Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lDlKtB5S3PyX5Yuh284pud6HBNE.roa
File: lDlKtB5S3PyX5Yuh284pud6HBNE.roa (raw, json)
Hash identifier: CuXi5kOsJ903aKuwoY3j0pl1J4qMzTwS3vTo6iyyFoU=
Subject key identifier: 94:39:4A:B4:1E:52:DC:FC:97:E5:8B:A1:DB:CE:29:B9:DE:87:04:D1
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F949545F63A6B0E85A6F5B06A3C76FF
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lDlKtB5S3PyX5Yuh284pud6HBNE.roa
Signing time: Tue 06 Feb 2024 18:01:00 +0000
ROA not before: Tue 06 Feb 2024 18:01:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205163
IP address blocks: 2a0f:b241:39::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:94:95:45:f6:3a:6b:0e:85:a6:f5:b0:6a:3c:76:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:01:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94394ab41e52dcfc97e58ba1dbce29b9de8704d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:71:38:c1:16:27:85:ac:5b:5a:2f:a0:bb:86:
0c:67:76:2d:de:ec:1f:2e:e5:5d:8c:b0:24:ac:29:
88:6c:05:ed:d5:80:7e:c0:74:a1:b4:8b:2d:0f:5a:
12:fb:1a:28:19:a8:cc:43:53:c7:ac:87:1d:05:d7:
72:f7:a0:60:b5:02:91:57:dc:d9:a4:bc:f7:fa:91:
68:a7:b9:24:8d:62:f7:17:4e:c2:4f:e4:f4:23:a9:
5b:c1:08:ae:0f:6b:50:54:ac:4d:ea:4b:86:71:0b:
f6:06:f3:56:5d:6f:fd:d2:6b:f3:94:f5:79:55:62:
fd:3c:57:f3:52:2a:4a:57:5b:df:2f:13:1e:22:15:
01:15:04:1a:9a:e1:9d:f4:3a:f9:ba:4b:95:09:72:
96:40:b2:cd:5c:30:f9:de:ca:b2:38:6f:25:1e:dd:
03:25:e9:0b:62:00:d9:ab:a4:36:33:2b:90:a4:7e:
65:bf:37:f3:4e:b0:35:a2:ea:3e:38:ef:71:55:ed:
92:73:23:56:66:7e:ba:d2:8a:09:cf:fa:83:aa:cb:
c8:78:a7:f8:95:fb:28:f7:19:43:45:5f:64:00:52:
04:5c:e9:af:a9:92:9b:52:f6:2c:63:8a:82:2e:60:
6e:e6:64:28:d1:a0:19:f5:8d:0f:df:ec:8c:a6:ba:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:39:4A:B4:1E:52:DC:FC:97:E5:8B:A1:DB:CE:29:B9:DE:87:04:D1
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lDlKtB5S3PyX5Yuh284pud6HBNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:39::/48
Signature Algorithm: sha256WithRSAEncryption
48:fb:fa:0f:81:81:31:61:dd:23:2b:85:b3:4b:6a:83:85:35:
06:65:86:ff:0b:c0:8c:aa:47:58:63:5e:5d:fa:52:73:b5:bc:
4e:11:b2:b9:27:ce:6a:87:a8:7b:1d:bf:cd:ae:dd:94:fd:59:
57:9d:47:ae:32:3f:65:70:6e:00:c6:9c:40:d0:3e:24:5f:ec:
bc:4f:29:c5:b3:0b:ab:ad:8b:43:dc:48:17:25:d8:a5:dc:1c:
e6:93:15:03:c7:82:aa:9e:aa:0c:04:ae:73:6f:6e:36:2f:66:
1e:ab:18:26:8d:e6:11:1b:96:52:ec:8d:c3:9a:50:fc:d3:2e:
5f:bd:69:02:49:0d:e4:8d:2b:18:6b:68:50:aa:53:26:a1:89:
c8:37:ca:90:c1:17:0e:48:58:ba:9e:9c:1f:06:fb:ff:7b:da:
ac:eb:9f:d7:a7:42:b7:34:54:4a:49:e8:d3:6a:4e:10:22:ca:
8a:2a:11:16:bd:33:77:eb:39:ff:93:79:05:3d:95:b8:78:fe:
8d:2d:f0:e0:c1:51:53:7f:4e:fb:46:ed:1c:ad:e0:3d:7a:ce:
87:de:03:ca:4e:2a:bc:0a:1a:3f:fd:e9:1a:dd:7e:67:ea:95:
ed:52:57:1d:c3:dd:57:fe:15:04:35:8f:47:a8:21:3b:74:68:
e5:18:6c:f5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/lJVF9jprDoWm9bBqPHb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDM5NGFiNDFlNTJkY2ZjOTdlNThiYTFkYmNlMjliOWRlODcwNGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHE4wRYnhaxbWi+gu4YMZ3Yt3uwf
LuVdjLAkrCmIbAXt1YB+wHShtIstD1oS+xooGajMQ1PHrIcdBddy96BgtQKRV9zZ
pLz3+pFop7kkjWL3F07CT+T0I6lbwQiuD2tQVKxN6kuGcQv2BvNWXW/90mvzlPV5
VWL9PFfzUipKV1vfLxMeIhUBFQQamuGd9Dr5ukuVCXKWQLLNXDD53sqyOG8lHt0D
JekLYgDZq6Q2MyuQpH5lvzfzTrA1ouo+OO9xVe2ScyNWZn660ooJz/qDqsvIeKf4
lfso9xlDRV9kAFIEXOmvqZKbUvYsY4qCLmBu5mQo0aAZ9Y0P3+yMproz7QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJQ5SrQeUtz8l+WLodvOKbnehwTRMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvbERsS3RCNVMzUHlYNVl1aDI4NHB1ZDZIQk5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQA5
MA0GCSqGSIb3DQEBCwUAA4IBAQBI+/oPgYExYd0jK4WzS2qDhTUGZYb/C8CMqkdY
Y15d+lJztbxOEbK5J85qh6h7Hb/Nrt2U/VlXnUeuMj9lcG4AxpxA0D4kX+y8TynF
swurrYtD3EgXJdil3BzmkxUDx4KqnqoMBK5zb242L2YeqxgmjeYRG5ZS7I3DmlD8
0y5fvWkCSQ3kjSsYa2hQqlMmoYnIN8qQwRcOSFi6npwfBvv/e9qs65/Xp0K3NFRK
SejTak4QIsqKKhEWvTN36zn/k3kFPZW4eP6NLfDgwVFTf077Ru0creA9es6H3gPK
Tiq8Cho//eka3X5n6pXtUlcdw91X/hUENY9HqCE7dGjlGGz1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org