Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lklBu3w4BBoDQagZVT2MQ2w-QCs.roa
File: lklBu3w4BBoDQagZVT2MQ2w-QCs.roa (raw, json)
Hash identifier: PJWhKJHAJzp2jHeMGrmBpslUQeGrmjaSDygXYpYzExw=
Subject key identifier: 96:49:41:BB:7C:38:04:1A:03:41:A8:19:55:3D:8C:43:6C:3E:40:2B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6B73332220187E01B84A5DCB3FC15
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lklBu3w4BBoDQagZVT2MQ2w-QCs.roa
Signing time: Tue 06 Feb 2024 18:38:17 +0000
ROA not before: Tue 06 Feb 2024 18:38:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200857
IP address blocks: 2a0f:b241:132::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:b7:33:32:22:01:87:e0:1b:84:a5:dc:b3:fc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=964941bb7c38041a0341a819553d8c436c3e402b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:95:5e:15:49:4c:af:19:20:02:dd:cd:ff:
14:51:91:07:36:fb:7c:e5:eb:ec:fc:0d:35:5d:9a:
e7:a7:ca:3a:8a:08:23:7e:43:b8:1d:6f:71:29:89:
e3:61:5e:83:e2:36:23:4c:40:37:67:74:92:54:e4:
3d:df:79:ca:77:e5:78:40:c9:41:2b:a1:02:14:6d:
9c:bf:7b:05:0e:47:0a:6b:08:e9:09:92:d2:a0:cb:
27:2f:c8:82:ed:85:c1:95:ba:bf:3b:46:22:10:92:
bb:1b:6b:10:f7:95:d2:ff:fe:35:4a:ff:28:b8:f3:
99:9f:2d:c9:6f:5b:61:e5:47:d7:e3:b3:6e:d8:cc:
53:5c:8f:90:f8:b2:2c:07:90:48:86:39:72:0c:bf:
b2:f9:72:0f:e2:e1:11:c5:7c:be:fb:32:d8:27:69:
94:2f:6a:10:a7:65:50:99:72:72:4f:73:fe:78:66:
08:41:13:11:ac:ac:62:64:36:c9:76:f6:45:72:fe:
ec:83:61:c0:0e:d9:f6:3a:c9:bb:45:32:a8:fc:1c:
b9:7c:9c:8e:a0:d5:1d:6e:5a:e4:9b:49:c2:6e:c3:
c4:b0:7b:24:52:b1:52:58:0c:ec:76:a5:9b:89:6c:
d7:e6:09:21:21:06:e3:d7:b8:3d:a1:76:16:f7:cb:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:49:41:BB:7C:38:04:1A:03:41:A8:19:55:3D:8C:43:6C:3E:40:2B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lklBu3w4BBoDQagZVT2MQ2w-QCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:132::/48
Signature Algorithm: sha256WithRSAEncryption
06:2b:4a:48:c6:76:db:90:e4:5e:e9:e0:3b:cb:2c:3b:2c:48:
c8:8b:fe:26:3e:73:f9:b9:6e:0e:61:06:7c:da:66:72:a9:4e:
ba:bf:e6:e8:57:3e:f4:9d:0c:ff:27:c2:f6:b7:39:84:41:d0:
8d:6b:90:1f:e4:c8:e6:be:50:b7:6d:a8:99:a2:47:ca:bc:c4:
d2:3a:8c:47:20:c8:40:d0:f4:15:29:75:e3:66:8f:07:00:40:
5b:8e:e6:51:15:b8:fd:9c:bf:f5:db:ad:11:e5:99:0e:95:fe:
d9:de:56:c4:9b:41:25:7e:e3:c1:01:1f:e7:89:dd:a1:54:19:
bc:2f:60:c6:98:33:7e:48:b0:da:01:92:ba:f6:5d:0e:fa:88:
40:2e:ee:c9:71:ee:cb:03:23:7d:08:1b:06:7f:e7:77:1a:ff:
8b:34:b6:c0:7d:8f:08:cf:51:4f:ce:79:cc:10:74:fa:8f:2f:
9f:a3:ff:28:ba:7a:01:22:82:f7:18:e3:ab:d6:b7:9a:a1:72:
0f:6b:2f:df:f2:3f:ea:27:e2:91:d8:62:06:bf:ca:72:9a:f4:
f7:e6:15:ac:56:6e:97:d2:b1:06:02:4b:3f:9c:65:b8:c5:fb:
cd:70:b1:16:ae:8d:ca:3d:ca:f0:cb:03:c6:e7:25:1a:40:28:
5d:63:8c:7f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/trczMiIBh+AbhKXcs/wVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgzODE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjQ5NDFiYjdjMzgwNDFhMDM0MWE4MTk1NTNkOGM0MzZjM2U0MDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc6VXhVJTK8ZIALdzf8UUZEHNvt8
5evs/A01XZrnp8o6iggjfkO4HW9xKYnjYV6D4jYjTEA3Z3SSVOQ933nKd+V4QMlB
K6ECFG2cv3sFDkcKawjpCZLSoMsnL8iC7YXBlbq/O0YiEJK7G2sQ95XS//41Sv8o
uPOZny3Jb1th5UfX47Nu2MxTXI+Q+LIsB5BIhjlyDL+y+XIP4uERxXy++zLYJ2mU
L2oQp2VQmXJyT3P+eGYIQRMRrKxiZDbJdvZFcv7sg2HADtn2Osm7RTKo/By5fJyO
oNUdblrkm0nCbsPEsHskUrFSWAzsdqWbiWzX5gkhIQbj17g9oXYW98u3zwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJZJQbt8OAQaA0GoGVU9jENsPkArMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvbGtsQnUzdzRCQm9EUWFnWlZUMk1RMnctUUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQEy
MA0GCSqGSIb3DQEBCwUAA4IBAQAGK0pIxnbbkORe6eA7yyw7LEjIi/4mPnP5uW4O
YQZ82mZyqU66v+boVz70nQz/J8L2tzmEQdCNa5Af5MjmvlC3baiZokfKvMTSOoxH
IMhA0PQVKXXjZo8HAEBbjuZRFbj9nL/1260R5ZkOlf7Z3lbEm0ElfuPBAR/nid2h
VBm8L2DGmDN+SLDaAZK69l0O+ohALu7Jce7LAyN9CBsGf+d3Gv+LNLbAfY8Iz1FP
znnMEHT6jy+fo/8ounoBIoL3GOOr1reaoXIPay/f8j/qJ+KR2GIGv8pymvT35hWs
Vm6X0rEGAks/nGW4xfvNcLEWro3KPcrwywPG5yUaQChdY4x/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org