Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/JUfj9mQEeppp6LCdkYA6dRur5oY.roa
File: JUfj9mQEeppp6LCdkYA6dRur5oY.roa (raw, json)
Hash identifier: AV6ghLIelBMt4emR8agV6h80lDnsNMJX13Vhe32/Pz4=
Subject key identifier: 25:47:E3:F6:64:04:7A:9A:69:E8:B0:9D:91:80:3A:75:1B:AB:E6:86
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0631EE8264C08F386B441D232829F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/JUfj9mQEeppp6LCdkYA6dRur5oY.roa
Signing time: Wed 07 Feb 2024 05:00:31 +0000
ROA not before: Wed 07 Feb 2024 05:00:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51254
IP address blocks: 2a0f:b241:2f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:63:1e:e8:26:4c:08:f3:86:b4:41:d2:32:82:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2547e3f664047a9a69e8b09d91803a751babe686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:05:f8:ce:bd:15:ca:f8:a3:26:ba:95:e8:
70:59:5c:0d:4e:ae:1f:15:15:52:29:73:ba:dc:c3:
e9:84:b3:4d:06:02:22:69:92:15:54:63:23:6d:59:
7f:dc:41:24:48:89:78:37:7f:02:d3:4c:50:07:51:
1b:24:54:e9:0e:a3:03:59:1b:ad:33:04:90:c8:5f:
67:9c:47:67:e2:25:46:2b:86:83:b1:75:67:a8:0e:
e0:6d:1e:2e:2b:39:be:9d:ef:de:b6:90:17:17:1c:
1e:a8:05:c8:44:ba:85:7d:66:44:e7:06:c3:44:46:
4d:15:fa:ee:75:d6:ff:06:58:63:94:76:21:3f:7d:
0c:a3:22:98:58:c6:6d:36:c0:5e:4a:c5:da:bc:e8:
8a:61:3d:74:22:d2:e7:0f:95:e2:6e:58:74:c1:cb:
40:95:08:51:36:23:1d:85:39:f4:ad:47:e9:cf:26:
e6:cb:88:33:14:d8:51:a0:66:cd:a3:92:1d:df:0f:
1a:ea:e6:30:3c:f7:a5:31:90:4c:76:e6:76:c2:76:
c8:d7:3a:97:36:67:b3:e1:2d:ca:d6:f7:05:be:b9:
c3:0f:2d:3c:15:f2:c0:4f:c0:53:cc:6e:1d:9c:2f:
cf:2f:f7:f5:6f:79:6b:31:d2:f7:dc:52:46:4f:b9:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:E3:F6:64:04:7A:9A:69:E8:B0:9D:91:80:3A:75:1B:AB:E6:86
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/JUfj9mQEeppp6LCdkYA6dRur5oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:2f::/48
Signature Algorithm: sha256WithRSAEncryption
21:42:d5:f0:c9:ed:67:27:a8:36:22:70:c7:79:1c:e2:fa:52:
1d:e8:8b:f9:6a:63:21:ab:8f:ed:55:fe:a9:e4:a4:9b:de:80:
17:33:43:44:00:94:fe:98:49:50:cc:48:b6:d5:66:1a:30:8e:
6f:e3:d8:bd:4c:34:7a:0f:c9:d8:5f:d6:35:48:5c:3c:ab:1f:
e2:8e:5c:b6:b0:e6:74:e4:38:4a:e3:34:a4:26:c1:48:6b:82:
b6:61:d6:b9:e3:92:8b:43:ae:2d:59:86:c4:2f:54:00:2f:59:
e6:38:8d:1d:e5:d5:1f:8e:7b:9a:e1:05:18:7c:da:09:e0:6b:
ed:ea:99:0c:7c:e7:f8:f9:86:ea:e7:c0:26:ca:a9:34:23:a4:
99:5c:74:e8:b0:1d:4d:ae:23:5b:de:1e:94:91:1f:15:7c:d9:
5c:ea:08:df:ca:52:f1:79:82:5f:6a:81:39:3c:ae:32:26:a5:
ac:02:84:88:28:bc:0e:6e:cc:88:22:d5:63:c3:e8:90:41:fc:
69:4b:9d:a0:ac:96:97:ee:e8:26:81:60:90:e0:5f:5e:cb:48:
04:41:47:0a:f5:f2:26:c2:65:34:e5:5a:a3:db:69:c1:98:89:
a7:d9:29:7c:e3:ba:9e:6d:de:3a:5c:5d:52:c0:b8:8e:35:04:
68:eb:83:44
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2B8GMe6CZMCPOGtEHSMoKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUwMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTQ3ZTNmNjY0MDQ3YTlhNjllOGIwOWQ5MTgwM2E3NTFiYWJlNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRMF+M69Fcr4oya6lehwWVwNTq4f
FRVSKXO63MPphLNNBgIiaZIVVGMjbVl/3EEkSIl4N38C00xQB1EbJFTpDqMDWRut
MwSQyF9nnEdn4iVGK4aDsXVnqA7gbR4uKzm+ne/etpAXFxweqAXIRLqFfWZE5wbD
REZNFfruddb/BlhjlHYhP30MoyKYWMZtNsBeSsXavOiKYT10ItLnD5Xiblh0wctA
lQhRNiMdhTn0rUfpzybmy4gzFNhRoGbNo5Id3w8a6uYwPPelMZBMduZ2wnbI1zqX
Nmez4S3K1vcFvrnDDy08FfLAT8BTzG4dnC/PL/f1b3lrMdL33FJGT7nCZwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCVH4/ZkBHqaaeiwnZGAOnUbq+aGMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvSlVmajltUUVlcHBwNkxDZGtZQTZkUnVyNW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQAv
MA0GCSqGSIb3DQEBCwUAA4IBAQAhQtXwye1nJ6g2InDHeRzi+lId6Iv5amMhq4/t
Vf6p5KSb3oAXM0NEAJT+mElQzEi21WYaMI5v49i9TDR6D8nYX9Y1SFw8qx/ijly2
sOZ05DhK4zSkJsFIa4K2Yda545KLQ64tWYbEL1QAL1nmOI0d5dUfjnua4QUYfNoJ
4Gvt6pkMfOf4+Ybq58Amyqk0I6SZXHTosB1NriNb3h6UkR8VfNlc6gjfylLxeYJf
aoE5PK4yJqWsAoSIKLwObsyIItVjw+iQQfxpS52grJaX7ugmgWCQ4F9ey0gEQUcK
9fImwmU05Vqj22nBmImn2Sl847qebd46XF1SwLiONQRo64NE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org