Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MiD8zxeDTtdpgveAuTQ9TmCERuc.roa
File: MiD8zxeDTtdpgveAuTQ9TmCERuc.roa (raw, json)
Hash identifier: RizIToXcUeFOXGu2ZbWYwoqxkC5qAFeqJ1rd4MX0TsE=
Subject key identifier: 32:20:FC:CF:17:83:4E:D7:69:82:F7:80:B9:34:3D:4E:60:84:46:E7
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABB8914A29A7A67AE642700C6031EC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MiD8zxeDTtdpgveAuTQ9TmCERuc.roa
Signing time: Tue 06 Feb 2024 18:26:16 +0000
ROA not before: Tue 06 Feb 2024 18:26:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205290
IP address blocks: 2a0f:b241:ec::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:b8:91:4a:29:a7:a6:7a:e6:42:70:0c:60:31:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3220fccf17834ed76982f780b9343d4e608446e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:4e:b0:5b:7e:34:1b:32:69:14:36:65:03:
f9:b2:6d:5f:ea:a7:88:31:8e:52:f7:0b:a8:c4:a1:
88:93:0f:79:66:19:d7:8c:3e:55:da:44:ca:b0:0b:
02:58:04:83:12:51:16:aa:ce:92:3d:dd:27:ef:c7:
5b:cd:a0:97:32:c6:7e:6a:4f:3c:b4:39:65:37:a1:
b3:d1:08:93:73:4a:b0:71:1c:e4:88:30:54:f9:d2:
21:4c:2f:61:03:ec:c6:c9:b0:5a:3f:2c:23:89:ed:
3a:79:87:4f:8e:a2:c4:3e:3b:15:62:a0:04:97:b3:
91:72:90:06:82:db:0f:c8:26:a4:eb:3a:44:74:33:
4e:78:06:e2:0f:88:c5:c8:75:35:b6:37:7d:01:13:
6d:d9:23:be:87:e3:af:8f:13:09:78:f2:4d:3c:4e:
fc:ee:9a:84:e3:39:d1:1f:3c:35:11:7e:68:f3:0a:
ef:64:38:b9:75:2f:17:30:54:6b:53:bd:39:8e:65:
06:9b:df:0d:fd:aa:fc:cc:3b:ba:cc:53:88:6a:f3:
41:1b:0a:e9:31:57:b4:3a:90:84:e4:d8:cf:bb:0c:
7d:f4:2d:96:79:7f:b4:8c:59:21:3f:8a:f6:d3:8b:
3d:bf:39:7f:c5:f1:c3:18:cf:30:20:b3:cb:30:b5:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:FC:CF:17:83:4E:D7:69:82:F7:80:B9:34:3D:4E:60:84:46:E7
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MiD8zxeDTtdpgveAuTQ9TmCERuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:ec::/48
Signature Algorithm: sha256WithRSAEncryption
4d:f2:7d:e6:c2:71:b6:2a:d0:eb:00:0e:b0:7e:94:bb:7c:8b:
af:79:af:cc:f5:81:97:38:7c:a3:0b:c6:66:12:31:ad:d2:f2:
3b:87:2a:7f:e1:a5:00:f2:b6:f0:40:c5:32:86:06:62:27:10:
76:b6:1b:b3:bf:b6:f4:7a:34:79:c6:70:81:c5:fb:d5:da:0b:
95:f0:c0:95:d3:68:99:26:83:f4:a0:c9:97:6f:60:91:c8:c2:
55:fd:8d:c6:a4:22:6f:99:91:98:5a:4e:ef:91:b1:80:9f:c4:
d9:ed:a8:c6:d8:c8:89:39:bc:10:34:71:1d:7d:94:fe:fb:2e:
34:19:b2:8e:26:13:a0:7e:27:a2:84:81:1c:0f:ce:84:64:22:
fa:8e:65:8f:c4:ef:63:bf:ee:98:b8:5f:b1:1f:d0:09:f4:ee:
60:2c:f2:8a:16:45:d5:13:51:12:c2:1d:dd:14:88:9d:51:11:
84:0a:3f:51:a5:75:b2:bf:d4:0f:1d:85:8f:9a:84:26:82:a9:
22:07:01:e3:d8:79:86:0f:82:82:bf:a4:ac:85:f1:2e:6b:5a:
8b:20:de:e8:5d:e7:54:70:a5:16:ce:37:88:b4:b7:82:13:72:
cb:a2:62:4a:ec:e0:95:21:ee:ad:a5:93:57:76:f0:b6:91:80:
da:34:43:af
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/q7iRSimnpnrmQnAMYDHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjIwZmNjZjE3ODM0ZWQ3Njk4MmY3ODBiOTM0M2Q0ZTYwODQ0NmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymVOsFt+NBsyaRQ2ZQP5sm1f6qeI
MY5S9wuoxKGIkw95ZhnXjD5V2kTKsAsCWASDElEWqs6SPd0n78dbzaCXMsZ+ak88
tDllN6Gz0QiTc0qwcRzkiDBU+dIhTC9hA+zGybBaPywjie06eYdPjqLEPjsVYqAE
l7ORcpAGgtsPyCak6zpEdDNOeAbiD4jFyHU1tjd9ARNt2SO+h+OvjxMJePJNPE78
7pqE4znRHzw1EX5o8wrvZDi5dS8XMFRrU705jmUGm98N/ar8zDu6zFOIavNBGwrp
MVe0OpCE5NjPuwx99C2WeX+0jFkhP4r204s9vzl/xfHDGM8wILPLMLUoHQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDIg/M8Xg07XaYL3gLk0PU5ghEbnMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvTWlEOHp4ZURUdGRwZ3ZlQXVUUTlUbUNFUnVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDs
MA0GCSqGSIb3DQEBCwUAA4IBAQBN8n3mwnG2KtDrAA6wfpS7fIuvea/M9YGXOHyj
C8ZmEjGt0vI7hyp/4aUA8rbwQMUyhgZiJxB2thuzv7b0ejR5xnCBxfvV2guV8MCV
02iZJoP0oMmXb2CRyMJV/Y3GpCJvmZGYWk7vkbGAn8TZ7ajG2MiJObwQNHEdfZT+
+y40GbKOJhOgfieihIEcD86EZCL6jmWPxO9jv+6YuF+xH9AJ9O5gLPKKFkXVE1ES
wh3dFIidURGECj9RpXWyv9QPHYWPmoQmgqkiBwHj2HmGD4KCv6SshfEua1qLIN7o
XedUcKUWzjeItLeCE3LLomJK7OCVIe6tpZNXdvC2kYDaNEOv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org