Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RL-9nRzKOiqljWkDC9S-2GIr2YY.roa
File: RL-9nRzKOiqljWkDC9S-2GIr2YY.roa (raw, json)
Hash identifier: JbjhO9Vt/XRzKTvVS8KsFPUZWBAYAz320Tsjx0EJhVI=
Subject key identifier: 44:BF:BD:9D:1C:CA:3A:2A:A5:8D:69:03:0B:D4:BE:D8:62:2B:D9:86
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA721A6FB916DD7771C9EA6FEDB751B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RL-9nRzKOiqljWkDC9S-2GIr2YY.roa
Signing time: Tue 06 Feb 2024 18:21:16 +0000
ROA not before: Tue 06 Feb 2024 18:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198714
IP address blocks: 2a0f:b241:7a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a7:21:a6:fb:91:6d:d7:77:1c:9e:a6:fe:db:75:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44bfbd9d1cca3a2aa58d69030bd4bed8622bd986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:3a:ee:42:fa:3c:ee:3c:f6:91:ce:d0:bc:
4e:04:a8:03:7e:88:ac:64:04:b5:e9:ad:82:52:2e:
61:1f:03:e8:f7:87:ed:f2:f7:41:c4:af:45:bb:a7:
51:46:8a:49:a9:d4:80:92:71:b6:73:17:db:e9:a0:
8f:2b:55:5f:f5:6b:45:d3:5a:6d:38:f0:56:ea:95:
0d:3b:3e:b8:1f:db:45:e7:d9:2a:b4:7a:d7:e6:38:
a0:56:a9:a0:c2:44:57:4a:48:78:c3:35:af:fe:37:
e1:19:d4:65:b9:c2:99:2a:4f:c5:77:23:f9:8d:58:
4e:f5:e9:3f:3b:9f:e3:a9:0d:df:9c:21:bb:f6:fe:
51:be:c9:c1:8c:f1:29:e3:49:f1:b5:87:6c:c0:a7:
8f:a7:0a:0a:42:16:c9:c2:9d:b6:16:69:3f:32:dd:
bc:33:87:0f:81:18:f2:e9:4a:5a:93:5f:e5:e3:75:
5b:a7:1b:46:52:9b:94:9e:f6:7e:2a:2c:e3:2c:77:
72:12:2e:45:d0:38:51:05:4e:c8:3a:f8:8e:7e:aa:
d4:0e:ee:1a:cd:1e:b9:8c:db:c9:1c:fa:98:f6:cd:
f7:45:fc:1c:d8:5c:08:54:94:70:c8:cd:3e:20:0b:
fb:42:98:e0:6a:5d:fc:98:01:a0:a5:70:88:65:4d:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BF:BD:9D:1C:CA:3A:2A:A5:8D:69:03:0B:D4:BE:D8:62:2B:D9:86
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RL-9nRzKOiqljWkDC9S-2GIr2YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:7a::/48
Signature Algorithm: sha256WithRSAEncryption
56:14:86:5f:64:db:21:26:c4:54:91:45:97:e1:ce:71:42:7d:
7a:cc:32:4a:bb:98:35:41:91:70:7d:48:f1:29:c5:a2:b3:2f:
3f:7f:15:6b:31:62:d8:6b:2e:4e:d6:8e:43:01:9e:a2:80:33:
7d:e8:e4:bd:c9:9d:0b:4e:e7:59:17:8f:86:6b:73:4e:ca:64:
56:a2:25:36:f8:e7:1a:25:9b:09:d2:8b:85:6f:c3:7f:79:5a:
e0:20:86:b2:80:5a:dc:64:b3:ba:a8:56:47:8e:09:f5:4d:0a:
1d:1b:9f:ee:ac:06:ca:c3:fe:1b:c7:ad:7a:86:cf:fb:6d:54:
75:5b:2a:cb:e5:72:30:7e:41:8e:a6:00:26:de:1a:a6:e2:b7:
f1:75:52:2e:4b:49:ee:db:4e:bd:e3:f1:17:23:5c:0e:c7:4f:
da:2f:e7:e5:5d:5c:b5:d8:6f:7e:46:a4:3e:d5:41:f9:c0:fb:
10:d1:57:1a:e7:01:58:53:01:02:29:27:4e:55:23:54:b0:cb:
84:c6:4d:cd:e1:bd:c4:e5:38:2f:d7:5e:cb:e2:74:48:30:d6:
d3:bf:d2:1a:69:27:c7:03:b8:e0:76:12:a3:88:4b:54:99:58:
dd:dc:ec:d4:7e:38:cb:af:70:14:e5:58:6e:00:06:e3:93:4c:
89:38:17:f0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/pyGm+5Ft13ccnqb+23UbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGJmYmQ5ZDFjY2EzYTJhYTU4ZDY5MDMwYmQ0YmVkODYyMmJkOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0A67kL6PO489pHO0LxOBKgDfois
ZAS16a2CUi5hHwPo94ft8vdBxK9Fu6dRRopJqdSAknG2cxfb6aCPK1Vf9WtF01pt
OPBW6pUNOz64H9tF59kqtHrX5jigVqmgwkRXSkh4wzWv/jfhGdRlucKZKk/FdyP5
jVhO9ek/O5/jqQ3fnCG79v5RvsnBjPEp40nxtYdswKePpwoKQhbJwp22Fmk/Mt28
M4cPgRjy6Upak1/l43VbpxtGUpuUnvZ+KizjLHdyEi5F0DhRBU7IOviOfqrUDu4a
zR65jNvJHPqY9s33Rfwc2FwIVJRwyM0+IAv7Qpjgal38mAGgpXCIZU3towIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFES/vZ0cyjoqpY1pAwvUvthiK9mGMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvUkwtOW5SektPaXFsaldrREM5Uy0yR0lyMllZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQB6
MA0GCSqGSIb3DQEBCwUAA4IBAQBWFIZfZNshJsRUkUWX4c5xQn16zDJKu5g1QZFw
fUjxKcWisy8/fxVrMWLYay5O1o5DAZ6igDN96OS9yZ0LTudZF4+Ga3NOymRWoiU2
+OcaJZsJ0ouFb8N/eVrgIIaygFrcZLO6qFZHjgn1TQodG5/urAbKw/4bx616hs/7
bVR1WyrL5XIwfkGOpgAm3hqm4rfxdVIuS0nu20694/EXI1wOx0/aL+flXVy12G9+
RqQ+1UH5wPsQ0Vca5wFYUwECKSdOVSNUsMuExk3N4b3E5Tgv117L4nRIMNbTv9Ia
aSfHA7jgdhKjiEtUmVjd3OzUfjjLr3AU5VhuAAbjk0yJOBfw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org