Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/q5EcGdVidaCxOPJ7ne4Euw5d7Zk.roa
File: q5EcGdVidaCxOPJ7ne4Euw5d7Zk.roa (raw, json)
Hash identifier: 0iHqGyuK14Y19ke8+kP/7Y0wxAb4eQ9Lc63i41DfSpQ=
Subject key identifier: AB:91:1C:19:D5:62:75:A0:B1:38:F2:7B:9D:EE:04:BB:0E:5D:ED:99
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB79EB30F3889E6C93E6112D00FA1CC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/q5EcGdVidaCxOPJ7ne4Euw5d7Zk.roa
Signing time: Tue 06 Feb 2024 18:39:16 +0000
ROA not before: Tue 06 Feb 2024 18:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209460
IP address blocks: 2a0f:b241:13e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:9e:b3:0f:38:89:e6:c9:3e:61:12:d0:0f:a1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab911c19d56275a0b138f27b9dee04bb0e5ded99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:42:c2:ce:3c:df:45:70:10:97:43:c1:ef:
b5:0c:79:8b:5a:82:6c:3f:d7:44:6f:e3:02:fc:ff:
de:a1:75:a1:74:26:03:f9:a1:54:12:02:d3:ee:86:
37:99:5f:30:70:4c:c6:a0:dd:3e:20:87:30:67:79:
3f:ac:14:ea:7d:94:ea:58:fc:57:45:23:e3:84:07:
ae:f7:73:3d:be:53:c6:f0:04:d4:3c:c5:67:f0:6e:
a9:ee:ce:e7:b9:43:28:a9:5a:ce:a3:0c:59:58:6d:
b9:f0:ee:c5:28:d1:18:30:9a:71:20:0e:16:89:3d:
a4:30:2b:91:03:5e:2a:17:e7:2a:a0:6f:37:51:2c:
8b:8f:a9:12:21:de:0a:7c:9c:06:cb:82:4d:49:cc:
d7:e0:9c:99:34:8b:97:3f:00:e7:13:9e:6b:09:af:
4c:be:f9:79:d2:8c:25:2d:8a:f0:4e:e5:80:d9:4d:
84:a8:d3:de:d3:c4:de:f4:a5:30:79:66:71:9a:41:
c9:bb:3b:70:d2:4c:08:9d:47:8a:e3:5d:13:ce:b8:
0d:55:c5:b0:a7:17:b0:ab:0f:75:d2:98:ed:9a:3e:
fd:50:89:15:ea:51:44:34:30:c2:5d:7b:49:25:b8:
eb:a5:c9:14:90:27:bb:87:3e:7e:aa:d6:48:ed:e6:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:1C:19:D5:62:75:A0:B1:38:F2:7B:9D:EE:04:BB:0E:5D:ED:99
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/q5EcGdVidaCxOPJ7ne4Euw5d7Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:13e::/48
Signature Algorithm: sha256WithRSAEncryption
24:c0:1d:08:9f:b0:d4:4c:aa:51:a1:30:04:a6:61:79:25:40:
4d:c4:36:56:bb:dc:d7:dd:db:14:5b:70:0d:52:2f:45:05:d7:
ea:20:79:4e:95:95:2a:f9:e7:e5:9c:50:22:b8:79:5e:a7:a2:
d6:e0:e5:c2:3b:aa:c0:87:f5:30:de:94:7c:5b:db:f3:dd:92:
50:e3:05:51:24:6b:75:ee:68:eb:b6:a1:77:93:ec:08:15:95:
af:1d:23:af:2f:3b:00:5a:f5:2e:e0:0d:ab:37:69:19:c4:46:
5b:b9:21:c8:ce:a8:47:ec:57:72:50:c8:86:65:80:67:f0:55:
3b:1a:ae:6f:2e:bf:76:2d:01:0a:c0:dc:0d:7c:92:7f:d8:01:
02:79:12:50:47:dc:20:ee:4e:f8:7e:8c:0a:1d:78:70:72:a7:
12:49:e3:ba:71:14:98:c0:2c:6c:f9:95:57:37:c6:ed:b9:db:
0b:37:7c:f6:d4:50:1f:a1:29:c6:71:d1:7f:7f:f1:5a:0b:71:
cc:0a:87:24:26:19:58:71:08:a4:86:59:5a:76:06:e0:38:42:
ae:6f:87:a7:31:76:a3:0d:de:57:10:99:53:56:bb:69:fe:c6:
92:ea:09:d6:64:66:b8:80:9d:cd:11:56:d6:40:1e:a5:64:f1:
49:bd:77:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/t56zDziJ5sk+YRLQD6HMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgzOTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjkxMWMxOWQ1NjI3NWEwYjEzOGYyN2I5ZGVlMDRiYjBlNWRlZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2hCws4830VwEJdDwe+1DHmLWoJs
P9dEb+MC/P/eoXWhdCYD+aFUEgLT7oY3mV8wcEzGoN0+IIcwZ3k/rBTqfZTqWPxX
RSPjhAeu93M9vlPG8ATUPMVn8G6p7s7nuUMoqVrOowxZWG258O7FKNEYMJpxIA4W
iT2kMCuRA14qF+cqoG83USyLj6kSId4KfJwGy4JNSczX4JyZNIuXPwDnE55rCa9M
vvl50owlLYrwTuWA2U2EqNPe08Te9KUweWZxmkHJuztw0kwInUeK410TzrgNVcWw
pxewqw910pjtmj79UIkV6lFENDDCXXtJJbjrpckUkCe7hz5+qtZI7eYlhwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKuRHBnVYnWgsTjye53uBLsOXe2ZMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvcTVFY0dkVmlkYUN4T1BKN25lNEV1dzVkN1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQE+
MA0GCSqGSIb3DQEBCwUAA4IBAQAkwB0In7DUTKpRoTAEpmF5JUBNxDZWu9zX3dsU
W3ANUi9FBdfqIHlOlZUq+eflnFAiuHlep6LW4OXCO6rAh/Uw3pR8W9vz3ZJQ4wVR
JGt17mjrtqF3k+wIFZWvHSOvLzsAWvUu4A2rN2kZxEZbuSHIzqhH7FdyUMiGZYBn
8FU7Gq5vLr92LQEKwNwNfJJ/2AECeRJQR9wg7k74fowKHXhwcqcSSeO6cRSYwCxs
+ZVXN8btudsLN3z21FAfoSnGcdF/f/FaC3HMCockJhlYcQikhlladgbgOEKub4en
MXajDd5XEJlTVrtp/saS6gnWZGa4gJ3NEVbWQB6lZPFJvXcM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org