Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dwr2nV472PqayAHrIZQHXrBSL9M.roa
File: dwr2nV472PqayAHrIZQHXrBSL9M.roa (raw, json)
Hash identifier: AgoslmzFmSF4BKUR9sN8twDX/Saj+QRD+l2chOncTpQ=
Subject key identifier: 77:0A:F6:9D:5E:3B:D8:FA:9A:C8:01:EB:21:94:07:5E:B0:52:2F:D3
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F93A80D354DDEFB38FD85405928E978
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dwr2nV472PqayAHrIZQHXrBSL9M.roa
Signing time: Tue 06 Feb 2024 17:59:59 +0000
ROA not before: Tue 06 Feb 2024 17:59:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216425
IP address blocks: 2a0f:b241:2d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:93:a8:0d:35:4d:de:fb:38:fd:85:40:59:28:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:59:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=770af69d5e3bd8fa9ac801eb2194075eb0522fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:70:80:f3:0c:fc:29:11:a8:64:89:2b:04:
05:dd:72:fc:28:72:51:05:d7:e6:32:a0:0c:21:96:
58:3d:5b:36:6f:4c:ab:d7:9e:78:9a:ac:60:75:17:
f1:3e:cf:61:40:8b:b9:a6:35:e2:c5:bf:78:e0:f8:
fe:65:5e:7d:f9:e8:e5:68:9f:e3:ce:e4:3b:72:a6:
5f:01:e6:f3:da:9d:bf:d8:8e:b8:bb:4b:ed:64:33:
d8:97:ee:0c:c0:61:7b:12:0d:aa:a3:cd:e4:b4:87:
14:1c:92:a9:1a:ae:c4:90:53:ae:7a:7d:dc:68:04:
15:59:12:0e:bf:b0:fa:88:c9:ee:5e:2f:cb:43:89:
67:cf:dd:0f:01:14:f8:ad:5f:39:e0:a6:c5:35:0c:
ba:3f:8f:4a:2d:57:05:86:0e:34:1c:94:47:30:8e:
2d:de:9d:3e:c0:66:fd:2e:ec:e4:55:32:8e:a6:ea:
28:7a:fe:0f:36:cc:95:80:de:3b:ff:bc:7c:6d:07:
7b:67:7b:a0:0f:f7:9a:3b:ca:7d:39:36:ab:7b:40:
f8:4f:ea:03:a8:e4:9f:5e:ba:a7:5f:45:7e:19:a3:
a4:80:2d:e1:ea:d8:de:df:02:65:90:36:e8:44:8b:
40:0a:cc:56:7c:63:27:93:5d:6b:63:9a:63:c9:ef:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0A:F6:9D:5E:3B:D8:FA:9A:C8:01:EB:21:94:07:5E:B0:52:2F:D3
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dwr2nV472PqayAHrIZQHXrBSL9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:2d::/48
Signature Algorithm: sha256WithRSAEncryption
13:21:fc:96:38:74:04:4b:ed:7b:94:c3:bf:01:48:79:97:22:
be:b4:c3:13:e6:97:b9:61:07:eb:1d:94:41:d6:be:61:83:4e:
e0:b8:57:a5:ca:4d:51:dd:94:fe:0c:7b:69:2b:b8:9e:4b:8c:
8a:35:8a:83:d1:e1:c4:04:ef:9e:a1:90:dc:4d:63:6b:71:f2:
98:56:2c:9b:e5:87:ee:2f:11:a9:af:07:c9:29:0b:54:68:73:
cc:7a:c0:0e:bf:6d:cc:4b:9a:a3:47:f1:05:5f:5e:c3:8d:66:
b2:e5:77:6a:07:7c:4a:6e:a6:54:2d:9e:58:8a:46:13:eb:2a:
8a:a4:cb:a2:e3:4b:bc:7c:0a:31:0c:c2:a3:4b:0a:63:79:62:
44:55:11:35:28:e0:d5:85:2e:80:da:ed:9f:82:fe:12:7f:2a:
3d:a8:4e:5d:e2:f6:b4:72:2d:b7:41:e5:49:d8:58:b6:f9:b5:
0c:4b:18:c4:33:10:89:50:42:0e:87:38:91:04:1a:bd:f6:be:
0a:c9:0c:95:cd:98:21:e6:3b:81:59:31:03:42:c5:73:29:b1:
93:1b:91:fb:5b:d0:6a:b8:1e:e0:d4:47:a2:1e:77:aa:c9:a6:
3f:d4:a1:f1:36:f4:88:fd:75:a1:f7:92:96:91:61:0f:32:19:
26:4a:4c:64
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/k6gNNU3e+zj9hUBZKOl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTc1OTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzBhZjY5ZDVlM2JkOGZhOWFjODAxZWIyMTk0MDc1ZWIwNTIyZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkZwgPMM/CkRqGSJKwQF3XL8KHJR
BdfmMqAMIZZYPVs2b0yr1554mqxgdRfxPs9hQIu5pjXixb944Pj+ZV59+ejlaJ/j
zuQ7cqZfAebz2p2/2I64u0vtZDPYl+4MwGF7Eg2qo83ktIcUHJKpGq7EkFOuen3c
aAQVWRIOv7D6iMnuXi/LQ4lnz90PART4rV854KbFNQy6P49KLVcFhg40HJRHMI4t
3p0+wGb9LuzkVTKOpuooev4PNsyVgN47/7x8bQd7Z3ugD/eaO8p9OTare0D4T+oD
qOSfXrqnX0V+GaOkgC3h6tje3wJlkDboRItACsxWfGMnk11rY5pjye812QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHcK9p1eO9j6msgB6yGUB16wUi/TMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvZHdyMm5WNDcyUHFheUFIcklaUUhYckJTTDlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQAt
MA0GCSqGSIb3DQEBCwUAA4IBAQATIfyWOHQES+17lMO/AUh5lyK+tMMT5pe5YQfr
HZRB1r5hg07guFelyk1R3ZT+DHtpK7ieS4yKNYqD0eHEBO+eoZDcTWNrcfKYViyb
5YfuLxGprwfJKQtUaHPMesAOv23MS5qjR/EFX17DjWay5XdqB3xKbqZULZ5YikYT
6yqKpMui40u8fAoxDMKjSwpjeWJEVRE1KODVhS6A2u2fgv4Sfyo9qE5d4va0ci23
QeVJ2Fi2+bUMSxjEMxCJUEIOhziRBBq99r4KyQyVzZgh5juBWTEDQsVzKbGTG5H7
W9BquB7g1EeiHneqyaY/1KHxNvSI/XWh95KWkWEPMhkmSkxk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org