feb 2024 05:00:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207273
IP address blocks: 2a0f:b241:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:96:dd:10:c3:22:bc:b4:95:d1:1d:0e:91:f6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=030d0f33aca99ee90b98bebdfab0b89a3abaa07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:6c:f2:67:4f:66:7b:9e:b2:1f:90:40:62:
68:f6:68:10:8f:2f:26:b9:53:4a:ae:4b:74:fc:91:
09:40:12:d3:bc:0b:00:cd:6b:d2:b4:cb:c8:78:2a:
9e:b7:49:07:00:9a:9c:08:a5:39:72:d9:bb:38:70:
1d:ce:86:4e:60:9e:2b:6e:2f:dd:97:fc:76:45:50:
2b:7f:d2:8b:f4:a4:36:23:4c:64:55:97:eb:16:4b:
12:e0:77:e4:11:90:b0:44:f6:97:34:02:3b:64:ca:
d4:05:40:a2:5e:82:c4:6c:52:13:52:42:48:08:1d:
a0:da:d7:9c:85:46:94:c4:24:38:94:c1:59:83:cb:
aa:b2:a6:e4:cb:f0:e2:b4:ec:85:d3:40:ce:3a:ef:
bf:74:c1:6b:22:1d:c5:0c:c2:62:6b:fd:f2:9d:b2:
1c:39:8c:76:fa:ee:b3:c0:f9:d6:19:0b:5a:aa:12:
5f:15:6e:2b:b3:25:6c:ad:d2:c0:bf:25:50:76:69:
77:c2:f6:02:8b:15:12:f3:b2:c5:b0:c0:01:71:cf:
15:47:51:f6:ea:ef:ac:09:e0:d4:5e:3b:ed:66:35:
e2:65:d7:53:74:8a:21:3e:8e:c5:1f:c7:de:1c:0c:
2d:26:f2:3c:64:17:97:26:94:3f:7c:6f:c7:cd:c8:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:0F:33:AC:A9:9E:E9:0B:98:BE:BD:FA:B0:B8:9A:3A:BA:A0:7A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Aw0PM6ypnukLmL69-rC4mjq6oHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:20::/48
Signature Algorithm: sha256WithRSAEncryption
6d:1b:ca:a6:c2:98:22:e3:71:36:de:69:60:d2:0d:2c:9f:9d:
79:22:18:12:f4:ab:bc:8e:a6:e4:4e:44:64:fc:63:b7:f2:8e:
54:6a:c2:20:1b:4b:ae:e9:12:22:a6:49:ce:cc:53:e0:c7:34:
d3:e1:06:fd:66:5b:8b:64:af:2b:5f:32:a3:5c:92:a8:b5:ad:
40:14:e6:1b:88:c6:56:52:67:a0:b6:5a:f1:25:7a:5a:be:62:
af:ac:c1:e9:82:dc:d7:f8:f6:1b:6b:7e:20:94:a2:8a:93:97:
58:51:8f:ed:a3:13:af:f9:a1:a7:14:5f:ce:56:82:67:70:ef:
fd:2e:a7:fe:87:d4:57:6b:9d:f6:43:38:02:9a:eb:0c:74:45:
a3:ef:56:84:5e:91:54:6a:c9:0e:97:94:d4:55:84:f6:85:f0:
ea:9e:da:c2:5f:7d:69:50:d4:2d:f5:65:f8:28:4d:5c:d1:a9:
0c:0c:7f:9a:6f:12:76:6f:0f:a7:81:c5:ae:c1:b1:a8:ce:da:
e5:ba:b2:58:49:a1:cf:b5:a2:5b:ab:95:fb:d7:64:0c:cc:76:
6e:0b:d4:44:bc:29:d2:b1:8d:5c:37:64:cd:43:cb:72:d3:03:
8d:73:13:d7:ff:e5:45:1f:82:2c:12:bc:a9:22:78:f6:d8:53:
44:46:e7:7a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2B8JbdEMMivLSV0R0OkfanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUwMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzBkMGYzM2FjYTk5ZWU5MGI5OGJlYmRmYWIwYjg5YTNhYmFhMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqNs8mdPZnuesh+QQGJo9mgQjy8m
uVNKrkt0/JEJQBLTvAsAzWvStMvIeCqet0kHAJqcCKU5ctm7OHAdzoZOYJ4rbi/d
l/x2RVArf9KL9KQ2I0xkVZfrFksS4HfkEZCwRPaXNAI7ZMrUBUCiXoLEbFITUkJI
CB2g2techUaUxCQ4lMFZg8uqsqbky/DitOyF00DOOu+/dMFrIh3FDMJia/3ynbIc
OYx2+u6zwPnWGQtaqhJfFW4rsyVsrdLAvyVQdml3wvYCixUS87LFsMABcc8VR1H2
6u+sCeDUXjvtZjXiZddTdIohPo7FH8feHAwtJvI8ZBeXJpQ/fG/HzchbkwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAMNDzOsqZ7pC5i+vfqwuJo6uqB6MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvQXcwUE02eXBudWtMbUw2OS1yQzRtanE2b0hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQAg
MA0GCSqGSIb3DQEBCwUAA4IBAQBtG8qmwpgi43E23mlg0g0sn515IhgS9Ku8jqbk
TkRk/GO38o5UasIgG0uu6RIipknOzFPgxzTT4Qb9ZluLZK8rXzKjXJKota1AFOYb
iMZWUmegtlrxJXpavmKvrMHpgtzX+PYba34glKKKk5dYUY/toxOv+aGnFF/OVoJn
cO/9Lqf+h9RXa532QzgCmusMdEWj71aEXpFUaskOl5TUVYT2hfDqntrCX31pUNQt
9WX4KE1c0akMDH+abxJ2bw+ngcWuwbGoztrlurJYSaHPtaJbq5X712QMzHZuC9RE
vCnSsY1cN2TNQ8ty0wONcxPX/+VFH4IsErypInj22FNERud6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org