Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BL17b6XnYt84sD8Ffc4ToGeutIo.roa
File: BL17b6XnYt84sD8Ffc4ToGeutIo.roa (raw, json)
Hash identifier: P1wPBDDJ8xnyaa/3MZaZsp2wo1K+X5qxqx5XRohVpmY=
Subject key identifier: 04:BD:7B:6F:A5:E7:62:DF:38:B0:3F:05:7D:CE:13:A0:67:AE:B4:8A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAACA3E217CE6EC4F340D5D04873A9B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BL17b6XnYt84sD8Ffc4ToGeutIo.roa
Signing time: Tue 06 Feb 2024 18:25:15 +0000
ROA not before: Tue 06 Feb 2024 18:25:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200949
IP address blocks: 2a0f:b241:d8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:ca:3e:21:7c:e6:ec:4f:34:0d:5d:04:87:3a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04bd7b6fa5e762df38b03f057dce13a067aeb48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:0f:0c:18:e0:3b:87:74:c0:a4:ec:78:92:
77:b9:ea:9c:69:a1:03:c1:96:76:51:88:ea:10:e8:
d8:65:a4:79:9a:58:c3:76:83:09:d3:e2:31:f2:b1:
b0:c7:8c:91:65:0d:cc:73:43:dc:1e:be:44:b1:00:
42:d3:31:b2:78:99:68:a0:83:74:e1:62:29:33:70:
9d:13:e5:61:3d:3c:6e:82:0f:c5:28:d3:92:79:a2:
d3:f1:d4:ab:34:9f:88:2c:62:17:55:a9:4f:15:81:
a2:4e:43:d8:66:ed:35:1f:e3:26:be:07:46:f7:07:
cd:1a:db:45:5e:af:6e:a7:f9:1e:47:01:92:9e:01:
5e:34:4c:cd:2a:f5:86:b9:c5:bd:9a:b0:95:aa:c8:
a0:ed:50:c5:8c:bc:7f:c3:f0:8e:be:b3:25:61:70:
a8:8f:3f:67:86:69:c3:1f:55:2e:cb:a0:2f:9b:b9:
52:e6:b3:0c:df:dd:6f:2a:32:bb:a0:dd:b0:f3:32:
47:c0:32:40:f3:19:6c:02:20:a9:c5:c8:56:d6:b6:
a6:06:43:af:e7:df:b4:05:0b:2b:7d:dd:1d:dc:37:
18:99:91:c4:86:a5:f0:df:f1:de:dd:b9:ce:7e:87:
c2:5b:6b:d4:86:67:73:c3:e4:03:31:92:2e:d9:05:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BD:7B:6F:A5:E7:62:DF:38:B0:3F:05:7D:CE:13:A0:67:AE:B4:8A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/BL17b6XnYt84sD8Ffc4ToGeutIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d8::/48
Signature Algorithm: sha256WithRSAEncryption
6f:af:ac:fd:75:2a:cc:d3:28:7a:d3:a4:d4:04:77:a7:20:af:
89:da:28:c4:04:96:48:f9:3e:0b:4a:55:d6:44:eb:eb:40:c6:
02:e1:6c:55:45:b8:9d:2f:82:5d:29:1c:70:e0:36:fa:e1:87:
5a:ea:d3:4a:d8:2e:a2:87:79:93:ff:e8:9a:c0:60:1d:a8:2d:
63:4b:37:b4:49:3a:dd:3a:78:e7:ac:bf:75:35:04:39:6d:4b:
22:60:40:e7:a2:53:56:d9:4e:5d:ef:d1:cd:20:25:db:09:21:
7f:a8:d3:61:db:0c:d0:91:04:ce:e8:01:58:39:ce:51:2a:f1:
14:e8:55:db:71:e3:2e:b7:f5:2a:fe:b8:c6:0e:83:5b:ed:80:
f3:96:92:4e:4e:d3:3a:81:49:ba:9f:25:94:99:f8:5f:c9:38:
f6:1b:89:48:b0:a0:f8:bc:06:e4:27:cf:46:cb:7c:9b:21:83:
87:ea:9c:cf:aa:c2:a8:50:44:d7:9a:d1:aa:f5:ad:fa:18:e7:
69:82:fa:c7:0a:0a:e7:23:36:f8:cf:d7:4c:eb:43:8d:95:f5:
05:97:50:fd:94:29:dc:4a:35:81:a3:f6:21:b2:ae:7e:9c:b1:
3e:c9:1e:72:de:2c:b1:16:c4:96:60:9b:90:1e:c6:3d:53:89:
29:79:26:40
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qso+IXzm7E80DV0EhzqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGJkN2I2ZmE1ZTc2MmRmMzhiMDNmMDU3ZGNlMTNhMDY3YWViNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFgPDBjgO4d0wKTseJJ3ueqcaaED
wZZ2UYjqEOjYZaR5mljDdoMJ0+Ix8rGwx4yRZQ3Mc0PcHr5EsQBC0zGyeJlooIN0
4WIpM3CdE+VhPTxugg/FKNOSeaLT8dSrNJ+ILGIXValPFYGiTkPYZu01H+MmvgdG
9wfNGttFXq9up/keRwGSngFeNEzNKvWGucW9mrCVqsig7VDFjLx/w/COvrMlYXCo
jz9nhmnDH1Uuy6Avm7lS5rMM391vKjK7oN2w8zJHwDJA8xlsAiCpxchW1ramBkOv
59+0BQsrfd0d3DcYmZHEhqXw3/He3bnOfofCW2vUhmdzw+QDMZIu2QVFhQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAS9e2+l52LfOLA/BX3OE6BnrrSKMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvQkwxN2I2WG5ZdDg0c0Q4RmZjNFRvR2V1dElvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDY
MA0GCSqGSIb3DQEBCwUAA4IBAQBvr6z9dSrM0yh606TUBHenIK+J2ijEBJZI+T4L
SlXWROvrQMYC4WxVRbidL4JdKRxw4Db64Yda6tNK2C6ih3mT/+iawGAdqC1jSze0
STrdOnjnrL91NQQ5bUsiYEDnolNW2U5d79HNICXbCSF/qNNh2wzQkQTO6AFYOc5R
KvEU6FXbceMut/Uq/rjGDoNb7YDzlpJOTtM6gUm6nyWUmfhfyTj2G4lIsKD4vAbk
J89Gy3ybIYOH6pzPqsKoUETXmtGq9a36GOdpgvrHCgrnIzb4z9dM60ONlfUFl1D9
lCncSjWBo/Yhsq5+nLE+yR5y3iyxFsSWYJuQHsY9U4kpeSZA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org