Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sLE1oRrRO2-JQ41i2K7bvqQW3TA.roa
File: sLE1oRrRO2-JQ41i2K7bvqQW3TA.roa (raw, json)
Hash identifier: ceK//js9ReA2GjKxyuqaURWWNHegm9XvTbx9ED2KI7w=
Subject key identifier: B0:B1:35:A1:1A:D1:3B:6F:89:43:8D:62:D8:AE:DB:BE:A4:16:DD:30
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96A941C0BBEAA7098CF4BBD3334253
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sLE1oRrRO2-JQ41i2K7bvqQW3TA.roa
Signing time: Tue 06 Feb 2024 18:03:16 +0000
ROA not before: Tue 06 Feb 2024 18:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215749
IP address blocks: 2a0f:b241:55::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:a9:41:c0:bb:ea:a7:09:8c:f4:bb:d3:33:42:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0b135a11ad13b6f89438d62d8aedbbea416dd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:be:a9:66:ed:d4:2d:b0:66:44:79:2e:2a:
9e:d0:56:a9:6a:4f:bf:7a:9b:d6:ba:a6:1b:3c:36:
4a:79:29:0c:20:d5:5f:91:b2:03:37:6a:f7:0e:cb:
93:f8:72:43:7d:37:8c:88:e9:b9:7c:6f:b3:a1:aa:
28:50:2d:52:b8:ff:62:b0:ce:2e:4b:11:b9:0d:9c:
9f:aa:87:85:51:f4:6e:6c:91:55:03:b6:a7:67:6f:
ac:2f:3a:f7:cc:64:a4:65:00:66:d7:24:51:08:36:
9b:0e:e5:2e:1e:7b:8d:6c:e5:34:93:9e:fe:a8:ef:
e4:f5:64:80:d1:85:38:55:e7:87:15:e9:95:8a:9b:
3e:2b:ec:56:9e:49:32:61:6c:bd:24:9c:d5:65:62:
98:cb:11:da:f7:d7:f1:de:62:6e:ab:64:89:3c:7a:
3e:b0:95:1b:08:76:4b:ff:f4:c4:01:96:d2:2a:fd:
78:f4:d8:95:f4:2a:bc:5e:9a:f8:49:ac:a1:d1:55:
7e:5d:45:84:96:ee:ec:36:f4:c9:f2:08:71:ab:5a:
e4:b0:37:65:dd:7d:41:2c:04:46:0d:4e:d4:51:d1:
0a:c2:fb:2a:76:8c:0b:fb:3e:ec:e2:a2:f6:be:c8:
f5:6e:bc:1b:e3:b9:4a:53:b7:d2:0b:8c:a9:9f:32:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B1:35:A1:1A:D1:3B:6F:89:43:8D:62:D8:AE:DB:BE:A4:16:DD:30
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sLE1oRrRO2-JQ41i2K7bvqQW3TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:55::/48
Signature Algorithm: sha256WithRSAEncryption
1b:eb:8c:9f:72:41:21:f7:00:92:1d:32:d6:05:68:31:c0:b4:
fd:e3:a4:8e:d3:27:6f:d5:d0:bc:84:61:a3:81:f3:27:90:c3:
bb:85:c2:77:d9:53:62:a7:c7:85:67:f4:a1:1e:37:c9:3b:a4:
bc:1f:1d:1b:a3:33:4e:fa:ef:ef:38:8d:6f:1c:ab:bb:4d:8b:
67:40:e5:54:91:ca:cf:9d:ac:03:9f:de:03:69:bd:c0:67:71:
13:46:cf:ed:b9:54:3b:e3:42:b6:8b:2a:7f:5b:e0:e5:88:ef:
e0:4d:1d:eb:a8:35:29:8b:4b:50:62:21:10:29:d6:26:0d:5d:
d8:95:c7:7a:17:41:c7:d6:19:3e:fc:90:5f:f1:7d:bc:97:8a:
a1:47:4a:08:fc:de:bc:de:9f:2c:a1:cb:11:e6:f8:b4:eb:6c:
32:46:5d:86:16:ca:a2:dc:61:61:d2:b1:16:29:5c:43:54:44:
4a:61:2f:ed:d3:37:8a:92:ac:4b:17:40:ce:fc:d4:54:44:e6:
4a:b7:d9:29:8c:7e:81:83:b0:ca:d0:18:73:cd:e2:4b:96:aa:
57:6c:21:56:d0:57:43:0c:97:41:0e:e0:21:3b:11:78:02:e2:
b3:ac:79:c9:88:83:79:44:ec:21:6f:55:ce:d6:31:f8:d1:49:
b3:4f:86:69
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/lqlBwLvqpwmM9LvTM0JTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGIxMzVhMTFhZDEzYjZmODk0MzhkNjJkOGFlZGJiZWE0MTZkZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip6+qWbt1C2wZkR5Liqe0Fapak+/
epvWuqYbPDZKeSkMINVfkbIDN2r3DsuT+HJDfTeMiOm5fG+zoaooUC1SuP9isM4u
SxG5DZyfqoeFUfRubJFVA7anZ2+sLzr3zGSkZQBm1yRRCDabDuUuHnuNbOU0k57+
qO/k9WSA0YU4VeeHFemVips+K+xWnkkyYWy9JJzVZWKYyxHa99fx3mJuq2SJPHo+
sJUbCHZL//TEAZbSKv149NiV9Cq8Xpr4Sayh0VV+XUWElu7sNvTJ8ghxq1rksDdl
3X1BLARGDU7UUdEKwvsqdowL+z7s4qL2vsj1brwb47lKU7fSC4ypnzLCOwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLCxNaEa0TtviUONYtiu276kFt0wMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvc0xFMW9SclJPMi1KUTQxaTJLN2J2cVFXM1RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQBV
MA0GCSqGSIb3DQEBCwUAA4IBAQAb64yfckEh9wCSHTLWBWgxwLT946SO0ydv1dC8
hGGjgfMnkMO7hcJ32VNip8eFZ/ShHjfJO6S8Hx0bozNO+u/vOI1vHKu7TYtnQOVU
kcrPnawDn94Dab3AZ3ETRs/tuVQ740K2iyp/W+DliO/gTR3rqDUpi0tQYiEQKdYm
DV3Ylcd6F0HH1hk+/JBf8X28l4qhR0oI/N683p8socsR5vi062wyRl2GFsqi3GFh
0rEWKVxDVERKYS/t0zeKkqxLF0DO/NRUROZKt9kpjH6Bg7DK0BhzzeJLlqpXbCFW
0FdDDJdBDuAhOxF4AuKzrHnJiIN5ROwhb1XO1jH40UmzT4Zp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org