Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QIIvlvncsotD-aOhMlvk3rWmVw0.roa
File: QIIvlvncsotD-aOhMlvk3rWmVw0.roa (raw, json)
Hash identifier: x/7e+L7u0jSKBfEWYVWokwqfn+OfZRp8T3yuyysWnUw=
Subject key identifier: 40:82:2F:96:F9:DC:B2:8B:43:F9:A3:A1:32:5B:E4:DE:B5:A6:57:0D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F062BA14C653206D32E6E3C313A2BD
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QIIvlvncsotD-aOhMlvk3rWmVw0.roa
Signing time: Wed 07 Feb 2024 05:00:31 +0000
ROA not before: Wed 07 Feb 2024 05:00:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51019
IP address blocks: 2a0f:b241:163::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:62:ba:14:c6:53:20:6d:32:e6:e3:c3:13:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40822f96f9dcb28b43f9a3a1325be4deb5a6570d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:ba:e9:92:e1:8e:07:cc:94:df:9b:22:08:
b7:3d:f1:43:7a:59:08:a1:6d:e8:ba:7b:98:0a:2a:
71:e3:0d:03:50:4c:9e:e9:57:f0:a2:dc:3c:05:67:
d4:b6:d9:e9:bb:4c:99:81:81:9d:ba:70:55:2c:73:
52:4d:4f:b7:49:e4:cc:62:7f:d4:3c:d0:da:f0:9d:
f2:e4:22:8e:60:9d:6e:43:2f:8b:3b:34:a6:66:11:
ee:c5:9d:bc:f9:a7:11:71:51:08:fa:b4:fd:9b:1a:
43:ce:9f:2f:3d:82:a1:ef:20:e4:86:31:a8:91:f5:
44:de:6c:cf:4f:69:27:0b:f6:14:6b:7d:c3:c7:10:
92:c6:08:a0:ec:a5:ba:69:b1:75:b9:9c:1b:92:93:
e4:7c:b5:54:39:2f:8e:6e:35:7c:0c:b6:15:ef:d0:
a7:08:62:b7:89:40:16:8d:6c:11:93:a7:3e:00:c3:
4a:fe:49:09:77:68:67:36:b0:b0:6a:45:e5:8f:d2:
f8:47:2e:3c:9e:de:b2:39:bf:4d:4c:13:ca:ea:1c:
a3:ac:d6:fe:ad:ea:d4:e4:4d:92:68:5e:30:19:2f:
f2:24:61:f1:a2:4c:71:c6:23:0c:5e:89:a8:dc:d4:
50:c4:b5:56:4a:a8:f4:f3:88:fa:be:af:ea:dd:c4:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:2F:96:F9:DC:B2:8B:43:F9:A3:A1:32:5B:E4:DE:B5:A6:57:0D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QIIvlvncsotD-aOhMlvk3rWmVw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:163::/48
Signature Algorithm: sha256WithRSAEncryption
52:3c:2c:86:94:c6:42:4a:a9:54:54:87:0a:ce:f3:05:36:69:
6f:24:1e:96:c7:74:c8:ca:da:b3:2d:a7:74:00:c0:93:dd:20:
5d:50:25:6d:4b:2d:67:7d:c3:9f:67:b5:87:0e:9a:43:b5:3d:
e5:f8:ca:e1:15:62:a4:5d:79:a9:4c:fb:f7:80:f4:8a:94:6e:
04:42:3b:af:a0:f3:fc:71:fa:ec:9f:c0:20:cb:48:13:99:d2:
6e:45:ce:8e:f8:8d:11:06:5f:47:e8:cc:bf:f9:13:63:a6:d2:
a4:e4:f0:d0:3c:c1:6c:61:32:8d:45:c2:1a:da:c2:9e:30:61:
d4:b9:ac:98:66:25:4f:c2:9f:fc:7a:52:49:a9:c4:c4:fc:65:
5c:e3:24:d4:14:35:b2:49:d0:8e:cf:31:3e:42:1e:58:c9:4f:
8a:95:f9:06:d0:13:b6:73:91:3b:75:be:5c:b3:9a:b4:95:5a:
2a:60:48:30:b2:85:7f:93:4c:f0:63:29:ba:9a:40:90:56:42:
52:39:46:ab:61:28:19:b1:1b:ce:79:12:ce:ea:dd:a2:56:77:
9e:f2:fc:34:4a:1a:bc:f4:a1:d6:f7:5e:d1:01:1d:8d:cb:19:
d8:65:aa:c8:d0:81:df:d9:82:1e:3e:89:83:19:f6:91:7f:d3:
a8:1f:a8:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2B8GK6FMZTIG0y5uPDE6K9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUwMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDgyMmY5NmY5ZGNiMjhiNDNmOWEzYTEzMjViZTRkZWI1YTY1NzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp266ZLhjgfMlN+bIgi3PfFDelkI
oW3ounuYCipx4w0DUEye6Vfwotw8BWfUttnpu0yZgYGdunBVLHNSTU+3SeTMYn/U
PNDa8J3y5CKOYJ1uQy+LOzSmZhHuxZ28+acRcVEI+rT9mxpDzp8vPYKh7yDkhjGo
kfVE3mzPT2knC/YUa33DxxCSxgig7KW6abF1uZwbkpPkfLVUOS+ObjV8DLYV79Cn
CGK3iUAWjWwRk6c+AMNK/kkJd2hnNrCwakXlj9L4Ry48nt6yOb9NTBPK6hyjrNb+
rerU5E2SaF4wGS/yJGHxokxxxiMMXomo3NRQxLVWSqj084j6vq/q3cSmEQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFECCL5b53LKLQ/mjoTJb5N61plcNMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvUUlJdmx2bmNzb3RELWFPaE1sdmszcldtVncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQFj
MA0GCSqGSIb3DQEBCwUAA4IBAQBSPCyGlMZCSqlUVIcKzvMFNmlvJB6Wx3TIytqz
Lad0AMCT3SBdUCVtSy1nfcOfZ7WHDppDtT3l+MrhFWKkXXmpTPv3gPSKlG4EQjuv
oPP8cfrsn8Agy0gTmdJuRc6O+I0RBl9H6My/+RNjptKk5PDQPMFsYTKNRcIa2sKe
MGHUuayYZiVPwp/8elJJqcTE/GVc4yTUFDWySdCOzzE+Qh5YyU+KlfkG0BO2c5E7
db5cs5q0lVoqYEgwsoV/k0zwYym6mkCQVkJSOUarYSgZsRvOeRLO6t2iVnee8vw0
Shq89KHW917RAR2NyxnYZarI0IHf2YIePomDGfaRf9OoH6gN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org