Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/erwH3hsVvqYlzkIRFiOyqigdfms.roa
File: erwH3hsVvqYlzkIRFiOyqigdfms.roa (raw, json)
Hash identifier: /DNZ2LsVFDBd5m3deEFPtKWd4+8+Au/oy3lOhxL2QzM=
Subject key identifier: 7A:BC:07:DE:1B:15:BE:A6:25:CE:42:11:16:23:B2:AA:28:1D:7E:6B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FABBB691F69454E9A8F21CAA9455668
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/erwH3hsVvqYlzkIRFiOyqigdfms.roa
Signing time: Tue 06 Feb 2024 18:26:17 +0000
ROA not before: Tue 06 Feb 2024 18:26:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206439
IP address blocks: 2a0f:b241:f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ab:bb:69:1f:69:45:4e:9a:8f:21:ca:a9:45:56:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:26:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7abc07de1b15bea625ce42111623b2aa281d7e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:12:ba:b5:23:bc:dd:ee:a1:0b:51:25:eb:
79:cb:d3:62:3d:cf:d6:e9:48:05:c8:20:c4:e8:51:
36:5a:1a:e9:b3:67:14:08:d5:79:6a:25:41:62:9b:
0e:41:41:52:be:d4:11:c6:06:d4:d3:60:af:b4:6b:
99:af:be:3c:35:17:e7:67:2d:c6:5d:f5:c3:d3:f2:
66:b6:e2:bd:4a:43:9a:42:f9:0e:83:ff:2c:67:fd:
4e:da:b4:4d:bd:fd:ba:5a:8f:c9:93:04:2d:cb:39:
81:9b:39:31:b9:af:9c:9d:ea:f6:3c:b8:82:b6:b2:
f0:76:56:df:69:c5:fc:e3:6a:b7:18:f2:a6:63:c4:
3c:14:3c:8f:83:71:07:a2:9c:ea:1f:00:61:a6:89:
da:25:cf:93:b3:db:91:b0:61:2d:91:87:03:85:23:
c5:3d:ee:8e:1c:0d:b2:6e:47:b2:67:d4:d0:c9:34:
1e:4e:18:54:81:57:2d:8a:d9:0e:27:07:c6:da:43:
7c:93:4c:f1:0a:e4:45:6b:98:fe:00:e6:17:f0:03:
a7:31:e8:97:78:ab:ba:71:be:9d:8c:3b:31:41:82:
fe:f5:2c:a6:21:83:33:9f:db:e9:6f:c7:5d:83:ac:
c9:4a:bf:5d:df:c5:49:6b:36:5f:e1:39:45:ad:f9:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BC:07:DE:1B:15:BE:A6:25:CE:42:11:16:23:B2:AA:28:1D:7E:6B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/erwH3hsVvqYlzkIRFiOyqigdfms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:f0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:c3:ba:55:b3:7b:df:41:8b:43:31:b2:d7:14:c4:e5:9a:d2:
b4:12:18:bc:21:68:53:73:91:35:18:2b:8d:7b:00:7c:05:5d:
bc:c4:91:d6:cd:34:d5:b2:ad:5d:2a:9f:e8:d3:68:e0:31:e8:
85:13:65:f1:70:a1:94:64:fd:9f:04:5e:fd:c6:11:83:f5:60:
d2:c0:e5:e9:d2:9d:dc:67:db:81:62:00:79:0b:f3:bc:68:de:
9d:d1:0c:da:3f:46:41:75:da:3f:ef:ba:c9:5a:4a:92:21:d6:
2b:c8:c0:2e:de:32:d3:7b:90:4c:66:79:ec:fc:90:02:8f:b1:
9f:14:4c:10:25:39:36:4a:41:58:ad:d9:98:f2:00:15:c6:84:
a1:62:b0:6b:18:31:3f:97:a3:8e:22:90:94:df:ca:c9:e1:d4:
92:3b:e1:cf:ce:8b:22:72:54:c1:59:28:e3:c0:1b:a7:f6:11:
e0:02:c3:bf:a0:2e:41:d3:a8:88:40:68:de:d0:e0:01:44:66:
95:20:09:dc:c9:f8:3f:42:f1:a7:75:f9:01:63:79:dd:cd:9f:
6f:75:24:4a:a9:37:00:87:e6:4a:df:65:b5:f6:55:f5:a7:7c:
a3:4b:55:b6:64:98:c4:ce:16:de:36:71:a3:1e:d7:01:c6:18:
8b:13:74:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/q7tpH2lFTpqPIcqpRVZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWJjMDdkZTFiMTViZWE2MjVjZTQyMTExNjIzYjJhYTI4MWQ3ZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt8SurUjvN3uoQtRJet5y9NiPc/W
6UgFyCDE6FE2Whrps2cUCNV5aiVBYpsOQUFSvtQRxgbU02CvtGuZr748NRfnZy3G
XfXD0/JmtuK9SkOaQvkOg/8sZ/1O2rRNvf26Wo/JkwQtyzmBmzkxua+cner2PLiC
trLwdlbfacX842q3GPKmY8Q8FDyPg3EHopzqHwBhponaJc+Ts9uRsGEtkYcDhSPF
Pe6OHA2ybkeyZ9TQyTQeThhUgVctitkOJwfG2kN8k0zxCuRFa5j+AOYX8AOnMeiX
eKu6cb6djDsxQYL+9SymIYMzn9vpb8ddg6zJSr9d38VJazZf4TlFrfmzYwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHq8B94bFb6mJc5CERYjsqooHX5rMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvZXJ3SDNoc1Z2cVlsemtJUkZpT3lxaWdkZm1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDw
MA0GCSqGSIb3DQEBCwUAA4IBAQB+w7pVs3vfQYtDMbLXFMTlmtK0Ehi8IWhTc5E1
GCuNewB8BV28xJHWzTTVsq1dKp/o02jgMeiFE2XxcKGUZP2fBF79xhGD9WDSwOXp
0p3cZ9uBYgB5C/O8aN6d0QzaP0ZBddo/77rJWkqSIdYryMAu3jLTe5BMZnns/JAC
j7GfFEwQJTk2SkFYrdmY8gAVxoShYrBrGDE/l6OOIpCU38rJ4dSSO+HPzosiclTB
WSjjwBun9hHgAsO/oC5B06iIQGje0OABRGaVIAncyfg/QvGndfkBY3ndzZ9vdSRK
qTcAh+ZK32W19lX1p3yjS1W2ZJjEzhbeNnGjHtcBxhiLE3Qg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org