Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Bxc1PK1HUDgkNJEDZVA7CtFU6oQ.roa
File: Bxc1PK1HUDgkNJEDZVA7CtFU6oQ.roa (raw, json)
Hash identifier: ens5uL8UUKlQ/OPgI1nhXaPhigTCwqQTkKkTrM1eXys=
Subject key identifier: 07:17:35:3C:AD:47:50:38:24:34:91:03:65:50:3B:0A:D1:54:EA:84
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB888C72F21C4E87F2E889129A4703B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Bxc1PK1HUDgkNJEDZVA7CtFU6oQ.roa
Signing time: Tue 06 Feb 2024 18:40:16 +0000
ROA not before: Tue 06 Feb 2024 18:40:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213136
IP address blocks: 2a0f:b241:14b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b8:88:c7:2f:21:c4:e8:7f:2e:88:91:29:a4:70:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:40:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0717353cad4750382434910365503b0ad154ea84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:ff:56:db:3b:74:d4:2f:d6:d4:aa:14:c1:
2b:22:89:f4:1c:a2:6c:bb:89:d6:09:ba:da:14:8e:
98:54:8e:22:6c:a9:3a:92:d6:89:91:a4:3a:e4:ba:
ed:b0:1e:f9:27:3e:c7:cf:79:74:36:90:ae:8f:48:
20:8e:18:ba:09:c7:8f:7c:4a:5d:68:bc:3a:77:46:
4b:42:d2:55:d9:96:4a:e1:a2:1a:df:a4:7f:80:2c:
17:5e:10:76:6a:cf:fa:c4:5e:52:d3:5c:5e:40:61:
3c:11:21:d5:9b:18:89:1f:27:d0:28:de:d1:99:7d:
52:dd:79:d6:5b:24:0d:ad:1e:70:a9:0d:36:7b:0e:
3e:58:63:05:95:75:90:2d:2e:63:52:f5:f8:14:fd:
66:2f:c4:56:7b:e6:ce:1b:36:46:4e:a4:23:ad:40:
18:78:a4:88:9c:2a:ce:83:3c:73:aa:f8:6e:71:fe:
c3:de:46:88:a2:27:6d:36:3b:6c:4c:39:1b:f0:0a:
9c:a3:fd:90:37:41:91:ac:96:f8:30:d8:0c:6c:dd:
e5:4a:ab:d3:48:31:e4:4e:b0:61:11:e1:3b:0f:9c:
93:3d:59:2b:c1:81:2c:f3:5b:9f:ed:22:7b:76:d6:
c7:a2:a6:e3:3c:2a:e5:df:58:d9:50:11:82:73:3e:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:35:3C:AD:47:50:38:24:34:91:03:65:50:3B:0A:D1:54:EA:84
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Bxc1PK1HUDgkNJEDZVA7CtFU6oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:14b::/48
Signature Algorithm: sha256WithRSAEncryption
11:61:01:42:bc:9f:d0:ad:a0:75:e7:ea:1d:f8:3a:e6:61:b5:
ab:d1:52:b7:01:f1:03:f2:a3:d5:86:9b:9a:88:b5:e1:50:d8:
15:25:0c:07:15:53:cb:3b:51:42:5d:bc:14:40:c9:59:8a:de:
22:18:95:bb:fd:cf:14:cc:19:32:07:f8:4a:3f:27:42:1c:19:
66:2c:8e:7b:40:94:2a:c4:6e:13:36:f5:2e:71:8c:44:d9:04:
a9:0e:c2:99:a0:4d:e1:f8:d1:27:7c:6d:01:8e:c1:ca:8a:c1:
5d:06:ed:ab:d1:91:17:dd:62:5b:80:28:a5:71:4f:ca:97:74:
c0:cf:5c:c6:b2:cf:59:f8:66:bf:c1:3a:b7:c5:7c:cd:5f:91:
9a:f2:5b:af:a1:06:17:a4:82:9b:da:59:af:e9:bf:8c:5a:05:
50:77:fe:d0:54:f8:db:1c:5e:bc:d0:08:3d:37:82:72:bc:86:
ff:5e:85:6e:3e:83:77:82:95:cf:78:ee:e0:7e:e1:df:71:36:
99:8e:a3:d7:7a:18:b6:40:37:ad:81:73:e4:b6:e1:75:71:53:
70:79:a2:61:d0:c9:17:f6:25:ab:99:fa:57:ed:be:44:47:3a:
a0:25:58:a5:79:ce:e2:e7:d7:2d:00:eb:27:d1:2e:8f:8e:f3:
56:55:02:a7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/uIjHLyHE6H8uiJEppHA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTg0MDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzE3MzUzY2FkNDc1MDM4MjQzNDkxMDM2NTUwM2IwYWQxNTRlYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk13/Vts7dNQv1tSqFMErIon0HKJs
u4nWCbraFI6YVI4ibKk6ktaJkaQ65LrtsB75Jz7Hz3l0NpCuj0ggjhi6CcePfEpd
aLw6d0ZLQtJV2ZZK4aIa36R/gCwXXhB2as/6xF5S01xeQGE8ESHVmxiJHyfQKN7R
mX1S3XnWWyQNrR5wqQ02ew4+WGMFlXWQLS5jUvX4FP1mL8RWe+bOGzZGTqQjrUAY
eKSInCrOgzxzqvhucf7D3kaIoidtNjtsTDkb8Aqco/2QN0GRrJb4MNgMbN3lSqvT
SDHkTrBhEeE7D5yTPVkrwYEs81uf7SJ7dtbHoqbjPCrl31jZUBGCcz5iUwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAcXNTytR1A4JDSRA2VQOwrRVOqEMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvQnhjMVBLMUhVRGdrTkpFRFpWQTdDdEZVNm9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQFL
MA0GCSqGSIb3DQEBCwUAA4IBAQARYQFCvJ/QraB15+od+DrmYbWr0VK3AfED8qPV
hpuaiLXhUNgVJQwHFVPLO1FCXbwUQMlZit4iGJW7/c8UzBkyB/hKPydCHBlmLI57
QJQqxG4TNvUucYxE2QSpDsKZoE3h+NEnfG0BjsHKisFdBu2r0ZEX3WJbgCilcU/K
l3TAz1zGss9Z+Ga/wTq3xXzNX5Ga8luvoQYXpIKb2lmv6b+MWgVQd/7QVPjbHF68
0Ag9N4JyvIb/XoVuPoN3gpXPeO7gfuHfcTaZjqPXehi2QDetgXPktuF1cVNweaJh
0MkX9iWrmfpX7b5ERzqgJVilec7i59ctAOsn0S6PjvNWVQKn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org