Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/o_LqDb5fAThAMSHqDZlW8PsdzG8.roa
File: o_LqDb5fAThAMSHqDZlW8PsdzG8.roa (raw, json)
Hash identifier: Urg8gzwvPcfxeq70LS45nYGnZmh3zSSfW6JQuM1g9oI=
Subject key identifier: A3:F2:EA:0D:BE:5F:01:38:40:31:21:EA:0D:99:56:F0:FB:1D:CC:6F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7D1132313E96808A58BBAC9D4AEB06C3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/o_LqDb5fAThAMSHqDZlW8PsdzG8.roa
Signing time: Tue 06 Feb 2024 06:18:15 +0000
ROA not before: Tue 06 Feb 2024 06:18:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211562
IP address blocks: 2a0f:b241:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:11:32:31:3e:96:80:8a:58:bb:ac:9d:4a:eb:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 06:18:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3f2ea0dbe5f0138403121ea0d9956f0fb1dcc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:bf:85:d8:9e:c1:01:20:86:09:7c:53:c0:
ff:fd:80:1c:41:43:71:c1:7c:d4:59:b4:15:bf:bf:
8a:fc:ab:6b:c8:fa:7c:c4:b5:8b:c3:c5:55:a4:fe:
bf:9c:2c:b2:66:f6:2e:c2:2f:82:44:8f:98:86:12:
ae:e3:34:52:a1:1a:1e:64:8d:e1:bc:0a:b4:2e:72:
4c:5b:ce:02:ec:96:12:6c:28:2e:2c:9a:25:3f:09:
23:7e:25:d9:0a:d0:c8:51:4a:5d:ab:ab:0e:c7:b7:
59:e3:07:93:2d:ed:fd:43:b6:b0:5d:b3:46:fd:ca:
54:58:89:f4:5f:b3:89:bf:c9:b4:9f:9f:e6:f1:02:
9c:e4:f9:8c:c1:27:dc:f6:b8:49:d0:85:66:33:97:
d7:82:f1:7c:80:5e:2b:9d:1c:5a:e6:1e:c6:d1:af:
11:f9:0c:0e:5c:f0:05:c1:7c:15:0d:8c:85:b5:22:
d3:c8:9f:cf:d9:19:70:7c:3a:5d:d4:7c:36:af:ca:
26:47:c1:4c:48:d4:ad:07:66:52:36:4c:67:b0:30:
44:d7:82:50:89:27:55:64:6f:e8:91:3f:02:fd:0e:
e6:b8:43:e4:08:68:c0:d0:4f:a7:ee:c1:fe:46:eb:
c8:ed:69:9f:e0:38:54:43:1b:f4:bc:cb:81:4a:92:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F2:EA:0D:BE:5F:01:38:40:31:21:EA:0D:99:56:F0:FB:1D:CC:6F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/o_LqDb5fAThAMSHqDZlW8PsdzG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:4::/48
Signature Algorithm: sha256WithRSAEncryption
49:f6:33:d4:b8:55:72:f8:e4:db:19:14:31:20:b8:85:d1:ee:
d7:b8:20:fd:d5:4f:d4:1a:ee:43:75:77:0b:38:66:9c:1b:29:
5f:e1:f2:77:d3:95:75:63:11:03:ae:48:43:cb:e7:45:d1:ce:
51:cd:3e:fe:dd:3d:e9:1e:50:79:ec:4f:89:82:f6:0a:c2:f2:
15:2a:37:79:23:f1:33:63:63:04:ff:2c:a5:9a:b1:39:c3:f7:
36:c9:d0:d1:18:7e:d6:a9:70:0f:f5:72:5c:62:e4:64:00:15:
6e:73:80:67:d8:6f:16:b1:44:de:e6:00:7f:a5:67:38:85:f9:
f5:86:22:19:db:34:4d:0d:ec:7a:4c:2e:36:e3:88:4a:f7:64:
b0:b6:14:82:c0:80:57:bb:f6:26:9d:02:33:e6:44:29:ec:64:
db:57:b7:b5:bf:5e:95:bc:85:fa:5e:3f:b8:56:35:29:7c:9e:
6a:5c:48:6d:78:9d:36:fe:7e:8d:1a:2c:e1:db:cb:95:c9:1a:
7e:44:c3:5b:62:63:92:f7:20:9c:f4:e0:34:2a:3b:e6:b1:79:
7a:98:9e:c8:14:24:77:fb:e0:37:51:70:40:b2:24:14:63:2c:
82:76:41:f9:fa:6b:00:49:12:d1:79:d0:36:dc:74:9a:99:52:
47:c6:05:91
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY19ETIxPpaAili7rJ1K6wbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MDYxODE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2YyZWEwZGJlNWYwMTM4NDAzMTIxZWEwZDk5NTZmMGZiMWRjYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoG/hdiewQEghgl8U8D//YAcQUNx
wXzUWbQVv7+K/KtryPp8xLWLw8VVpP6/nCyyZvYuwi+CRI+YhhKu4zRSoRoeZI3h
vAq0LnJMW84C7JYSbCguLJolPwkjfiXZCtDIUUpdq6sOx7dZ4weTLe39Q7awXbNG
/cpUWIn0X7OJv8m0n5/m8QKc5PmMwSfc9rhJ0IVmM5fXgvF8gF4rnRxa5h7G0a8R
+QwOXPAFwXwVDYyFtSLTyJ/P2RlwfDpd1Hw2r8omR8FMSNStB2ZSNkxnsDBE14JQ
iSdVZG/okT8C/Q7muEPkCGjA0E+n7sH+RuvI7Wmf4DhUQxv0vMuBSpIRnwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKPy6g2+XwE4QDEh6g2ZVvD7HcxvMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvb19McURiNWZBVGhBTVNIcURabFc4UHNkekc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQAE
MA0GCSqGSIb3DQEBCwUAA4IBAQBJ9jPUuFVy+OTbGRQxILiF0e7XuCD91U/UGu5D
dXcLOGacGylf4fJ305V1YxEDrkhDy+dF0c5RzT7+3T3pHlB57E+JgvYKwvIVKjd5
I/EzY2ME/yylmrE5w/c2ydDRGH7WqXAP9XJcYuRkABVuc4Bn2G8WsUTe5gB/pWc4
hfn1hiIZ2zRNDex6TC4244hK92SwthSCwIBXu/YmnQIz5kQp7GTbV7e1v16VvIX6
Xj+4VjUpfJ5qXEhteJ02/n6NGizh28uVyRp+RMNbYmOS9yCc9OA0KjvmsXl6mJ7I
FCR3++A3UXBAsiQUYyyCdkH5+msASRLRedA23HSamVJHxgWR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org