Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FrL8CUilJB0sQo-FqN-cIxPZbIA.roa
File: FrL8CUilJB0sQo-FqN-cIxPZbIA.roa (raw, json)
Hash identifier: Er2HggAQ1Iz9QJzVkeHOo1WFHOy9CmscSa523LW3hTg=
Subject key identifier: 16:B2:FC:09:48:A5:24:1D:2C:42:8F:85:A8:DF:9C:23:13:D9:6C:80
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAE773CD48B76F14DE52BB188CFF916
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FrL8CUilJB0sQo-FqN-cIxPZbIA.roa
Signing time: Tue 06 Feb 2024 18:29:16 +0000
ROA not before: Tue 06 Feb 2024 18:29:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49585
IP address blocks: 2a0f:b241:117::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ae:77:3c:d4:8b:76:f1:4d:e5:2b:b1:88:cf:f9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:29:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16b2fc0948a5241d2c428f85a8df9c2313d96c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:97:ff:36:e9:1c:dc:c1:47:c5:9c:a2:39:
e3:09:77:dc:50:25:c1:ec:d5:df:0a:64:18:13:ce:
ee:09:c1:95:01:66:0d:51:46:5c:53:c1:2c:e4:d7:
ac:74:2b:25:dc:3d:78:67:c7:1f:9f:09:b6:a9:4c:
8a:97:23:23:3d:f6:06:27:2a:e0:f3:cd:6e:90:05:
e1:23:d1:6c:67:32:cf:88:90:62:6d:57:ba:37:2e:
55:da:9e:cd:89:4f:c4:76:38:cb:fe:88:0d:28:04:
72:ba:84:92:53:77:49:b0:7c:49:e5:0b:e9:ec:75:
46:db:f8:07:cc:36:7b:ba:51:63:79:cd:43:11:b2:
9d:d6:9e:d6:84:71:d0:26:45:16:6b:f8:73:c9:1d:
68:57:fd:fb:fa:88:2a:e0:f4:3c:2e:d7:bf:17:a7:
c0:73:62:69:4c:20:a6:b7:64:15:11:45:59:87:62:
a7:1c:c5:1e:71:1b:db:c5:c7:ba:89:75:41:9e:31:
d2:f6:b5:f1:4c:35:6c:a6:6b:f4:b7:c3:f9:17:a4:
16:00:81:dd:7b:58:17:7f:9b:b5:9b:f7:78:df:4e:
49:63:d6:26:17:c8:b2:a6:ba:8a:f5:5b:57:a8:89:
a8:12:ab:a0:91:3f:6b:c4:d0:67:a1:10:51:c0:ea:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B2:FC:09:48:A5:24:1D:2C:42:8F:85:A8:DF:9C:23:13:D9:6C:80
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FrL8CUilJB0sQo-FqN-cIxPZbIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:117::/48
Signature Algorithm: sha256WithRSAEncryption
10:3f:86:6a:b1:07:aa:49:91:e0:06:41:f6:2e:69:05:b9:51:
bc:72:37:1c:60:70:da:d4:c2:ad:b6:66:e7:1c:0d:d8:1b:a5:
ae:a5:f4:f2:5b:9b:d6:8a:d5:0c:2f:ab:31:fb:7b:cc:76:76:
8c:58:28:25:65:75:0b:2c:67:3f:74:28:6c:5f:75:47:53:fc:
6b:95:92:40:22:9b:dc:32:eb:77:11:50:58:1f:7b:85:52:9e:
83:c1:08:08:9e:32:e0:a0:74:f5:d9:d7:40:a2:d9:ca:65:9b:
b2:b6:2e:93:63:40:fc:9f:e4:b1:ad:21:b4:0a:05:b7:71:35:
79:a0:bf:a9:cc:fb:86:02:4c:06:82:96:3d:9f:3b:f7:30:2e:
e6:d1:79:3b:54:bb:a4:3f:08:a3:e9:ba:aa:9b:8a:d2:d6:75:
1b:91:61:e9:0f:a0:64:8f:84:d1:71:6b:a0:a6:93:e4:07:52:
8f:52:86:c5:03:f6:5c:4d:cd:3c:f1:e9:fa:4a:87:3d:79:96:
98:ca:9e:ab:dd:9b:bf:88:92:a3:3c:eb:b1:69:c1:12:b4:30:
f0:17:18:5d:9b:fe:1e:d6:e2:d2:10:ea:e4:51:c3:0b:e2:9d:
84:2c:63:9f:71:65:90:00:44:ac:b2:27:18:01:b7:40:92:f6:
8e:36:27:07
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/rnc81It28U3lK7GIz/kWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyOTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmIyZmMwOTQ4YTUyNDFkMmM0MjhmODVhOGRmOWMyMzEzZDk2YzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTKX/zbpHNzBR8WcojnjCXfcUCXB
7NXfCmQYE87uCcGVAWYNUUZcU8Es5NesdCsl3D14Z8cfnwm2qUyKlyMjPfYGJyrg
881ukAXhI9FsZzLPiJBibVe6Ny5V2p7NiU/EdjjL/ogNKARyuoSSU3dJsHxJ5Qvp
7HVG2/gHzDZ7ulFjec1DEbKd1p7WhHHQJkUWa/hzyR1oV/37+ogq4PQ8Lte/F6fA
c2JpTCCmt2QVEUVZh2KnHMUecRvbxce6iXVBnjHS9rXxTDVspmv0t8P5F6QWAIHd
e1gXf5u1m/d4305JY9YmF8iyprqK9VtXqImoEqugkT9rxNBnoRBRwOrP9QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBay/AlIpSQdLEKPhajfnCMT2WyAMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvRnJMOENVaWxKQjBzUW8tRnFOLWNJeFBaYklBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQEX
MA0GCSqGSIb3DQEBCwUAA4IBAQAQP4ZqsQeqSZHgBkH2LmkFuVG8cjccYHDa1MKt
tmbnHA3YG6WupfTyW5vWitUML6sx+3vMdnaMWCglZXULLGc/dChsX3VHU/xrlZJA
IpvcMut3EVBYH3uFUp6DwQgInjLgoHT12ddAotnKZZuyti6TY0D8n+SxrSG0CgW3
cTV5oL+pzPuGAkwGgpY9nzv3MC7m0Xk7VLukPwij6bqqm4rS1nUbkWHpD6Bkj4TR
cWugppPkB1KPUobFA/ZcTc088en6Soc9eZaYyp6r3Zu/iJKjPOuxacEStDDwFxhd
m/4e1uLSEOrkUcML4p2ELGOfcWWQAESssicYAbdAkvaONicH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org