Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/fBK6VKpoJTVHprc20FGSfdBM8Cc.roa
File: fBK6VKpoJTVHprc20FGSfdBM8Cc.roa (raw, json)
Hash identifier: mN9+lBn4nVw48hDgHePliw5atp9UZCJfHA76baqkG/8=
Subject key identifier: 7C:12:BA:54:AA:68:25:35:47:A6:B7:36:D0:51:92:7D:D0:4C:F0:27
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0B4E1BD2BC9BCD329F15A7FD7EEC8
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/fBK6VKpoJTVHprc20FGSfdBM8Cc.roa
Signing time: Wed 07 Feb 2024 05:00:52 +0000
ROA not before: Wed 07 Feb 2024 05:00:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215731
IP address blocks: 2a0f:b241:52::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:b4:e1:bd:2b:c9:bc:d3:29:f1:5a:7f:d7:ee:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c12ba54aa68253547a6b736d051927dd04cf027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:42:b8:16:f8:d1:b8:b5:e3:a1:3a:ab:c8:
af:4e:c6:11:9f:98:00:8f:92:cd:97:fa:30:f2:a1:
ba:dc:6d:c1:47:e3:32:c9:af:73:46:32:98:6d:d4:
3f:0a:c8:4e:fa:88:d1:4b:c2:16:26:f3:e0:08:6f:
81:9b:28:41:82:3e:77:d3:70:04:33:b9:8a:90:a6:
eb:7c:6c:71:75:bd:0a:04:24:2e:aa:01:77:bc:a3:
87:b1:aa:bc:ae:a8:82:5e:b8:9b:70:f8:38:17:0c:
cb:39:2b:97:ae:69:4d:3e:67:6a:ad:ae:bc:07:1e:
f6:e7:e2:fc:59:5d:78:72:c3:0b:d0:94:23:d8:aa:
eb:0e:50:9f:77:79:f0:31:a5:28:42:cd:3a:8a:96:
e6:00:43:87:5e:43:84:ec:02:7f:cb:03:4a:ca:eb:
c0:25:7c:be:32:0c:4b:4c:04:f0:53:96:06:f8:b9:
de:71:d5:97:35:2d:3c:5c:32:4a:34:79:3f:fb:86:
a5:0f:02:71:71:a3:8c:9c:99:a0:13:69:1f:db:76:
78:7b:bd:00:63:db:73:6e:31:ea:4d:cf:75:cc:66:
b5:25:63:ba:1c:87:90:2d:42:c6:05:54:8a:58:37:
56:76:2a:6c:cd:76:d9:9b:4c:1b:03:d8:fa:25:55:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:12:BA:54:AA:68:25:35:47:A6:B7:36:D0:51:92:7D:D0:4C:F0:27
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/fBK6VKpoJTVHprc20FGSfdBM8Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:52::/48
Signature Algorithm: sha256WithRSAEncryption
05:70:6a:6f:ce:00:53:cc:b7:9d:c7:c7:42:3f:67:5a:45:8a:
7a:c4:05:b9:bf:f0:fb:1f:17:9a:eb:97:31:ae:58:0b:9b:2b:
77:59:9e:01:b1:c6:06:de:ff:aa:81:f2:f4:38:89:0e:f7:11:
67:ea:ec:81:5b:31:ea:2c:a3:b4:ca:0e:3f:92:03:db:a6:24:
bd:c3:c1:22:d5:48:0c:8a:be:49:14:6a:d1:7a:fa:dd:f1:47:
f2:76:51:15:f3:f0:d9:35:61:a4:cc:ba:e6:f7:a1:c2:68:c9:
d7:5e:28:39:8f:a6:89:53:10:3a:cd:4e:ef:ad:6c:a8:21:67:
2c:77:45:49:ae:b8:a6:89:35:aa:8a:3e:1c:de:3e:3c:8c:c1:
5e:3f:12:b7:4c:5f:63:87:c3:a2:a5:0f:2c:32:1f:5a:61:61:
0f:1b:32:58:77:49:00:51:3d:36:64:ba:1c:fc:45:80:d2:dd:
c9:98:17:cc:a3:3d:74:97:85:f9:57:9f:0a:3c:74:72:68:dd:
11:b6:7b:e3:44:a6:64:2d:dd:27:b4:a0:2b:fe:6c:4c:b2:50:
de:c3:bb:f8:26:27:96:3b:19:bb:5d:39:b0:9d:84:7e:03:ea:
19:0c:0c:b3:ac:37:9b:90:ae:ef:3a:4f:b4:8b:bc:88:79:44:
72:a8:eb:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2B8LThvSvJvNMp8Vp/1+7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUwMDUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzEyYmE1NGFhNjgyNTM1NDdhNmI3MzZkMDUxOTI3ZGQwNGNmMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm5CuBb40bi146E6q8ivTsYRn5gA
j5LNl/ow8qG63G3BR+Myya9zRjKYbdQ/CshO+ojRS8IWJvPgCG+BmyhBgj5303AE
M7mKkKbrfGxxdb0KBCQuqgF3vKOHsaq8rqiCXribcPg4FwzLOSuXrmlNPmdqra68
Bx725+L8WV14csML0JQj2KrrDlCfd3nwMaUoQs06ipbmAEOHXkOE7AJ/ywNKyuvA
JXy+MgxLTATwU5YG+LnecdWXNS08XDJKNHk/+4alDwJxcaOMnJmgE2kf23Z4e70A
Y9tzbjHqTc91zGa1JWO6HIeQLULGBVSKWDdWdipszXbZm0wbA9j6JVXOkQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHwSulSqaCU1R6a3NtBRkn3QTPAnMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvZkJLNlZLcG9KVFZIcHJjMjBGR1NmZEJNOENjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQBS
MA0GCSqGSIb3DQEBCwUAA4IBAQAFcGpvzgBTzLedx8dCP2daRYp6xAW5v/D7Hxea
65cxrlgLmyt3WZ4BscYG3v+qgfL0OIkO9xFn6uyBWzHqLKO0yg4/kgPbpiS9w8Ei
1UgMir5JFGrRevrd8UfydlEV8/DZNWGkzLrm96HCaMnXXig5j6aJUxA6zU7vrWyo
IWcsd0VJrrimiTWqij4c3j48jMFePxK3TF9jh8OipQ8sMh9aYWEPGzJYd0kAUT02
ZLoc/EWA0t3JmBfMoz10l4X5V58KPHRyaN0RtnvjRKZkLd0ntKAr/mxMslDew7v4
JieWOxm7XTmwnYR+A+oZDAyzrDebkK7vOk+0i7yIeURyqOvQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org