Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dDGMgmQ6--KmUS422PsIWmUBOXw.roa
File: dDGMgmQ6--KmUS422PsIWmUBOXw.roa (raw, json)
Hash identifier: PY4TWDmbrDsO1OfkbeKMN8BVMLBaRxlzH/zcow9b7No=
Subject key identifier: 74:31:8C:82:64:3A:FB:E2:A6:51:2E:36:D8:FB:08:5A:65:01:39:7C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB88A0069436FBF8B105296ABE81349
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dDGMgmQ6--KmUS422PsIWmUBOXw.roa
Signing time: Tue 06 Feb 2024 18:40:16 +0000
ROA not before: Tue 06 Feb 2024 18:40:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213385
IP address blocks: 2a0f:b241:14c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b8:8a:00:69:43:6f:bf:8b:10:52:96:ab:e8:13:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:40:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74318c82643afbe2a6512e36d8fb085a6501397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:8e:e6:8d:10:b0:85:c6:e4:7a:6e:3c:eb:
81:3b:c9:c9:d1:12:d3:ec:b1:e6:37:85:2d:01:45:
05:ad:01:05:16:b9:0b:81:1f:41:7f:a0:01:ce:ca:
0e:5c:ea:66:e1:33:e1:ea:89:4c:c5:c2:ff:9a:0a:
b8:73:b9:b2:60:33:92:4e:11:b9:70:74:fe:32:e8:
a1:5c:09:42:db:a6:ae:47:07:2b:60:d2:05:a0:63:
27:d5:f2:40:31:69:34:73:42:76:3b:39:6f:c2:c2:
12:0e:8f:29:5a:c4:ad:51:32:bd:8b:56:d6:47:e7:
27:4c:02:0c:fc:f3:a6:91:13:a3:c8:ac:17:a4:eb:
55:a9:df:22:34:82:0d:f1:da:e0:62:1a:f3:71:d2:
5d:85:51:02:31:84:d7:54:b7:70:2d:cc:0c:f7:45:
09:9b:1a:e5:13:0f:5e:f6:37:5a:af:fb:a3:0a:ce:
05:6d:a0:79:86:12:f2:b5:d9:94:d4:94:ab:d6:d2:
d0:3a:19:f2:64:bc:19:6f:e0:ab:4d:70:88:26:46:
63:d7:9e:d7:b4:b8:a4:3f:ac:ee:0e:6f:f6:8b:06:
c9:18:12:2b:98:58:84:73:0b:ba:8c:e0:8c:96:b8:
8f:07:2e:c1:45:f4:04:f5:85:4b:59:fe:04:b2:c4:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:8C:82:64:3A:FB:E2:A6:51:2E:36:D8:FB:08:5A:65:01:39:7C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dDGMgmQ6--KmUS422PsIWmUBOXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:14c::/48
Signature Algorithm: sha256WithRSAEncryption
32:5e:6a:c3:2a:54:b0:7f:ca:3c:18:fc:d8:e7:d8:8f:8d:ca:
31:95:15:a0:5d:d8:f4:98:b9:b1:12:3a:67:c5:12:67:52:46:
4c:19:a0:9c:4c:56:cd:03:07:67:eb:65:77:7c:4d:d5:8c:10:
3a:e7:24:49:fc:64:aa:a0:95:ec:6d:3b:28:e3:49:52:f0:a4:
a9:c5:f8:2e:72:b6:f8:52:1b:35:27:f3:36:be:33:f9:23:f9:
f1:00:e7:fa:40:49:4f:ee:5d:df:09:d8:cb:0c:11:55:0a:40:
08:c6:20:a2:6e:76:ad:c5:3e:9d:06:bf:52:9f:17:95:83:6c:
21:1b:28:f1:d8:9b:a1:86:e9:62:51:a9:12:e3:a1:a5:51:54:
ac:79:ee:5e:6f:0a:76:6f:fb:7e:03:0c:db:16:7d:33:c5:17:
aa:27:6e:24:9c:e7:fc:66:27:0b:9a:cd:c1:ec:ea:85:7c:f6:
66:c9:a5:b6:bd:83:aa:a1:1c:16:00:54:e4:c7:fa:be:2c:56:
81:d1:57:15:87:66:a9:ff:b4:6f:aa:29:52:c9:92:a4:54:c6:
bd:63:30:06:78:b0:3d:98:3b:e8:dd:38:84:72:21:37:57:be:
0d:b6:2a:2d:c0:66:4c:38:1b:d3:c2:8f:e9:c7:b6:6e:39:bc:
ac:8d:71:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/uIoAaUNvv4sQUpar6BNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTg0MDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDMxOGM4MjY0M2FmYmUyYTY1MTJlMzZkOGZiMDg1YTY1MDEzOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyGO5o0QsIXG5HpuPOuBO8nJ0RLT
7LHmN4UtAUUFrQEFFrkLgR9Bf6ABzsoOXOpm4TPh6olMxcL/mgq4c7myYDOSThG5
cHT+MuihXAlC26auRwcrYNIFoGMn1fJAMWk0c0J2OzlvwsISDo8pWsStUTK9i1bW
R+cnTAIM/POmkROjyKwXpOtVqd8iNIIN8drgYhrzcdJdhVECMYTXVLdwLcwM90UJ
mxrlEw9e9jdar/ujCs4FbaB5hhLytdmU1JSr1tLQOhnyZLwZb+CrTXCIJkZj157X
tLikP6zuDm/2iwbJGBIrmFiEcwu6jOCMlriPBy7BRfQE9YVLWf4EssRRdwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHQxjIJkOvviplEuNtj7CFplATl8MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvZERHTWdtUTYtLUttVVM0MjJQc0lXbVVCT1h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQFM
MA0GCSqGSIb3DQEBCwUAA4IBAQAyXmrDKlSwf8o8GPzY59iPjcoxlRWgXdj0mLmx
EjpnxRJnUkZMGaCcTFbNAwdn62V3fE3VjBA65yRJ/GSqoJXsbTso40lS8KSpxfgu
crb4Uhs1J/M2vjP5I/nxAOf6QElP7l3fCdjLDBFVCkAIxiCibnatxT6dBr9SnxeV
g2whGyjx2JuhhuliUakS46GlUVSsee5ebwp2b/t+AwzbFn0zxReqJ24knOf8ZicL
ms3B7OqFfPZmyaW2vYOqoRwWAFTkx/q+LFaB0VcVh2ap/7RvqilSyZKkVMa9YzAG
eLA9mDvo3TiEciE3V74NtiotwGZMOBvTwo/px7ZuObysjXF0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org