Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/HXQLOivbmc7SdSZuAynxSjQB6Kk.roa
File: HXQLOivbmc7SdSZuAynxSjQB6Kk.roa (raw, json)
Hash identifier: /4AWHhrmO4DmQT60w4oMJcXW+Lv5siJAKs5DZcEpNE8=
Subject key identifier: 1D:74:0B:3A:2B:DB:99:CE:D2:75:26:6E:03:29:F1:4A:34:01:E8:A9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB7A13EF53A51409ECBE3FC06709A5E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/HXQLOivbmc7SdSZuAynxSjQB6Kk.roa
Signing time: Tue 06 Feb 2024 18:39:17 +0000
ROA not before: Tue 06 Feb 2024 18:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210633
IP address blocks: 2a0f:b241:141::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:a1:3e:f5:3a:51:40:9e:cb:e3:fc:06:70:9a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d740b3a2bdb99ced275266e0329f14a3401e8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:62:25:61:24:fb:64:12:1c:86:d4:9d:8a:
3a:9e:75:c9:51:6d:c8:20:8b:8b:be:de:c1:64:7c:
c4:8a:10:1a:29:68:bf:14:24:8b:40:4b:6a:6f:44:
39:c0:d8:3b:c4:a5:43:73:e6:13:f2:9b:6e:20:c7:
03:41:3b:4e:b6:cb:d6:e5:71:f4:4e:09:fd:ca:a1:
58:98:30:75:5e:36:3f:5d:73:f1:98:6f:0e:46:32:
58:16:c1:c9:9a:9c:e9:8c:82:28:4f:4d:b4:52:44:
e5:8e:63:bd:85:62:de:15:be:ca:54:c8:0f:ad:c3:
9f:f1:2c:f8:c8:aa:f7:9f:53:60:7e:52:44:2e:61:
60:3b:e7:a3:49:c4:73:4f:1a:92:8d:bb:43:3f:54:
f3:3d:81:f0:24:a4:b8:e9:d9:de:48:51:58:b3:e7:
95:38:67:36:d7:a3:5d:4c:77:79:d4:58:d9:df:b9:
82:44:09:fc:2f:bc:e9:ad:51:24:2c:07:8e:2c:ee:
e3:61:81:b7:53:78:23:82:c9:62:c9:e2:68:9b:fc:
6f:f5:54:8b:c5:9a:5f:63:2e:d8:d6:f2:74:3a:0a:
91:f3:4f:34:1f:59:77:d1:8a:4f:71:3b:87:bd:42:
2f:42:0a:00:e8:ab:5f:3e:f3:01:b5:fc:2c:7a:24:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:74:0B:3A:2B:DB:99:CE:D2:75:26:6E:03:29:F1:4A:34:01:E8:A9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/HXQLOivbmc7SdSZuAynxSjQB6Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:141::/48
Signature Algorithm: sha256WithRSAEncryption
42:c3:0d:19:80:cf:50:bf:89:cf:49:69:60:0f:a1:28:de:42:
0e:8b:c8:e4:b4:eb:2a:01:c8:e8:01:fc:fe:f5:e0:af:e3:e6:
28:7e:c0:76:67:45:14:96:6c:29:6d:69:59:7e:46:34:2c:a8:
9d:d2:80:8c:5d:4c:50:12:ed:f0:0f:51:9e:fb:b4:ae:a2:22:
f0:c3:01:44:6a:47:f5:3c:43:6e:d1:96:42:a8:ac:9c:5f:e0:
65:ae:59:65:15:27:d4:62:4b:1d:8b:ae:ce:43:ce:4a:b0:04:
68:93:a0:9d:6c:57:5d:f3:56:ac:b7:c2:62:f1:9e:93:45:92:
75:0b:2f:72:db:ec:2a:00:4e:b2:1b:57:4a:26:74:d4:83:d1:
d5:f3:59:45:17:5f:dd:be:9c:49:19:74:39:97:18:1f:58:65:
67:b5:2b:46:5b:04:7d:a8:20:e5:bd:4e:38:9a:11:e0:eb:7f:
86:f1:aa:b1:8a:df:e5:d7:ab:20:cc:0f:21:91:a7:eb:9a:05:
61:93:40:cb:24:dd:67:5c:16:26:4b:f2:84:3c:e5:86:b1:7c:
f3:48:03:c4:d2:e0:59:10:cf:5c:77:e0:1a:89:cb:55:20:d1:
17:74:3c:85:83:54:3c:4d:1b:1c:82:32:4c:e1:b8:d6:cb:d4:
88:bd:4d:b5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/t6E+9TpRQJ7L4/wGcJpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgzOTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDc0MGIzYTJiZGI5OWNlZDI3NTI2NmUwMzI5ZjE0YTM0MDFlOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKtiJWEk+2QSHIbUnYo6nnXJUW3I
IIuLvt7BZHzEihAaKWi/FCSLQEtqb0Q5wNg7xKVDc+YT8ptuIMcDQTtOtsvW5XH0
Tgn9yqFYmDB1XjY/XXPxmG8ORjJYFsHJmpzpjIIoT020UkTljmO9hWLeFb7KVMgP
rcOf8Sz4yKr3n1NgflJELmFgO+ejScRzTxqSjbtDP1TzPYHwJKS46dneSFFYs+eV
OGc216NdTHd51FjZ37mCRAn8L7zprVEkLAeOLO7jYYG3U3gjgsliyeJom/xv9VSL
xZpfYy7Y1vJ0OgqR8080H1l30YpPcTuHvUIvQgoA6KtfPvMBtfwseiSUtwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB10Czor25nO0nUmbgMp8Uo0AeipMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvSFhRTE9pdmJtYzdTZFNadUF5bnhTalFCNktrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQFB
MA0GCSqGSIb3DQEBCwUAA4IBAQBCww0ZgM9Qv4nPSWlgD6Eo3kIOi8jktOsqAcjo
Afz+9eCv4+YofsB2Z0UUlmwpbWlZfkY0LKid0oCMXUxQEu3wD1Ge+7SuoiLwwwFE
akf1PENu0ZZCqKycX+BlrlllFSfUYksdi67OQ85KsARok6CdbFdd81ast8Ji8Z6T
RZJ1Cy9y2+wqAE6yG1dKJnTUg9HV81lFF1/dvpxJGXQ5lxgfWGVntStGWwR9qCDl
vU44mhHg63+G8aqxit/l16sgzA8hkafrmgVhk0DLJN1nXBYmS/KEPOWGsXzzSAPE
0uBZEM9cd+AaictVINEXdDyFg1Q8TRscgjJM4bjWy9SIvU21
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org