Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/G2qnwmXwcIZU2GG6hSv3wIKEUi4.roa
File: G2qnwmXwcIZU2GG6hSv3wIKEUi4.roa (raw, json)
Hash identifier: BmTS0BNBa2TnVUh7ZcePPzHOgT512CFZkHAGakJt2nU=
Subject key identifier: 1B:6A:A7:C2:65:F0:70:86:54:D8:61:BA:85:2B:F7:C0:82:84:52:2E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9EAAE8F3126AFFEDED52500E6260C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/G2qnwmXwcIZU2GG6hSv3wIKEUi4.roa
Signing time: Tue 06 Feb 2024 18:24:18 +0000
ROA not before: Tue 06 Feb 2024 18:24:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200936
IP address blocks: 2a0f:b241:d9::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:ea:ae:8f:31:26:af:fe:de:d5:25:00:e6:26:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b6aa7c265f0708654d861ba852bf7c08284522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:dd:6f:4b:dc:67:50:72:2b:15:34:8e:79:
4f:7c:7a:8a:94:ce:28:72:bc:c8:21:3e:32:9b:8d:
99:32:01:af:8a:ca:e8:95:dc:10:83:61:8f:a2:ce:
b2:e3:81:54:62:35:f6:61:40:02:a3:24:80:27:a3:
39:64:07:68:0a:ec:1f:af:62:1e:61:30:dd:73:10:
01:15:37:c1:c4:bd:7a:6f:33:ad:09:ce:cb:be:79:
46:01:72:53:e2:6e:1c:76:9a:5e:30:e3:b6:df:80:
dd:40:0c:26:3f:32:29:86:4b:b4:02:70:73:c1:53:
3e:c4:18:3a:fe:7b:d7:93:8c:bf:eb:52:35:45:81:
5c:11:88:c4:80:33:46:78:45:bb:1d:f3:05:f2:bc:
c7:d2:7b:41:1c:5b:11:f6:f0:e8:67:c8:39:74:11:
dd:ee:ef:e7:8d:0e:32:73:d8:c6:eb:96:bd:17:30:
c3:9f:4a:cb:fb:bc:ec:0a:a3:d3:9b:1b:48:4c:34:
bc:83:a5:80:65:09:d8:a9:06:af:3c:5a:10:09:ae:
bf:41:49:e9:1b:f8:f8:2d:a6:bc:df:2d:35:b1:3e:
67:8f:b4:8c:24:33:2a:78:0a:c8:94:bb:d6:0b:4e:
9a:ee:01:fb:c0:a1:86:e4:5a:2d:97:99:04:8b:a0:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:A7:C2:65:F0:70:86:54:D8:61:BA:85:2B:F7:C0:82:84:52:2E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/G2qnwmXwcIZU2GG6hSv3wIKEUi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d9::/48
Signature Algorithm: sha256WithRSAEncryption
14:0b:e9:a6:f8:4a:7f:a2:ff:31:8a:f2:e4:ce:23:d6:45:d4:
24:5b:07:3d:12:d5:0d:bb:b6:72:74:65:a9:eb:88:07:b2:de:
cc:95:bd:37:63:24:03:76:f1:08:58:ac:70:93:86:33:8a:0f:
af:33:f8:2c:82:1d:5f:34:b4:d4:d3:fe:79:7a:46:ee:26:ed:
6a:8a:e8:38:f2:fe:62:ba:9d:aa:b3:51:f7:07:0a:77:41:f0:
b1:2f:92:a3:8d:23:c5:6f:22:4a:59:a9:d9:5c:c6:05:76:42:
87:f7:74:57:6e:6a:19:c9:8a:03:b5:2b:71:39:2a:dc:05:02:
79:b2:34:69:0a:c6:6a:1d:1b:3f:6b:97:53:8f:c2:a2:56:53:
f2:64:85:a0:4c:85:e0:8c:27:6e:e0:e7:27:2c:c6:1f:e9:c3:
f5:a2:f0:ad:80:4b:5f:0c:89:98:60:b4:71:a4:f5:21:b8:7b:
92:56:4d:95:b5:68:dd:57:80:11:ed:e2:b7:bc:b6:03:0f:8f:
a7:2a:3b:32:93:17:c6:cb:8b:cf:20:0e:18:8e:70:2b:80:46:
e0:de:1d:54:f7:62:0c:cb:20:96:9d:4c:67:17:a1:6b:06:0f:
9d:9c:10:48:02:cb:bd:2f:b5:78:b7:0a:b9:ea:2c:ca:34:e4:
02:3d:6b:c6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qequjzEmr/7e1SUA5iYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjZhYTdjMjY1ZjA3MDg2NTRkODYxYmE4NTJiZjdjMDgyODQ1MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMTdb0vcZ1ByKxU0jnlPfHqKlM4o
crzIIT4ym42ZMgGvisroldwQg2GPos6y44FUYjX2YUACoySAJ6M5ZAdoCuwfr2Ie
YTDdcxABFTfBxL16bzOtCc7LvnlGAXJT4m4cdppeMOO234DdQAwmPzIphku0AnBz
wVM+xBg6/nvXk4y/61I1RYFcEYjEgDNGeEW7HfMF8rzH0ntBHFsR9vDoZ8g5dBHd
7u/njQ4yc9jG65a9FzDDn0rL+7zsCqPTmxtITDS8g6WAZQnYqQavPFoQCa6/QUnp
G/j4Laa83y01sT5nj7SMJDMqeArIlLvWC06a7gH7wKGG5Fotl5kEi6DQSQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBtqp8Jl8HCGVNhhuoUr98CChFIuMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvRzJxbndtWHdjSVpVMkdHNmhTdjN3SUtFVWk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDZ
MA0GCSqGSIb3DQEBCwUAA4IBAQAUC+mm+Ep/ov8xivLkziPWRdQkWwc9EtUNu7Zy
dGWp64gHst7Mlb03YyQDdvEIWKxwk4Yzig+vM/gsgh1fNLTU0/55ekbuJu1qiug4
8v5iup2qs1H3Bwp3QfCxL5KjjSPFbyJKWanZXMYFdkKH93RXbmoZyYoDtStxOSrc
BQJ5sjRpCsZqHRs/a5dTj8KiVlPyZIWgTIXgjCdu4OcnLMYf6cP1ovCtgEtfDImY
YLRxpPUhuHuSVk2VtWjdV4AR7eK3vLYDD4+nKjsykxfGy4vPIA4YjnArgEbg3h1U
92IMyyCWnUxnF6FrBg+dnBBIAsu9L7V4twq56izKNOQCPWvG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org