Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/E75fAp8eEsTnRMTw1oynev9lWik.roa
File: E75fAp8eEsTnRMTw1oynev9lWik.roa (raw, json)
Hash identifier: XW3V85mfxr6h6n5Pibf7m0iTz4U7ctBBcUG0lWNmGvM=
Subject key identifier: 13:BE:5F:02:9F:1E:12:C4:E7:44:C4:F0:D6:8C:A7:7A:FF:65:5A:29
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6B4AE1892B8EC99CB8738AE3C0A0A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/E75fAp8eEsTnRMTw1oynev9lWik.roa
Signing time: Tue 06 Feb 2024 18:38:16 +0000
ROA not before: Tue 06 Feb 2024 18:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199762
IP address blocks: 2a0f:b241:130::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:b4:ae:18:92:b8:ec:99:cb:87:38:ae:3c:0a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13be5f029f1e12c4e744c4f0d68ca77aff655a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:86:15:6c:5b:ef:fb:3c:c0:94:f6:ba:3f:b9:
c7:56:08:24:dd:cd:31:39:ad:8a:be:6a:ba:89:7d:
53:c5:38:0a:24:88:9c:4a:83:32:e1:c8:7f:27:ca:
88:42:72:87:6c:ce:39:a0:34:4d:69:55:bc:8a:ee:
62:19:c2:34:d7:a0:1a:2f:53:5c:67:32:26:fe:38:
70:c7:c2:49:18:ed:40:98:8c:e8:7f:cd:75:aa:8c:
cb:cf:c7:b3:c3:bd:c5:5d:c6:94:7c:f5:c1:64:01:
95:3f:f0:f7:a1:92:43:6a:99:0b:b9:26:d5:1b:16:
8e:05:54:3e:75:5b:64:c1:51:28:5e:b5:59:6a:b6:
59:8b:72:be:26:62:ea:57:e8:5d:f8:ce:60:65:9d:
b2:ac:6b:5b:53:8f:26:0a:95:95:97:3d:62:09:c8:
9d:4d:f2:2d:3c:89:8c:b9:db:fa:9a:c3:7c:90:90:
b2:f9:d0:2e:6b:95:83:c6:97:e2:05:74:70:dd:8b:
7f:1e:85:f4:d9:b3:78:42:d8:9b:09:87:76:ad:7f:
b0:17:73:73:69:b0:cd:90:c6:8b:38:19:8b:59:a4:
17:46:4e:f3:f7:19:f2:91:07:24:e5:da:d3:a4:a6:
67:ee:fb:1b:10:6f:0a:a4:9b:6d:25:23:f7:9a:d2:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:5F:02:9F:1E:12:C4:E7:44:C4:F0:D6:8C:A7:7A:FF:65:5A:29
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/E75fAp8eEsTnRMTw1oynev9lWik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:130::/48
Signature Algorithm: sha256WithRSAEncryption
77:47:af:68:ff:f5:8e:40:28:a7:2e:7e:d3:01:95:aa:90:9d:
54:b8:69:91:db:fd:0b:21:d7:dc:33:36:93:1a:3d:6a:a3:66:
c7:6d:2a:e4:db:f4:28:e4:75:16:7c:7f:b7:89:d2:dc:bd:00:
13:6b:eb:ca:8c:da:ff:84:63:9b:54:43:c6:e6:92:6d:f8:ab:
a6:cc:d7:fe:18:ce:91:d8:d1:27:03:b2:d4:cb:1a:0d:38:4c:
7a:a7:fd:e9:5b:da:f4:fb:02:6c:3e:1a:28:ef:72:f0:a3:e9:
5f:02:69:04:77:eb:4c:e2:6f:a6:a7:bb:99:b5:f7:23:9e:0c:
00:9b:00:b7:9a:46:59:63:dc:12:06:ef:c0:7e:be:f3:de:e7:
24:f8:b5:78:ee:a3:c8:bb:79:e3:ad:af:70:2e:1b:f5:d3:08:
93:40:76:d1:5f:7f:03:d6:3c:bb:35:ed:c6:42:e3:a1:1c:71:
b9:cd:6b:19:84:3e:75:79:1b:58:85:23:c7:69:f6:2b:fc:32:
fb:f2:2d:84:e5:87:62:17:bf:2e:44:eb:90:e3:3e:a2:a9:3b:
a7:15:cd:c2:f0:fb:32:3c:14:b9:e4:17:c6:14:5b:57:7f:ad:
e5:be:9f:b3:ed:a3:a8:1b:af:c5:2f:c2:f0:37:4e:bb:f3:dd:
a9:7a:e7:18
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/trSuGJK47JnLhziuPAoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgzODE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2JlNWYwMjlmMWUxMmM0ZTc0NGM0ZjBkNjhjYTc3YWZmNjU1YTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIYVbFvv+zzAlPa6P7nHVggk3c0x
Oa2Kvmq6iX1TxTgKJIicSoMy4ch/J8qIQnKHbM45oDRNaVW8iu5iGcI016AaL1Nc
ZzIm/jhwx8JJGO1AmIzof811qozLz8ezw73FXcaUfPXBZAGVP/D3oZJDapkLuSbV
GxaOBVQ+dVtkwVEoXrVZarZZi3K+JmLqV+hd+M5gZZ2yrGtbU48mCpWVlz1iCcid
TfItPImMudv6msN8kJCy+dAua5WDxpfiBXRw3Yt/HoX02bN4QtibCYd2rX+wF3Nz
abDNkMaLOBmLWaQXRk7z9xnykQck5drTpKZn7vsbEG8KpJttJSP3mtKcHQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBO+XwKfHhLE50TE8NaMp3r/ZVopMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvRTc1ZkFwOGVFc1RuUk1UdzFveW5ldjlsV2lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQEw
MA0GCSqGSIb3DQEBCwUAA4IBAQB3R69o//WOQCinLn7TAZWqkJ1UuGmR2/0LIdfc
MzaTGj1qo2bHbSrk2/Qo5HUWfH+3idLcvQATa+vKjNr/hGObVEPG5pJt+KumzNf+
GM6R2NEnA7LUyxoNOEx6p/3pW9r0+wJsPhoo73Lwo+lfAmkEd+tM4m+mp7uZtfcj
ngwAmwC3mkZZY9wSBu/Afr7z3uck+LV47qPIu3njra9wLhv10wiTQHbRX38D1jy7
Ne3GQuOhHHG5zWsZhD51eRtYhSPHafYr/DL78i2E5YdiF78uROuQ4z6iqTunFc3C
8PsyPBS55BfGFFtXf63lvp+z7aOoG6/FL8LwN067892peucY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org