Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/nFqdVu1zSiNH7bcyEzRtD651RUE.roa
File: nFqdVu1zSiNH7bcyEzRtD651RUE.roa (raw, json)
Hash identifier: C+mLkWMirYjYkoT1Th4LwOz2BY8jhwDnPfnvERKnuyQ=
Subject key identifier: 9C:5A:9D:56:ED:73:4A:23:47:ED:B7:32:13:34:6D:0F:AE:75:45:41
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F95C34A2F1BB4941EEF4BF760A6FD53
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/nFqdVu1zSiNH7bcyEzRtD651RUE.roa
Signing time: Tue 06 Feb 2024 18:02:17 +0000
ROA not before: Tue 06 Feb 2024 18:02:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212780
IP address blocks: 2a0f:b241:4a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:95:c3:4a:2f:1b:b4:94:1e:ef:4b:f7:60:a6:fd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:02:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c5a9d56ed734a2347edb73213346d0fae754541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:a4:ce:c9:5c:a7:10:d7:f2:5f:1d:a0:0f:
b5:bd:9e:8b:7e:6c:27:67:d7:14:0f:4a:c7:64:d1:
a6:47:61:2c:f4:d9:fc:78:f3:2d:3d:73:93:e4:fe:
07:08:e2:4e:34:52:dc:6a:8b:ab:4c:73:ef:59:c2:
a1:09:d6:5a:8c:26:22:4f:44:63:94:8a:4a:fe:77:
1c:d2:a1:71:c6:51:2d:31:c9:ba:de:9a:bd:80:20:
a1:d1:85:b4:87:b9:0f:df:84:7b:99:87:f7:b0:41:
41:92:24:c2:6d:3e:23:4f:9c:42:65:be:35:fe:3b:
79:c2:6f:a6:ac:8a:d3:22:66:76:43:b4:c5:0c:f6:
e2:8c:8a:69:ad:6a:9f:51:bb:cb:5d:55:c2:1a:44:
f2:e8:89:0a:9a:39:8a:be:4e:36:4a:d1:b9:ea:a5:
6b:a9:a6:df:0f:8d:2a:71:25:1c:cd:db:18:a2:ae:
4d:96:60:b0:3c:e8:f0:3d:27:9b:4b:08:af:74:7f:
0b:50:56:42:8f:8d:2e:6d:26:e0:e7:3f:e9:f8:bb:
7b:ec:24:e5:75:a4:49:cb:36:bb:e5:a9:25:e3:d3:
ff:ae:3f:b4:50:f0:5d:ed:35:73:90:a0:94:dd:b7:
58:99:02:8f:b2:f8:f2:5b:a8:0f:c0:8f:90:29:60:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:9D:56:ED:73:4A:23:47:ED:B7:32:13:34:6D:0F:AE:75:45:41
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/nFqdVu1zSiNH7bcyEzRtD651RUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:4a::/48
Signature Algorithm: sha256WithRSAEncryption
37:73:2c:63:12:f8:90:8b:05:2d:24:e7:bd:f4:be:a3:79:b7:
4d:ed:44:85:80:10:46:0f:6a:ab:43:b1:94:7a:d8:c3:03:b2:
76:e2:16:4f:bf:9b:05:31:1b:ff:22:9c:fe:2e:3d:19:8d:5c:
60:08:df:a4:1f:81:71:48:ed:93:52:7c:14:9b:f8:6c:c6:ac:
84:45:ae:34:77:eb:c6:2a:3d:37:93:15:47:9a:7c:c9:1d:d9:
f7:13:1b:7a:96:8c:75:99:a1:9e:d0:93:0b:12:53:68:4c:eb:
11:3a:f8:3a:a0:27:c5:06:36:94:4c:71:a5:23:ca:60:1f:d0:
e7:56:35:17:83:c5:c3:8e:b0:62:92:66:5a:70:44:1d:e1:99:
8b:10:d8:ff:a7:16:a3:21:e8:e8:5b:26:d4:fa:29:27:35:23:
a9:10:bb:24:36:f7:84:ee:f6:88:d7:8d:23:50:70:51:15:d5:
0a:66:33:10:f4:86:63:9d:e5:fb:29:fe:64:fc:97:78:3e:32:
ce:bf:27:aa:20:ec:b1:14:40:03:3b:ab:04:67:53:d5:9b:fd:
41:af:87:a3:4f:7b:da:de:c6:44:0b:50:91:88:81:cd:bd:9c:
c8:5b:1d:7d:67:e6:68:fb:07:c6:85:65:0a:a9:6a:b8:69:74:
f9:8c:e0:46
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/lcNKLxu0lB7vS/dgpv1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzVhOWQ1NmVkNzM0YTIzNDdlZGI3MzIxMzM0NmQwZmFlNzU0NTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowKkzslcpxDX8l8doA+1vZ6Lfmwn
Z9cUD0rHZNGmR2Es9Nn8ePMtPXOT5P4HCOJONFLcaourTHPvWcKhCdZajCYiT0Rj
lIpK/ncc0qFxxlEtMcm63pq9gCCh0YW0h7kP34R7mYf3sEFBkiTCbT4jT5xCZb41
/jt5wm+mrIrTImZ2Q7TFDPbijIpprWqfUbvLXVXCGkTy6IkKmjmKvk42StG56qVr
qabfD40qcSUczdsYoq5NlmCwPOjwPSebSwivdH8LUFZCj40ubSbg5z/p+Lt77CTl
daRJyza75akl49P/rj+0UPBd7TVzkKCU3bdYmQKPsvjyW6gPwI+QKWA7YQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJxanVbtc0ojR+23MhM0bQ+udUVBMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvbkZxZFZ1MXpTaU5IN2JjeUV6UnRENjUxUlVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQBK
MA0GCSqGSIb3DQEBCwUAA4IBAQA3cyxjEviQiwUtJOe99L6jebdN7USFgBBGD2qr
Q7GUetjDA7J24hZPv5sFMRv/Ipz+Lj0ZjVxgCN+kH4FxSO2TUnwUm/hsxqyERa40
d+vGKj03kxVHmnzJHdn3Ext6lox1maGe0JMLElNoTOsROvg6oCfFBjaUTHGlI8pg
H9DnVjUXg8XDjrBikmZacEQd4ZmLENj/pxajIejoWybU+iknNSOpELskNveE7vaI
140jUHBRFdUKZjMQ9IZjneX7Kf5k/Jd4PjLOvyeqIOyxFEADO6sEZ1PVm/1Br4ej
T3va3sZEC1CRiIHNvZzIWx19Z+Zo+wfGhWUKqWq4aXT5jOBG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org