Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/brTx_cuh0F3aw-sQ0mp4CYt4IkI.roa
File: brTx_cuh0F3aw-sQ0mp4CYt4IkI.roa (raw, json)
Hash identifier: 1HIrPBsUCLNF+RBeYSK6a4ga7AkcxV/Z94xmWaIgrCo=
Subject key identifier: 6E:B4:F1:FD:CB:A1:D0:5D:DA:C3:EB:10:D2:6A:78:09:8B:78:22:42
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81FECE110A5CE34AD2FB27362BD08CF9
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/brTx_cuh0F3aw-sQ0mp4CYt4IkI.roa
Signing time: Wed 07 Feb 2024 05:16:16 +0000
ROA not before: Wed 07 Feb 2024 05:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211233
IP address blocks: 2a0f:b241:97::/48 maxlen: 48
2a0f:b241:99::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:fe:ce:11:0a:5c:e3:4a:d2:fb:27:36:2b:d0:8c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eb4f1fdcba1d05ddac3eb10d26a78098b782242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:78:f6:44:01:e7:3f:89:4d:cf:09:3b:45:
4b:ed:f3:46:fe:ff:6e:ff:36:79:13:44:3f:6f:1d:
4d:10:be:f2:48:a2:64:84:ba:5a:74:db:1b:ee:fa:
ff:b0:43:67:ae:ff:b2:83:3f:2e:ae:aa:9c:22:fc:
b8:c7:3c:19:1f:0e:9c:60:ee:61:d6:22:7e:7c:56:
30:11:7d:72:d5:16:d9:59:7a:1e:55:7a:c4:70:af:
8d:c5:78:af:1e:83:8c:ca:93:15:a9:e7:5f:f5:8b:
c3:1b:41:2c:e9:ea:81:d7:3e:78:1b:fa:3c:f3:4d:
9b:fb:bd:95:82:0b:dd:e3:ef:67:3a:0b:82:d0:32:
a3:bf:9e:1f:83:f9:a3:6f:26:84:3f:f4:bb:6c:e5:
51:2a:46:01:4e:72:93:77:47:27:fc:2c:0d:4b:df:
e8:1a:33:3c:2b:a5:61:79:6f:ca:aa:58:ae:f6:44:
ff:f6:9a:64:b9:ba:bb:91:c5:23:40:bc:19:11:fe:
d6:01:0d:56:90:4e:7a:a3:cf:d0:07:e0:2a:34:c4:
69:35:36:85:4b:9b:e1:b5:42:94:db:5c:66:6d:b3:
7f:91:4f:8d:32:90:cd:98:1f:91:04:24:d4:cf:c0:
00:50:19:d3:4e:b1:c2:63:1b:d6:8e:a7:3d:0d:8d:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B4:F1:FD:CB:A1:D0:5D:DA:C3:EB:10:D2:6A:78:09:8B:78:22:42
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/brTx_cuh0F3aw-sQ0mp4CYt4IkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:97::/48
2a0f:b241:99::/48
Signature Algorithm: sha256WithRSAEncryption
16:98:51:8d:6f:55:25:71:1e:5c:16:2a:a1:2d:f9:b0:c1:fb:
3d:eb:90:29:7e:07:69:bd:e7:c0:b7:3f:c2:26:ed:1f:ef:fe:
f7:22:24:86:77:fb:54:c7:34:c9:20:63:f2:99:65:18:29:11:
61:de:dd:cf:23:7e:97:2c:1b:e7:7c:db:2f:6f:45:89:62:79:
eb:2b:b8:f3:a2:f1:24:a7:2c:24:53:c1:2b:32:46:78:89:5e:
4f:f6:de:77:99:d8:5a:4b:9b:aa:09:06:6e:17:f5:67:d1:df:
bf:e2:17:51:63:22:fd:a0:1c:f4:c4:71:73:8d:a1:b9:71:5e:
93:ad:fc:d6:22:11:77:bc:25:24:29:d8:7d:32:e3:e0:dd:e7:
a1:cf:aa:26:92:d9:e6:4e:f1:30:94:d4:48:9f:c6:24:cb:c8:
50:c5:a7:94:c8:15:66:cd:6b:30:47:43:9d:c9:74:da:be:52:
42:57:7c:b2:bc:77:93:ac:d7:77:58:07:43:ba:d1:d5:3d:4b:
ff:a0:a1:a8:4b:db:dd:60:7f:b9:06:37:57:20:b2:46:f8:60:
39:eb:8b:70:b9:86:25:7d:23:1d:a0:09:6d:f8:22:74:09:50:
ad:b8:36:86:cc:f0:b5:44:87:95:4d:f3:6c:a9:40:2a:7d:e1:
7e:cc:cd:95
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY2B/s4RClzjStL7JzYr0Iz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUxNjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWI0ZjFmZGNiYTFkMDVkZGFjM2ViMTBkMjZhNzgwOThiNzgyMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsp49kQB5z+JTc8JO0VL7fNG/v9u
/zZ5E0Q/bx1NEL7ySKJkhLpadNsb7vr/sENnrv+ygz8urqqcIvy4xzwZHw6cYO5h
1iJ+fFYwEX1y1RbZWXoeVXrEcK+NxXivHoOMypMVqedf9YvDG0Es6eqB1z54G/o8
802b+72Vggvd4+9nOguC0DKjv54fg/mjbyaEP/S7bOVRKkYBTnKTd0cn/CwNS9/o
GjM8K6VheW/Kqliu9kT/9ppkubq7kcUjQLwZEf7WAQ1WkE56o8/QB+AqNMRpNTaF
S5vhtUKU21xmbbN/kU+NMpDNmB+RBCTUz8AAUBnTTrHCYxvWjqc9DY2XXQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG608f3LodBd2sPrENJqeAmLeCJCMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvYnJUeF9jdWgwRjNhdy1zUTBtcDRDWXQ0SWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+yQQCX
AwcAKg+yQQCZMA0GCSqGSIb3DQEBCwUAA4IBAQAWmFGNb1UlcR5cFiqhLfmwwfs9
65ApfgdpvefAtz/CJu0f7/73IiSGd/tUxzTJIGPymWUYKRFh3t3PI36XLBvnfNsv
b0WJYnnrK7jzovEkpywkU8ErMkZ4iV5P9t53mdhaS5uqCQZuF/Vn0d+/4hdRYyL9
oBz0xHFzjaG5cV6TrfzWIhF3vCUkKdh9MuPg3eehz6omktnmTvEwlNRIn8Yky8hQ
xaeUyBVmzWswR0OdyXTavlJCV3yyvHeTrNd3WAdDutHVPUv/oKGoS9vdYH+5BjdX
ILJG+GA564twuYYlfSMdoAlt+CJ0CVCtuDaGzPC1RIeVTfNsqUAqfeF+zM2V
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org