Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/veN68alcOvOHUUTjkcV44yydHkk.roa
File: veN68alcOvOHUUTjkcV44yydHkk.roa (raw, json)
Hash identifier: PJR8UY8onOEe4bgrCbgLesAcTkcubnHYszJmUUnDKM8=
Subject key identifier: BD:E3:7A:F1:A9:5C:3A:F3:87:51:44:E3:91:C5:78:E3:2C:9D:1E:49
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96A821181A15A328379B025698A65C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/veN68alcOvOHUUTjkcV44yydHkk.roa
Signing time: Tue 06 Feb 2024 18:03:16 +0000
ROA not before: Tue 06 Feb 2024 18:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44876
IP address blocks: 2a0f:b241:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:a8:21:18:1a:15:a3:28:37:9b:02:56:98:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bde37af1a95c3af3875144e391c578e32c9d1e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:c5:f9:9b:aa:ba:b2:cd:15:b7:8f:01:a8:
3f:b8:ec:06:bb:1e:39:20:40:aa:34:84:f2:ea:82:
9a:38:e8:bd:14:39:81:98:19:8b:98:d4:d6:f2:a6:
f2:ba:bc:04:f0:8b:e9:b5:a8:fd:bc:a8:c8:a8:25:
af:d9:01:b9:11:33:c2:53:82:1c:59:d1:fe:6d:7e:
c8:3f:c2:6a:b8:df:a5:80:79:9b:5a:d6:f5:50:b7:
5b:60:c8:7e:17:ee:59:ba:cd:52:36:22:ae:c9:35:
f6:cc:c8:1e:19:da:5a:ba:8c:17:55:cf:3e:37:e9:
ed:64:ed:a1:94:a3:12:7f:5b:2e:c5:b8:43:1b:90:
e0:53:95:66:31:b1:b2:37:f6:17:86:0b:b1:43:cf:
ed:43:10:d1:22:20:79:45:d5:75:97:26:10:28:89:
37:cb:50:44:ac:72:8c:dc:01:0b:6b:81:03:1f:d5:
78:a9:3f:75:e2:47:71:57:90:33:cf:3e:8a:de:a8:
d4:51:99:73:13:b8:bb:89:15:42:3a:95:9d:38:f7:
9d:00:1d:c5:c5:4f:4b:c7:33:cc:da:5e:51:6d:09:
73:50:79:e1:37:03:6c:84:19:0e:75:1e:ea:8d:15:
c1:59:40:77:a2:42:f6:e9:48:db:71:6e:b6:31:97:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E3:7A:F1:A9:5C:3A:F3:87:51:44:E3:91:C5:78:E3:2C:9D:1E:49
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/veN68alcOvOHUUTjkcV44yydHkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:86:18:19:1f:62:65:80:8e:93:5f:b7:82:36:16:90:c4:66:
40:a8:9c:2d:46:28:34:6f:8d:2d:b1:5d:e0:af:9c:00:e7:94:
ec:cb:29:33:5e:0c:90:5f:e8:f3:a9:a6:ad:d2:0c:eb:e9:b2:
37:d5:90:b1:a3:80:b5:61:e4:e2:7a:ed:d7:01:20:17:45:c6:
65:a6:2b:17:40:ac:f2:d2:17:33:86:46:65:27:40:97:5a:07:
41:d1:dd:62:54:e5:2f:1a:c4:89:09:fa:b3:b1:70:91:68:ea:
42:31:08:8f:c7:39:68:ce:59:11:03:60:d4:fa:a4:b9:0a:88:
f2:e4:a7:6a:48:33:7b:8a:87:05:c9:e9:ad:d4:0b:6c:43:d5:
e1:0a:55:63:02:19:82:a7:ae:88:69:3c:f0:66:74:03:34:f3:
4a:58:ca:26:5d:58:e9:46:60:f4:e0:11:fb:74:6b:ad:d4:2a:
05:fc:b6:17:75:d0:a6:5c:20:f4:64:26:3d:49:82:b2:9d:00:
d9:49:10:0e:2f:65:3f:7d:04:d2:be:a8:46:a2:9d:fc:a1:5b:
f9:d5:33:9c:68:76:0e:61:9c:5a:c0:cc:8b:c2:03:f6:4c:03:
66:2e:4b:d4:0d:84:55:f5:4d:bc:69:96:a3:1b:88:8a:a0:d9:
3c:93:90:84
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/lqghGBoVoyg3mwJWmKZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGUzN2FmMWE5NWMzYWYzODc1MTQ0ZTM5MWM1NzhlMzJjOWQxZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTvF+ZuqurLNFbePAag/uOwGux45
IECqNITy6oKaOOi9FDmBmBmLmNTW8qbyurwE8Ivptaj9vKjIqCWv2QG5ETPCU4Ic
WdH+bX7IP8JquN+lgHmbWtb1ULdbYMh+F+5Zus1SNiKuyTX2zMgeGdpauowXVc8+
N+ntZO2hlKMSf1suxbhDG5DgU5VmMbGyN/YXhguxQ8/tQxDRIiB5RdV1lyYQKIk3
y1BErHKM3AELa4EDH9V4qT914kdxV5Azzz6K3qjUUZlzE7i7iRVCOpWdOPedAB3F
xU9LxzPM2l5RbQlzUHnhNwNshBkOdR7qjRXBWUB3okL26UjbcW62MZdxvwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL3jevGpXDrzh1FE45HFeOMsnR5JMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvdmVONjhhbGNPdk9IVVVUamtjVjQ0eXlkSGtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQBk
MA0GCSqGSIb3DQEBCwUAA4IBAQAkhhgZH2JlgI6TX7eCNhaQxGZAqJwtRig0b40t
sV3gr5wA55TsyykzXgyQX+jzqaat0gzr6bI31ZCxo4C1YeTieu3XASAXRcZlpisX
QKzy0hczhkZlJ0CXWgdB0d1iVOUvGsSJCfqzsXCRaOpCMQiPxzlozlkRA2DU+qS5
Cojy5KdqSDN7iocFyemt1AtsQ9XhClVjAhmCp66IaTzwZnQDNPNKWMomXVjpRmD0
4BH7dGut1CoF/LYXddCmXCD0ZCY9SYKynQDZSRAOL2U/fQTSvqhGop38oVv51TOc
aHYOYZxawMyLwgP2TANmLkvUDYRV9U28aZajG4iKoNk8k5CE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org