Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pitrEsyB4csh7FZWw0kc96lzf6Q.roa
File: pitrEsyB4csh7FZWw0kc96lzf6Q.roa (raw, json)
Hash identifier: 3qxhNijsfrkWg6sZ7zXzoXJGCSSd3mdGRloqlpk4lsk=
Subject key identifier: A6:2B:6B:12:CC:81:E1:CB:21:EC:56:56:C3:49:1C:F7:A9:73:7F:A4
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F090AD2B920EE737D6AC39C1579BC6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pitrEsyB4csh7FZWw0kc96lzf6Q.roa
Signing time: Wed 07 Feb 2024 05:00:43 +0000
ROA not before: Wed 07 Feb 2024 05:00:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204828
IP address blocks: 2a0f:b241:1f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:90:ad:2b:92:0e:e7:37:d6:ac:39:c1:57:9b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a62b6b12cc81e1cb21ec5656c3491cf7a9737fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:75:fa:a6:76:24:2b:5d:05:28:93:43:e7:7d:
14:61:ee:90:a1:0a:f2:30:6e:2a:13:80:11:71:de:
9a:94:da:be:ee:6b:a6:65:a9:46:a0:c2:47:9c:ed:
bc:c7:7e:6f:fa:ea:83:68:ae:fd:4d:bc:65:f4:7a:
21:6e:db:c4:0a:d9:b8:36:8a:a1:55:d5:f4:db:c2:
f3:63:79:4f:5e:cb:40:91:ca:2d:49:72:42:43:fc:
0c:a0:d7:ec:3f:25:55:1f:0f:43:b3:4a:30:39:b6:
97:eb:80:2e:98:0e:37:63:24:d8:ff:7b:84:28:72:
16:06:d5:33:f6:b7:51:20:4e:e5:66:4e:02:dc:9a:
81:10:fb:8b:50:52:7b:cf:ef:73:74:b7:fa:88:d4:
83:c4:76:d8:7f:94:55:ea:a5:d2:c2:aa:07:fc:6f:
3f:8c:62:39:d2:5a:9e:56:6f:e5:22:da:08:0b:ae:
a5:86:6a:ef:a4:40:fb:c0:62:30:13:cf:20:94:c0:
a4:e4:96:d0:45:5a:44:e0:47:bf:af:29:1e:9b:0c:
ec:69:e8:39:3d:b7:57:77:fc:1d:cc:55:4d:0f:04:
c5:8f:5e:b6:f2:ac:a6:3e:f6:d6:0f:ce:4d:2a:bc:
a4:3d:fe:07:39:3b:bd:44:4f:b0:18:51:59:96:dc:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:6B:12:CC:81:E1:CB:21:EC:56:56:C3:49:1C:F7:A9:73:7F:A4
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pitrEsyB4csh7FZWw0kc96lzf6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:1f::/48
Signature Algorithm: sha256WithRSAEncryption
68:1d:c4:37:a4:b3:fa:aa:53:44:02:5f:aa:30:e7:e9:26:f6:
0d:36:d6:00:c6:57:36:bb:25:2c:c8:9b:cd:ae:e8:a8:fd:64:
4f:37:aa:e7:48:55:e2:9e:25:70:7b:67:60:07:84:78:31:1b:
bd:ae:5d:cf:61:d3:d0:15:05:9f:8a:40:92:53:9d:d6:21:14:
59:29:24:85:1f:d1:16:94:30:49:9f:df:d8:71:4a:bd:61:0f:
af:1a:56:0a:1d:52:10:35:f9:48:6b:37:0a:aa:98:fc:58:c8:
3c:53:9a:07:6b:99:f7:7e:f0:88:44:8f:9a:ef:b2:b4:f3:f0:
6c:29:fe:8f:59:94:11:5e:d0:5c:4d:a9:92:58:8f:bb:ed:bc:
e5:7c:24:97:21:1d:db:3d:2e:1d:19:6a:5a:56:ee:d0:17:f9:
f1:89:3c:32:51:14:6c:62:2e:58:df:4a:64:30:8f:fc:d7:60:
d4:f4:f3:77:4a:e8:a3:17:3c:5d:bd:12:d2:26:23:f3:ce:e8:
e0:d0:ff:b0:f5:f7:7c:6c:16:66:5c:ca:32:36:f3:50:cb:eb:
58:2a:15:5e:8b:ee:ce:c2:d7:eb:e9:01:44:39:2f:22:32:1a:
8e:89:00:5f:25:bd:d8:f0:f2:82:a2:69:2a:9c:82:d6:db:fa:
8d:c7:86:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2B8JCtK5IO5zfWrDnBV5vGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUwMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjJiNmIxMmNjODFlMWNiMjFlYzU2NTZjMzQ5MWNmN2E5NzM3ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHX6pnYkK10FKJND530UYe6QoQry
MG4qE4ARcd6alNq+7mumZalGoMJHnO28x35v+uqDaK79Tbxl9HohbtvECtm4Noqh
VdX028LzY3lPXstAkcotSXJCQ/wMoNfsPyVVHw9Ds0owObaX64AumA43YyTY/3uE
KHIWBtUz9rdRIE7lZk4C3JqBEPuLUFJ7z+9zdLf6iNSDxHbYf5RV6qXSwqoH/G8/
jGI50lqeVm/lItoIC66lhmrvpED7wGIwE88glMCk5JbQRVpE4Ee/rykemwzsaeg5
PbdXd/wdzFVNDwTFj1628qymPvbWD85NKrykPf4HOTu9RE+wGFFZltyeiwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKYraxLMgeHLIexWVsNJHPepc3+kMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvcGl0ckVzeUI0Y3NoN0ZaV3cwa2M5Nmx6ZjZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQAf
MA0GCSqGSIb3DQEBCwUAA4IBAQBoHcQ3pLP6qlNEAl+qMOfpJvYNNtYAxlc2uyUs
yJvNruio/WRPN6rnSFXiniVwe2dgB4R4MRu9rl3PYdPQFQWfikCSU53WIRRZKSSF
H9EWlDBJn9/YcUq9YQ+vGlYKHVIQNflIazcKqpj8WMg8U5oHa5n3fvCIRI+a77K0
8/BsKf6PWZQRXtBcTamSWI+77bzlfCSXIR3bPS4dGWpaVu7QF/nxiTwyURRsYi5Y
30pkMI/812DU9PN3SuijFzxdvRLSJiPzzujg0P+w9fd8bBZmXMoyNvNQy+tYKhVe
i+7Owtfr6QFEOS8iMhqOiQBfJb3Y8PKComkqnILW2/qNx4Z0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org