Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/P7PH0Sqx1ELa6lyPCUb_llIDarM.roa
File: P7PH0Sqx1ELa6lyPCUb_llIDarM.roa (raw, json)
Hash identifier: 3Ihwge31lqOJ6WP9nqXV+uu0KiN1uQ0Pw+6ek23VDLs=
Subject key identifier: 3F:B3:C7:D1:2A:B1:D4:42:DA:EA:5C:8F:09:46:FF:96:52:03:6A:B3
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0BA907CF6C8F68F39E770DE10F031
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/P7PH0Sqx1ELa6lyPCUb_llIDarM.roa
Signing time: Wed 07 Feb 2024 05:00:53 +0000
ROA not before: Wed 07 Feb 2024 05:00:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216014
IP address blocks: 2a0f:b241:153::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:ba:90:7c:f6:c8:f6:8f:39:e7:70:de:10:f0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fb3c7d12ab1d442daea5c8f0946ff9652036ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:2d:dc:96:ed:e8:52:fe:98:17:b2:ab:40:
1e:b6:3d:3b:71:22:a1:1d:2d:29:60:01:09:99:5c:
63:c2:b5:a8:69:aa:8a:60:df:bb:d7:ff:4b:6c:9d:
21:9d:cf:07:a4:03:61:03:a0:d3:f9:03:b1:6c:5e:
91:4b:bd:b6:db:91:8a:ea:b3:74:70:c8:d8:b6:5c:
52:9b:a1:25:a2:96:48:01:a5:c2:31:fd:08:75:78:
b1:09:4f:2b:f0:95:97:d9:fa:4f:90:37:d2:8e:72:
06:40:37:d3:f7:fc:7a:b6:43:64:cd:5d:b6:a6:3a:
df:28:5f:a2:fb:52:d8:44:41:14:f0:75:4d:70:5e:
90:7d:39:d0:8d:74:2e:98:ef:6e:6c:23:44:36:3b:
3c:3f:b6:75:00:d0:cc:46:8b:83:e7:62:de:d6:2e:
00:00:8e:28:a8:c4:4d:fa:b6:4a:df:15:5e:71:4c:
c2:51:a7:e8:44:3e:7a:21:23:3e:6f:f6:2a:83:dc:
1d:e0:b3:8d:23:8b:82:d3:d3:eb:6f:84:ae:d3:36:
53:ad:8b:4c:07:d6:99:c0:da:24:4a:da:cc:81:bd:
97:5b:96:f7:38:c2:81:7c:69:53:70:b6:42:56:43:
09:dd:aa:b7:e5:1b:a4:4b:d4:8c:32:59:53:c4:13:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B3:C7:D1:2A:B1:D4:42:DA:EA:5C:8F:09:46:FF:96:52:03:6A:B3
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/P7PH0Sqx1ELa6lyPCUb_llIDarM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:153::/48
Signature Algorithm: sha256WithRSAEncryption
5a:55:00:8c:2f:44:33:04:cb:4d:72:b2:bb:63:5c:cd:89:22:
61:53:d3:9e:9b:3e:31:24:40:11:3d:53:fb:d7:5f:97:af:97:
f9:6c:1e:f1:68:50:ae:4c:f2:e2:0c:53:88:e6:d6:6e:b0:e8:
d0:ca:4f:e6:11:99:24:78:f4:60:51:38:f8:f8:f7:55:b2:28:
03:ab:bd:64:71:71:73:78:a6:e9:d4:29:a0:de:7c:2f:a6:1b:
d6:58:34:d8:cf:7c:f2:00:47:60:af:90:cd:d6:ff:12:04:fe:
f8:3e:6e:a4:1b:6e:f6:fa:c3:1e:cb:08:1e:d2:13:88:8d:7d:
9d:06:9d:d2:26:31:a3:8b:69:10:5b:1f:f3:da:e5:a6:72:9e:
ba:47:17:e3:db:ad:2b:fb:3b:0d:5a:83:15:1d:6c:48:17:a5:
9e:19:0d:78:9a:67:e3:10:e9:57:7e:79:75:30:11:f7:34:ec:
33:de:c8:00:ff:54:8b:50:e7:99:b1:b2:94:8b:5d:69:71:32:
d7:02:8d:67:d4:9e:c6:50:fa:f0:cd:ab:d0:bf:c1:4e:68:b5:
ba:ad:7b:c9:3f:1a:b2:7b:34:8a:fb:73:1f:13:1b:1b:61:51:
b3:53:e1:e1:07:d5:4c:d5:4b:d3:f9:d8:d0:7c:3f:4b:4d:c0:
72:e8:b9:29
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2B8LqQfPbI9o8553DeEPAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUwMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmIzYzdkMTJhYjFkNDQyZGFlYTVjOGYwOTQ2ZmY5NjUyMDM2YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxAt3Jbt6FL+mBeyq0Aetj07cSKh
HS0pYAEJmVxjwrWoaaqKYN+71/9LbJ0hnc8HpANhA6DT+QOxbF6RS72225GK6rN0
cMjYtlxSm6ElopZIAaXCMf0IdXixCU8r8JWX2fpPkDfSjnIGQDfT9/x6tkNkzV22
pjrfKF+i+1LYREEU8HVNcF6QfTnQjXQumO9ubCNENjs8P7Z1ANDMRouD52Le1i4A
AI4oqMRN+rZK3xVecUzCUafoRD56ISM+b/Yqg9wd4LONI4uC09Prb4Su0zZTrYtM
B9aZwNokStrMgb2XW5b3OMKBfGlTcLZCVkMJ3aq35RukS9SMMllTxBMP4QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD+zx9EqsdRC2upcjwlG/5ZSA2qzMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvUDdQSDBTcXgxRUxhNmx5UENVYl9sbElEYXJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQFT
MA0GCSqGSIb3DQEBCwUAA4IBAQBaVQCML0QzBMtNcrK7Y1zNiSJhU9Oemz4xJEAR
PVP711+Xr5f5bB7xaFCuTPLiDFOI5tZusOjQyk/mEZkkePRgUTj4+PdVsigDq71k
cXFzeKbp1Cmg3nwvphvWWDTYz3zyAEdgr5DN1v8SBP74Pm6kG272+sMeywge0hOI
jX2dBp3SJjGji2kQWx/z2uWmcp66Rxfj260r+zsNWoMVHWxIF6WeGQ14mmfjEOlX
fnl1MBH3NOwz3sgA/1SLUOeZsbKUi11pcTLXAo1n1J7GUPrwzavQv8FOaLW6rXvJ
PxqyezSK+3MfExsbYVGzU+HhB9VM1UvT+djQfD9LTcBy6Lkp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org