Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/G8MfbCR_Hr0mUycv5yY36dSsxnA.roa
File: G8MfbCR_Hr0mUycv5yY36dSsxnA.roa (raw, json)
Hash identifier: /j8IPWUJMNQ4RTiIPe9XcgP1K79CqdDbzTrjXtRr7UM=
Subject key identifier: 1B:C3:1F:6C:24:7F:1E:BD:26:53:27:2F:E7:26:37:E9:D4:AC:C6:70
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E459657C465E4B425F9ADE16792C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/G8MfbCR_Hr0mUycv5yY36dSsxnA.roa
Signing time: Tue 06 Feb 2024 18:24:16 +0000
ROA not before: Tue 06 Feb 2024 18:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200782
IP address blocks: 2a0f:b241:d2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e4:59:65:7c:46:5e:4b:42:5f:9a:de:16:79:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bc31f6c247f1ebd2653272fe72637e9d4acc670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:92:76:7f:dd:53:94:88:af:b7:cb:c1:19:
6b:85:4c:57:6c:31:06:f2:58:97:7e:0b:f1:77:c0:
72:58:dd:62:f4:32:03:0e:e0:31:e6:be:1c:f9:c1:
79:61:b5:b9:de:36:63:7e:d4:18:04:88:89:cf:28:
63:0c:bb:e3:42:e6:cc:11:c8:ee:80:93:36:e9:86:
3d:bc:4c:b2:52:ba:2e:bc:52:e1:4e:ee:6d:92:ce:
07:65:ba:f2:80:55:e1:f8:3b:33:13:28:f3:42:be:
64:33:66:16:88:e3:04:2e:c7:d6:71:31:cb:81:55:
26:70:f6:fe:dc:aa:75:f5:98:80:08:fe:52:4b:de:
17:5b:e4:37:46:b3:23:eb:6e:25:eb:de:d3:44:ff:
8f:03:6c:91:f4:0e:58:03:10:f7:f6:03:dd:ad:db:
34:99:d1:3b:ca:7b:be:23:ff:8c:fe:c6:1f:6a:95:
4e:df:5b:44:10:45:14:f6:e6:4d:54:f9:dc:03:ee:
6f:ed:9d:ae:b2:ff:52:e5:f9:c5:11:5a:ef:64:a5:
e8:30:a0:8e:28:b9:b0:8a:6d:ed:74:56:63:60:8e:
94:3c:f9:47:be:1b:70:5b:f7:8b:d2:bf:f3:b5:b3:
9f:91:14:5c:04:e8:6e:f0:47:e7:37:6b:24:c0:95:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C3:1F:6C:24:7F:1E:BD:26:53:27:2F:E7:26:37:E9:D4:AC:C6:70
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/G8MfbCR_Hr0mUycv5yY36dSsxnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d2::/48
Signature Algorithm: sha256WithRSAEncryption
76:76:6c:46:42:37:f6:e6:74:94:c8:0e:10:1a:b4:83:05:b3:
eb:a5:99:de:14:29:44:17:6c:0a:aa:91:a6:96:8b:9d:8c:c5:
21:61:6f:59:45:f8:b4:6f:97:eb:ac:b5:49:76:2b:a6:b6:08:
21:fb:55:52:d4:ff:49:f2:f0:2a:f5:f8:1b:7c:06:b6:3f:96:
0e:a4:19:54:91:63:e2:35:f3:d9:e6:c8:d1:0c:02:e1:ef:aa:
e2:a9:89:95:4f:4d:ae:50:bd:b1:ee:07:b6:ab:46:b1:e8:e9:
d7:e6:9d:28:88:69:db:7b:5c:5f:60:b9:4f:31:db:f6:fb:ed:
16:50:f8:b9:94:a2:6e:71:de:c7:96:47:13:aa:5d:74:ea:f1:
bf:2d:c5:23:59:00:f7:16:04:a2:10:d1:fb:9d:aa:60:ca:1b:
6f:96:dd:43:5f:b4:84:fc:bb:62:de:0d:1b:f7:7a:2d:aa:8f:
ed:c8:dc:19:fc:5f:c6:ab:b4:af:8e:d0:3b:28:d5:d9:82:e7:
c5:7b:1d:49:f2:9f:6a:df:90:d8:24:1b:ca:9c:10:e8:7a:6f:
b8:39:19:77:b8:cc:68:c6:5b:c7:eb:f9:a3:f4:1e:6c:3e:c8:
a2:86:10:3e:09:53:a9:4f:41:1b:60:80:88:2a:44:86:a9:74:
91:a1:f8:08
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qeRZZXxGXktCX5reFnksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmMzMWY2YzI0N2YxZWJkMjY1MzI3MmZlNzI2MzdlOWQ0YWNjNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1OSdn/dU5SIr7fLwRlrhUxXbDEG
8liXfgvxd8ByWN1i9DIDDuAx5r4c+cF5YbW53jZjftQYBIiJzyhjDLvjQubMEcju
gJM26YY9vEyyUrouvFLhTu5tks4HZbrygFXh+DszEyjzQr5kM2YWiOMELsfWcTHL
gVUmcPb+3Kp19ZiACP5SS94XW+Q3RrMj624l697TRP+PA2yR9A5YAxD39gPdrds0
mdE7ynu+I/+M/sYfapVO31tEEEUU9uZNVPncA+5v7Z2usv9S5fnFEVrvZKXoMKCO
KLmwim3tdFZjYI6UPPlHvhtwW/eL0r/ztbOfkRRcBOhu8EfnN2skwJXOCQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBvDH2wkfx69JlMnL+cmN+nUrMZwMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvRzhNZmJDUl9IcjBtVXljdjV5WTM2ZFNzeG5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDS
MA0GCSqGSIb3DQEBCwUAA4IBAQB2dmxGQjf25nSUyA4QGrSDBbPrpZneFClEF2wK
qpGmloudjMUhYW9ZRfi0b5frrLVJdiumtggh+1VS1P9J8vAq9fgbfAa2P5YOpBlU
kWPiNfPZ5sjRDALh76riqYmVT02uUL2x7ge2q0ax6OnX5p0oiGnbe1xfYLlPMdv2
++0WUPi5lKJucd7HlkcTql106vG/LcUjWQD3FgSiENH7napgyhtvlt1DX7SE/Lti
3g0b93otqo/tyNwZ/F/Gq7SvjtA7KNXZgufFex1J8p9q35DYJBvKnBDoem+4ORl3
uMxoxlvH6/mj9B5sPsiihhA+CVOpT0EbYICIKkSGqXSRofgI
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org