Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/j2_yqDfIVsWVaOS7F-92gNQtCQU.roa
File: j2_yqDfIVsWVaOS7F-92gNQtCQU.roa (raw, json)
Hash identifier: 5SN9lDzQP99773LvZfQRLuSQ/DBN6SNIAdXRM7uCA7o=
Subject key identifier: 8F:6F:F2:A8:37:C8:56:C5:95:68:E4:BB:17:EF:76:80:D4:2D:09:05
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA636D85AE1730A64B10C7CBCD5F63E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/j2_yqDfIVsWVaOS7F-92gNQtCQU.roa
Signing time: Tue 06 Feb 2024 18:20:15 +0000
ROA not before: Tue 06 Feb 2024 18:20:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197841
IP address blocks: 2a0f:b241:73::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a6:36:d8:5a:e1:73:0a:64:b1:0c:7c:bc:d5:f6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:20:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f6ff2a837c856c59568e4bb17ef7680d42d0905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:6e:5c:67:01:34:aa:59:48:97:39:98:62:
b7:0f:c2:30:47:9e:84:5f:f3:38:5d:58:b6:e4:7d:
6d:3f:50:a5:f8:ee:0e:33:d1:b1:01:cf:7b:c0:81:
ee:69:2b:ae:46:d1:24:3b:b1:70:16:8a:2c:a9:fc:
ba:20:43:1c:32:3b:ae:69:f0:c6:6c:2e:eb:64:d4:
43:bb:e7:c7:09:5c:b6:6d:73:94:84:2b:cd:f9:34:
21:e4:3c:98:ff:23:e8:51:ca:01:47:ba:36:fa:8c:
c9:d5:6b:08:18:0c:c9:47:f1:45:15:b3:18:a0:32:
eb:14:82:ca:ac:9a:98:71:c1:18:b9:d8:75:fe:2c:
a6:41:f2:87:e1:d2:54:35:4b:c5:05:c6:76:4a:62:
27:a5:28:c9:72:b9:d1:f5:98:27:7a:3b:76:37:f6:
15:ed:99:c7:56:98:41:34:9f:52:b8:84:ed:57:c4:
d4:b6:37:3a:03:f5:c7:28:49:db:ac:52:c5:f3:c6:
c2:1e:81:0f:72:c4:9d:80:54:f4:72:c6:8d:21:e4:
16:8d:29:e2:43:67:a8:9c:c3:1b:bd:a4:3c:1c:25:
8b:78:90:43:9f:29:2b:25:ba:46:82:bc:aa:bb:2a:
c4:79:c4:7e:c7:5a:5e:64:a1:08:08:ac:21:e5:6a:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:F2:A8:37:C8:56:C5:95:68:E4:BB:17:EF:76:80:D4:2D:09:05
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/j2_yqDfIVsWVaOS7F-92gNQtCQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:73::/48
Signature Algorithm: sha256WithRSAEncryption
21:8f:5a:27:8f:b2:a6:23:e7:12:83:c3:8c:0d:a2:e5:dc:cf:
18:32:8f:11:06:3d:d4:c7:d5:a5:2c:b3:b6:4a:b0:e0:59:74:
15:8e:b2:32:07:a5:bb:f2:17:1e:7f:d5:54:37:aa:ac:24:d1:
40:54:f6:82:77:9e:d1:66:db:4a:68:4e:21:8a:e0:e4:36:b1:
ca:8c:b6:d7:ee:09:5b:14:2b:f4:2f:5a:26:79:37:47:b0:2f:
da:a1:fb:47:78:17:fd:b7:c0:31:2a:1b:3b:88:46:26:1e:9f:
e3:56:ec:ee:5d:a9:30:47:b4:a3:45:52:78:c1:ef:5a:12:4b:
8b:af:c6:b9:68:e2:6c:fb:ce:99:af:a4:ee:cb:e1:af:5c:9e:
c5:0c:51:d8:e2:93:d1:a0:32:0a:3e:22:5e:5d:55:67:7b:b2:
40:9b:05:5e:cb:03:97:96:b4:4b:1d:13:d4:b7:30:cf:5e:13:
a2:10:ce:fd:03:88:dc:a9:8a:15:dc:bc:de:34:78:ac:97:67:
46:1d:5f:28:01:1e:d2:0a:d1:52:e3:cc:ad:21:3c:b8:8e:63:
a7:b4:78:61:67:10:e1:1e:75:9c:e2:7f:31:b5:84:16:cb:85:
9f:3d:c6:68:26:6c:ba:2c:96:e8:d9:8b:1d:60:81:5d:bd:80:
13:74:ec:72
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/pjbYWuFzCmSxDHy81fY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjZmZjJhODM3Yzg1NmM1OTU2OGU0YmIxN2VmNzY4MGQ0MmQwOTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCJuXGcBNKpZSJc5mGK3D8IwR56E
X/M4XVi25H1tP1Cl+O4OM9GxAc97wIHuaSuuRtEkO7FwFoosqfy6IEMcMjuuafDG
bC7rZNRDu+fHCVy2bXOUhCvN+TQh5DyY/yPoUcoBR7o2+ozJ1WsIGAzJR/FFFbMY
oDLrFILKrJqYccEYudh1/iymQfKH4dJUNUvFBcZ2SmInpSjJcrnR9Zgnejt2N/YV
7ZnHVphBNJ9SuITtV8TUtjc6A/XHKEnbrFLF88bCHoEPcsSdgFT0csaNIeQWjSni
Q2eonMMbvaQ8HCWLeJBDnykrJbpGgryquyrEecR+x1peZKEICKwh5WorvwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI9v8qg3yFbFlWjkuxfvdoDULQkFMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvajJfeXFEZklWc1dWYU9TN0YtOTJnTlF0Q1FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQBz
MA0GCSqGSIb3DQEBCwUAA4IBAQAhj1onj7KmI+cSg8OMDaLl3M8YMo8RBj3Ux9Wl
LLO2SrDgWXQVjrIyB6W78hcef9VUN6qsJNFAVPaCd57RZttKaE4hiuDkNrHKjLbX
7glbFCv0L1omeTdHsC/aoftHeBf9t8AxKhs7iEYmHp/jVuzuXakwR7SjRVJ4we9a
EkuLr8a5aOJs+86Zr6Tuy+GvXJ7FDFHY4pPRoDIKPiJeXVVne7JAmwVeywOXlrRL
HRPUtzDPXhOiEM79A4jcqYoV3LzeNHisl2dGHV8oAR7SCtFS48ytITy4jmOntHhh
ZxDhHnWc4n8xtYQWy4WfPcZoJmy6LJbo2YsdYIFdvYATdOxy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org