Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/g3EhPLFlpjafyhnArJREx2FkA_c.roa
File: g3EhPLFlpjafyhnArJREx2FkA_c.roa (raw, json)
Hash identifier: +ZKd/h9kXnSD1nyLej6VSH2yOpsNW7x6CvAUFI5G2is=
Subject key identifier: 83:71:21:3C:B1:65:A6:36:9F:CA:19:C0:AC:94:44:C7:61:64:03:F7
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8D7CF13E31C2BF1E896350C0748DF8
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/g3EhPLFlpjafyhnArJREx2FkA_c.roa
Signing time: Tue 06 Feb 2024 17:53:15 +0000
ROA not before: Tue 06 Feb 2024 17:53:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203044
IP address blocks: 2a0f:b241:1d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8d:7c:f1:3e:31:c2:bf:1e:89:63:50:c0:74:8d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:53:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8371213cb165a6369fca19c0ac9444c7616403f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:a2:0a:ee:9a:10:56:fb:5f:21:77:ca:d9:
af:4c:09:0f:32:c9:34:f9:dd:af:7f:51:8b:e4:c7:
9f:b0:77:46:2d:0f:78:a4:90:1f:db:68:da:79:81:
1a:41:34:12:c8:91:5e:14:b9:36:9f:9e:e1:8f:43:
2d:a9:84:04:1e:ba:a1:23:c4:14:6c:76:9c:89:8b:
8e:bf:3b:54:03:bf:ff:87:ea:14:78:97:81:6f:aa:
5d:f5:39:fd:ad:67:2a:6d:79:6d:54:33:bf:04:ec:
4e:41:6a:2b:b6:6f:1a:9f:74:b4:40:ef:89:f3:5b:
ae:e9:24:d3:8d:66:a7:47:9a:dd:32:66:81:4e:86:
7e:2e:7a:39:7d:0c:a7:0b:15:44:d1:e7:2b:cc:ba:
b6:67:b1:f8:8b:2b:30:cf:78:31:4c:f1:30:cb:32:
97:f6:30:29:d6:35:01:61:bc:3c:12:57:89:38:02:
8b:44:87:87:9a:c2:b6:89:0f:58:6d:1b:87:4e:c4:
4f:0c:b3:35:0b:83:24:a9:f2:e5:91:28:d0:f2:22:
0a:f6:ad:36:72:94:8a:e2:ab:fe:34:1d:0c:32:d6:
56:5f:a3:9a:dd:15:25:f6:2e:fc:8c:6e:2e:fa:c3:
e6:87:8e:c1:9c:d3:ac:d9:5c:55:66:04:fc:0c:2a:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:71:21:3C:B1:65:A6:36:9F:CA:19:C0:AC:94:44:C7:61:64:03:F7
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/g3EhPLFlpjafyhnArJREx2FkA_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:1d::/48
Signature Algorithm: sha256WithRSAEncryption
12:0e:79:9b:e1:18:11:7f:c7:a2:0c:6a:0f:63:10:e2:41:0c:
6f:3e:88:cf:61:b9:a6:aa:22:ee:89:16:89:cf:9b:16:cb:41:
87:ec:4b:f5:e1:40:5d:4e:a2:75:78:01:dd:c6:68:1d:e2:71:
ec:b0:66:ba:de:c3:80:22:bc:5b:25:57:77:d8:62:16:54:72:
69:a0:a6:4c:c0:92:06:e7:c5:87:34:86:7e:ae:64:3d:ec:66:
a7:52:d1:2f:63:09:68:1c:33:c0:46:97:9a:70:1b:b0:6a:0e:
6f:4f:64:35:25:75:56:10:21:97:1d:12:38:4a:5d:2c:fe:79:
50:d4:23:e3:f8:39:3b:55:f3:5d:c9:73:56:90:f4:e2:2c:61:
10:b8:58:e0:12:25:ea:fa:36:95:8c:05:3f:07:a9:7e:f2:ea:
be:7b:6a:c0:e6:0e:65:b8:76:f8:41:39:18:c4:9a:bb:a4:6e:
41:c3:be:e8:e5:9f:00:6f:06:3d:4f:1b:e8:43:10:73:fb:55:
12:d2:38:90:9f:ed:63:18:0a:3b:dc:a0:21:2d:8c:ca:fe:2f:
fc:b9:e2:9b:67:70:d5:e1:77:ce:70:4e:69:fc:64:70:04:ca:
4a:d8:ad:31:c6:e3:97:77:7c:da:1a:1d:38:69:08:ee:0e:4f:
70:14:33:09
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/jXzxPjHCvx6JY1DAdI34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTc1MzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzcxMjEzY2IxNjVhNjM2OWZjYTE5YzBhYzk0NDRjNzYxNjQwM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM6iCu6aEFb7XyF3ytmvTAkPMsk0
+d2vf1GL5MefsHdGLQ94pJAf22jaeYEaQTQSyJFeFLk2n57hj0MtqYQEHrqhI8QU
bHaciYuOvztUA7//h+oUeJeBb6pd9Tn9rWcqbXltVDO/BOxOQWortm8an3S0QO+J
81uu6STTjWanR5rdMmaBToZ+Lno5fQynCxVE0ecrzLq2Z7H4iyswz3gxTPEwyzKX
9jAp1jUBYbw8EleJOAKLRIeHmsK2iQ9YbRuHTsRPDLM1C4MkqfLlkSjQ8iIK9q02
cpSK4qv+NB0MMtZWX6Oa3RUl9i78jG4u+sPmh47BnNOs2VxVZgT8DCo/hwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFINxITyxZaY2n8oZwKyURMdhZAP3MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvZzNFaFBMRmxwamFmeWhuQXJKUkV4MkZrQV9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQAd
MA0GCSqGSIb3DQEBCwUAA4IBAQASDnmb4RgRf8eiDGoPYxDiQQxvPojPYbmmqiLu
iRaJz5sWy0GH7Ev14UBdTqJ1eAHdxmgd4nHssGa63sOAIrxbJVd32GIWVHJpoKZM
wJIG58WHNIZ+rmQ97GanUtEvYwloHDPARpeacBuwag5vT2Q1JXVWECGXHRI4Sl0s
/nlQ1CPj+Dk7VfNdyXNWkPTiLGEQuFjgEiXq+jaVjAU/B6l+8uq+e2rA5g5luHb4
QTkYxJq7pG5Bw77o5Z8AbwY9TxvoQxBz+1US0jiQn+1jGAo73KAhLYzK/i/8ueKb
Z3DV4XfOcE5p/GRwBMpK2K0xxuOXd3zaGh04aQjuDk9wFDMJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org