Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/safLAfqLFwJ-HCRluAnR_VqP_UU.roa
File: safLAfqLFwJ-HCRluAnR_VqP_UU.roa (raw, json)
Hash identifier: Zv9UaRjeMTythq46+EiS0f5wIClORQDpHhCH5wWvAIk=
Subject key identifier: B1:A7:CB:01:FA:8B:17:02:7E:1C:24:65:B8:09:D1:FD:5A:8F:FD:45
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA8FC8DE03DA3FDD5E725D438EF65D4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/safLAfqLFwJ-HCRluAnR_VqP_UU.roa
Signing time: Tue 06 Feb 2024 18:23:17 +0000
ROA not before: Tue 06 Feb 2024 18:23:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200268
IP address blocks: 2a0f:b241:b2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:fc:8d:e0:3d:a3:fd:d5:e7:25:d4:38:ef:65:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:23:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1a7cb01fa8b17027e1c2465b809d1fd5a8ffd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:fa:f8:d9:af:87:d3:b2:85:6c:9a:c3:58:
17:d5:39:a9:14:86:e3:e3:b2:aa:06:3d:3e:2d:af:
30:79:e1:0d:87:28:a9:22:b1:7b:1e:5e:92:40:fc:
82:34:3b:ed:f8:44:ee:53:26:ca:4b:21:aa:72:70:
71:2d:3a:1f:eb:7c:f0:31:15:97:dc:ff:ed:a0:f9:
53:8d:3b:ac:65:c4:39:85:15:85:2c:bc:57:4b:c8:
24:ff:47:60:14:24:1f:6e:75:e6:c4:9e:48:7f:c4:
79:90:f1:83:a8:20:b8:40:65:6d:22:3e:25:25:45:
09:37:17:ac:66:81:7f:12:64:1c:17:4f:23:ae:52:
45:c0:79:a3:18:2f:47:24:f9:a2:3f:df:87:be:be:
20:d6:e6:b4:eb:e6:0e:f9:0c:f5:4e:41:24:96:60:
3a:ec:92:61:7f:3f:e4:cc:99:31:9d:63:12:eb:a3:
3c:a5:85:68:b8:f6:46:5b:ca:7f:50:bc:8d:00:c0:
51:51:88:68:80:55:9e:3f:08:60:da:85:ad:34:12:
35:ec:ce:31:bf:f3:b2:8f:8b:77:f0:c3:92:0f:f9:
18:7d:27:f8:8f:e9:28:3f:8b:34:d2:b0:0e:7a:42:
36:c3:b3:ad:3f:dc:84:47:a4:1f:92:f2:23:d2:32:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:CB:01:FA:8B:17:02:7E:1C:24:65:B8:09:D1:FD:5A:8F:FD:45
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/safLAfqLFwJ-HCRluAnR_VqP_UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:b2::/48
Signature Algorithm: sha256WithRSAEncryption
2b:23:75:09:f9:79:34:08:04:b8:9c:d5:b6:a7:f4:c2:b9:6f:
c9:47:a0:b1:b5:37:a0:cf:66:6c:16:77:fb:bc:92:d2:32:9c:
6f:94:7f:ab:93:2d:69:e3:94:89:f6:5b:22:9d:14:96:92:55:
e6:98:12:1b:94:fe:1a:6d:b1:47:aa:f4:32:a5:3a:ca:7d:78:
31:d7:56:49:54:3e:ab:8d:2f:7e:04:87:cb:98:a1:94:63:d4:
ce:e8:6b:64:c2:07:85:fc:75:7f:38:ff:90:0e:77:1b:fd:12:
0f:27:0e:8a:e0:4c:5a:3f:8e:b3:f6:00:ec:03:de:73:b4:f7:
5f:f2:9b:8f:cc:a2:0a:e3:95:2a:37:42:0d:82:c6:2d:61:dd:
7b:06:b3:21:23:e1:2a:19:ee:e7:fd:6c:31:47:52:93:49:22:
b8:ec:1b:ab:5b:a7:e7:4d:8a:15:5a:bc:2f:2c:7b:a5:78:34:
a2:a1:fc:3a:b9:d2:46:32:2b:73:e6:e9:95:22:ba:d4:fb:00:
49:d4:fd:39:f2:b4:38:29:4e:f9:2b:c6:5e:c8:03:d3:e5:4a:
19:2d:f1:5a:b5:c7:1a:73:ab:26:12:ce:13:ff:7c:ec:0c:6c:
22:3e:35:df:6d:ee:67:c7:4a:d0:f3:6f:b4:6b:67:54:a4:5d:
3e:2c:ec:55
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qPyN4D2j/dXnJdQ472XUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWE3Y2IwMWZhOGIxNzAyN2UxYzI0NjViODA5ZDFmZDVhOGZmZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou76+Nmvh9OyhWyaw1gX1TmpFIbj
47KqBj0+La8weeENhyipIrF7Hl6SQPyCNDvt+ETuUybKSyGqcnBxLTof63zwMRWX
3P/toPlTjTusZcQ5hRWFLLxXS8gk/0dgFCQfbnXmxJ5If8R5kPGDqCC4QGVtIj4l
JUUJNxesZoF/EmQcF08jrlJFwHmjGC9HJPmiP9+Hvr4g1ua06+YO+Qz1TkEklmA6
7JJhfz/kzJkxnWMS66M8pYVouPZGW8p/ULyNAMBRUYhogFWePwhg2oWtNBI17M4x
v/Oyj4t38MOSD/kYfSf4j+koP4s00rAOekI2w7OtP9yER6QfkvIj0jIyywIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLGnywH6ixcCfhwkZbgJ0f1aj/1FMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvc2FmTEFmcUxGd0otSENSbHVBblJfVnFQX1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQCy
MA0GCSqGSIb3DQEBCwUAA4IBAQArI3UJ+Xk0CAS4nNW2p/TCuW/JR6CxtTegz2Zs
Fnf7vJLSMpxvlH+rky1p45SJ9lsinRSWklXmmBIblP4abbFHqvQypTrKfXgx11ZJ
VD6rjS9+BIfLmKGUY9TO6GtkwgeF/HV/OP+QDncb/RIPJw6K4ExaP46z9gDsA95z
tPdf8puPzKIK45UqN0INgsYtYd17BrMhI+EqGe7n/WwxR1KTSSK47BurW6fnTYoV
WrwvLHuleDSiofw6udJGMitz5umVIrrU+wBJ1P058rQ4KU75K8ZeyAPT5UoZLfFa
tccac6smEs4T/3zsDGwiPjXfbe5nx0rQ82+0a2dUpF0+LOxV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org