Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/NldnyM5fpuT6KN-fDawMVr9P7o8.roa
File: NldnyM5fpuT6KN-fDawMVr9P7o8.roa (raw, json)
Hash identifier: yRwhbSHlvh8gEt6ae9KfVlk9K4kAWRL9YUvbrKz+u54=
Subject key identifier: 36:57:67:C8:CE:5F:A6:E4:FA:28:DF:9F:0D:AC:0C:56:BF:4F:EE:8F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E2822BA6FB89E7AE9FF8828F2972
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/NldnyM5fpuT6KN-fDawMVr9P7o8.roa
Signing time: Tue 06 Feb 2024 18:24:16 +0000
ROA not before: Tue 06 Feb 2024 18:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200732
IP address blocks: 2a0f:b241:ce::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e2:82:2b:a6:fb:89:e7:ae:9f:f8:82:8f:29:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=365767c8ce5fa6e4fa28df9f0dac0c56bf4fee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:e2:cb:4e:62:31:4b:6d:72:48:17:e6:3e:
a5:48:54:ab:50:3a:30:f9:17:38:2a:1f:ad:0e:60:
c5:77:e7:f9:c9:d3:bc:cb:96:37:ee:90:69:00:c4:
38:16:92:0b:34:79:0e:15:fc:31:e7:a3:99:27:62:
c8:50:3e:d9:96:0c:45:bc:34:3d:ca:f2:94:2f:ee:
ba:f7:d2:43:c9:1c:8e:32:b5:31:a7:d8:22:2a:83:
a7:70:a2:32:f5:18:41:1e:92:0a:42:9f:f9:21:5f:
6a:55:0b:7b:48:55:7e:a2:a7:30:eb:4f:ce:5c:cd:
e1:32:38:77:bd:e3:b7:3d:16:5f:ee:c8:1c:7c:a5:
c0:59:dd:12:b3:36:c9:04:0e:67:d5:4a:74:7b:fc:
b2:8f:75:61:71:ef:60:cd:02:c4:29:52:ad:ac:cf:
21:a5:32:79:c3:ba:f4:5e:e5:fe:13:58:62:59:f2:
9f:4b:9a:54:62:38:9a:61:29:b3:b2:7a:7e:e2:4a:
82:3a:68:ba:9f:84:87:56:9e:15:7b:a2:01:b4:ae:
79:92:8d:26:c1:43:02:6b:4b:8e:f6:91:16:7c:6e:
00:62:b8:ae:c6:3c:43:78:ce:fa:f7:1c:4c:ca:2e:
dd:70:40:9d:d0:70:29:ca:41:71:8e:0d:71:27:7f:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:67:C8:CE:5F:A6:E4:FA:28:DF:9F:0D:AC:0C:56:BF:4F:EE:8F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/NldnyM5fpuT6KN-fDawMVr9P7o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:ce::/48
Signature Algorithm: sha256WithRSAEncryption
28:51:ea:d6:29:cd:06:48:2e:12:0d:ba:09:d3:fb:08:f0:5a:
ad:60:f1:00:67:8d:a9:3b:98:eb:19:b1:24:ac:fc:f9:88:9a:
e4:88:bd:e8:ef:58:68:d8:1d:b5:e1:bb:08:4b:33:30:ad:58:
93:b3:a0:f9:47:f2:2b:9d:bc:f9:7f:82:9b:26:cc:1f:33:0a:
5f:08:8a:1b:ae:2a:2c:6a:5b:98:6c:80:26:2f:ef:ac:6f:16:
cd:fa:9a:48:e0:59:1c:20:da:44:0b:76:fa:62:33:26:72:9e:
9e:49:6f:36:a7:6d:76:92:86:c5:41:51:5a:a1:21:4e:eb:0d:
cb:d6:18:6a:12:53:ea:2c:81:1a:a2:18:82:4e:ce:c3:f2:70:
90:42:bc:b2:ce:19:11:54:c0:db:dd:1d:45:4d:1f:2f:1a:a3:
84:4f:17:2d:d7:b2:aa:5e:40:07:5e:de:4f:f2:8a:fb:9c:18:
18:11:66:91:8b:7c:70:7f:30:07:3c:26:6d:6d:62:8d:0b:37:
ad:47:68:0d:19:3a:26:e3:eb:36:3e:2a:59:b6:55:50:4b:f9:
c5:6f:a2:74:d5:17:9f:8b:9d:c5:ff:90:d2:13:49:69:56:c0:
82:79:43:04:6a:b0:49:96:c4:b7:56:a3:38:a0:46:48:9c:eb:
5b:74:95:7f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qeKCK6b7ieeun/iCjylyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjU3NjdjOGNlNWZhNmU0ZmEyOGRmOWYwZGFjMGM1NmJmNGZlZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kbiy05iMUttckgX5j6lSFSrUDow
+Rc4Kh+tDmDFd+f5ydO8y5Y37pBpAMQ4FpILNHkOFfwx56OZJ2LIUD7ZlgxFvDQ9
yvKUL+6699JDyRyOMrUxp9giKoOncKIy9RhBHpIKQp/5IV9qVQt7SFV+oqcw60/O
XM3hMjh3veO3PRZf7sgcfKXAWd0SszbJBA5n1Up0e/yyj3Vhce9gzQLEKVKtrM8h
pTJ5w7r0XuX+E1hiWfKfS5pUYjiaYSmzsnp+4kqCOmi6n4SHVp4Ve6IBtK55ko0m
wUMCa0uO9pEWfG4AYriuxjxDeM769xxMyi7dcECd0HApykFxjg1xJ38zbwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDZXZ8jOX6bk+ijfnw2sDFa/T+6PMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvTmxkbnlNNWZwdVQ2S04tZkRhd01WcjlQN284LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDO
MA0GCSqGSIb3DQEBCwUAA4IBAQAoUerWKc0GSC4SDboJ0/sI8FqtYPEAZ42pO5jr
GbEkrPz5iJrkiL3o71ho2B214bsISzMwrViTs6D5R/Irnbz5f4KbJswfMwpfCIob
riosaluYbIAmL++sbxbN+ppI4FkcINpEC3b6YjMmcp6eSW82p212kobFQVFaoSFO
6w3L1hhqElPqLIEaohiCTs7D8nCQQryyzhkRVMDb3R1FTR8vGqOETxct17KqXkAH
Xt5P8or7nBgYEWaRi3xwfzAHPCZtbWKNCzetR2gNGTom4+s2PipZtlVQS/nFb6J0
1Refi53F/5DSE0lpVsCCeUMEarBJlsS3VqM4oEZInOtbdJV/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org