Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/UYc3b68y8Pvhe7T6kJLMVvORP_M.roa
File: UYc3b68y8Pvhe7T6kJLMVvORP_M.roa (raw, json)
Hash identifier: c7Uijhp/QiBqPjo49G0/NsakavFpOSHLbRQP/VKLI3k=
Subject key identifier: 51:87:37:6F:AF:32:F0:FB:E1:7B:B4:FA:90:92:CC:56:F3:91:3F:F3
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA723A7FDF233CD39D1806165E6F750
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/UYc3b68y8Pvhe7T6kJLMVvORP_M.roa
Signing time: Tue 06 Feb 2024 18:21:16 +0000
ROA not before: Tue 06 Feb 2024 18:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198963
IP address blocks: 2a0f:b241:7d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a7:23:a7:fd:f2:33:cd:39:d1:80:61:65:e6:f7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5187376faf32f0fbe17bb4fa9092cc56f3913ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:a9:2f:7d:00:af:6b:da:0d:4e:79:86:96:
00:39:fd:34:a7:b2:df:b4:7e:1c:f9:ec:ec:31:a5:
a0:a9:49:ac:d7:1f:18:8e:df:5c:b5:99:bd:d9:bc:
61:48:56:d1:38:eb:43:6b:ef:43:06:07:5b:8c:d1:
4d:f7:0e:c5:46:fe:7a:14:bd:dd:6b:f4:68:8e:67:
29:47:ac:8d:2a:b9:49:6d:4f:ad:0d:01:85:f8:88:
24:d2:2d:1f:81:0d:35:11:ec:fe:ee:31:d7:84:86:
11:fa:25:05:4c:3a:82:de:57:f6:65:16:03:c0:13:
a7:37:36:4d:7e:2a:a3:61:3f:f4:51:7f:c5:95:70:
9d:7a:6b:54:56:32:cf:90:8c:e8:c1:1d:44:b2:39:
61:1c:8b:b5:97:95:61:e5:74:64:0e:33:38:50:46:
2e:13:08:0a:5f:49:0e:af:54:36:2b:ed:0b:da:fb:
dd:5e:71:2a:58:b6:93:08:fc:0b:36:67:d0:80:d7:
4b:07:6d:50:b0:e1:df:71:f5:c5:7b:9d:26:c4:26:
df:d2:7c:0a:11:59:42:7b:56:d9:95:22:5a:49:92:
46:ed:2d:de:d5:59:0d:92:34:c1:c8:d6:51:34:65:
1c:fc:ee:b7:a2:fa:e5:28:72:0a:63:07:4f:04:80:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:37:6F:AF:32:F0:FB:E1:7B:B4:FA:90:92:CC:56:F3:91:3F:F3
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/UYc3b68y8Pvhe7T6kJLMVvORP_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:7d::/48
Signature Algorithm: sha256WithRSAEncryption
8e:01:a3:11:9f:a5:b0:8a:c1:47:94:26:f7:df:26:05:44:90:
1d:bf:72:dd:ec:b2:d1:05:73:54:6a:ff:57:fa:71:d6:77:8b:
69:0b:35:c9:9b:4c:e6:50:57:77:23:4c:ad:56:f6:07:bc:05:
81:b6:78:f8:18:31:af:9a:c6:7c:fb:03:9f:e2:06:ff:1f:07:
69:db:70:7f:bd:c8:66:23:63:13:93:36:e3:a1:df:41:40:45:
ca:35:47:d1:a1:0f:cf:c6:28:9d:a2:96:dc:73:bf:6a:da:7d:
49:da:30:da:ff:94:22:4c:bb:12:92:27:b3:82:72:ce:d1:3f:
63:e6:1d:2b:f7:aa:d0:fe:1f:7a:45:65:7c:9c:f8:b4:d5:90:
6e:cd:67:33:ab:38:6a:d1:ec:90:20:77:c4:d4:72:84:cd:8c:
87:dc:36:10:a8:80:07:f3:ab:d2:bf:be:0b:61:ac:7a:c0:f2:
82:79:88:b0:f6:4f:2c:3d:da:e8:a3:98:1e:0b:0b:0e:38:71:
f1:04:26:4c:39:f2:3a:bb:2e:b3:28:36:77:c0:77:af:f8:a9:
39:63:84:60:7b:b9:84:e5:2f:90:13:5d:2d:cb:ac:23:0c:06:
80:76:c4:98:d3:b3:86:1c:f6:38:8f:11:56:b5:db:42:5b:9d:
9c:f3:4b:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/pyOn/fIzzTnRgGFl5vdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTg3Mzc2ZmFmMzJmMGZiZTE3YmI0ZmE5MDkyY2M1NmYzOTEzZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfSpL30Ar2vaDU55hpYAOf00p7Lf
tH4c+ezsMaWgqUms1x8Yjt9ctZm92bxhSFbROOtDa+9DBgdbjNFN9w7FRv56FL3d
a/RojmcpR6yNKrlJbU+tDQGF+Igk0i0fgQ01Eez+7jHXhIYR+iUFTDqC3lf2ZRYD
wBOnNzZNfiqjYT/0UX/FlXCdemtUVjLPkIzowR1EsjlhHIu1l5Vh5XRkDjM4UEYu
EwgKX0kOr1Q2K+0L2vvdXnEqWLaTCPwLNmfQgNdLB21QsOHfcfXFe50mxCbf0nwK
EVlCe1bZlSJaSZJG7S3e1VkNkjTByNZRNGUc/O63ovrlKHIKYwdPBIAJ8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFGHN2+vMvD74Xu0+pCSzFbzkT/zMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvVVljM2I2OHk4UHZoZTdUNmtKTE1Wdk9SUF9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQB9
MA0GCSqGSIb3DQEBCwUAA4IBAQCOAaMRn6WwisFHlCb33yYFRJAdv3Ld7LLRBXNU
av9X+nHWd4tpCzXJm0zmUFd3I0ytVvYHvAWBtnj4GDGvmsZ8+wOf4gb/Hwdp23B/
vchmI2MTkzbjod9BQEXKNUfRoQ/Pxiidopbcc79q2n1J2jDa/5QiTLsSkiezgnLO
0T9j5h0r96rQ/h96RWV8nPi01ZBuzWczqzhq0eyQIHfE1HKEzYyH3DYQqIAH86vS
v74LYax6wPKCeYiw9k8sPdroo5geCwsOOHHxBCZMOfI6uy6zKDZ3wHev+Kk5Y4Rg
e7mE5S+QE10ty6wjDAaAdsSY07OGHPY4jxFWtdtCW52c80st
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org