Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/voqcO9dCFvRxfeuzw9e45-wMxmI.roa
File: voqcO9dCFvRxfeuzw9e45-wMxmI.roa (raw, json)
Hash identifier: 8MPId1/aCsS7zjeuP7w2whCgjJxhjRWSNLzsecuAAjo=
Subject key identifier: BE:8A:9C:3B:D7:42:16:F4:71:7D:EB:B3:C3:D7:B8:E7:EC:0C:C6:62
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F08B067AA463772B2763676E0A441C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/voqcO9dCFvRxfeuzw9e45-wMxmI.roa
Signing time: Wed 07 Feb 2024 05:00:41 +0000
ROA not before: Wed 07 Feb 2024 05:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202649
IP address blocks: 2a0f:b241:135::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:8b:06:7a:a4:63:77:2b:27:63:67:6e:0a:44:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be8a9c3bd74216f4717debb3c3d7b8e7ec0cc662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:fa:d1:25:d3:e3:3e:1a:66:b7:8c:3e:5f:
3a:b9:10:71:b1:07:80:5c:41:e6:4e:29:3c:3f:46:
78:a8:3c:65:b6:98:a1:b9:12:93:46:1b:a1:c5:65:
48:d6:c2:3e:57:3d:74:15:64:64:c8:e0:3c:b8:13:
97:dd:99:26:01:76:7d:8a:34:91:fb:30:43:59:41:
b5:8a:67:fe:91:a9:64:ee:bd:f8:8f:49:c4:1f:86:
26:1e:6a:85:b4:a4:df:66:3d:43:af:c7:95:68:9e:
2e:8e:8e:55:47:89:3c:f7:1c:d2:8d:d3:c7:f4:94:
5b:05:5f:06:b6:54:45:9e:18:31:ec:2e:a6:e6:41:
c8:e9:17:48:f3:ef:57:22:fb:52:9e:1a:a8:c8:3f:
9b:97:00:83:ca:32:cd:3b:a5:8f:67:b7:13:0d:e2:
bc:e5:63:84:bf:c4:77:56:86:f8:82:90:6f:f3:5a:
31:cb:85:67:38:5b:0a:39:86:1e:a7:af:2e:2e:8e:
b9:d9:4d:04:e5:97:3a:8c:6f:04:0e:d8:57:4f:cc:
87:84:8c:c1:96:eb:5d:09:48:56:bc:d9:6e:0a:ad:
c7:e8:d9:09:fe:6c:42:c1:47:e7:6b:f5:c7:4e:45:
ca:1e:6d:b4:5b:df:dd:14:98:13:ca:8a:c4:6f:55:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8A:9C:3B:D7:42:16:F4:71:7D:EB:B3:C3:D7:B8:E7:EC:0C:C6:62
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/voqcO9dCFvRxfeuzw9e45-wMxmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:135::/48
Signature Algorithm: sha256WithRSAEncryption
22:26:e0:eb:ea:90:dc:11:0e:18:61:0e:42:ca:2a:93:51:06:
97:c7:32:cf:45:8e:09:20:1f:67:75:d8:a5:9c:b7:10:40:78:
1e:7b:07:36:16:2f:20:71:f4:1b:c4:39:1e:03:bb:77:dd:19:
31:7b:1a:08:26:e0:62:a3:d3:8d:88:06:44:f0:93:16:bf:51:
c9:39:af:12:79:90:6f:e6:27:b2:f0:f1:b5:16:af:ee:55:dc:
68:25:9e:0a:ff:40:7b:2f:05:90:00:ee:36:cb:47:80:2f:33:
3e:0a:e6:4c:c4:5b:e1:0b:72:3f:60:41:6f:5b:fa:ba:92:26:
b4:51:05:cc:1a:eb:64:fb:29:f2:e4:1b:84:09:ef:ab:7c:ed:
34:e9:01:0b:a1:cf:ea:30:a8:3e:41:63:8a:fd:3a:da:1b:99:
2c:b6:08:28:67:1a:ae:86:c4:40:1a:a4:20:d7:e7:52:21:a8:
f4:fd:15:e7:aa:2d:7b:4c:97:6c:da:c2:de:8f:c3:39:c7:02:
81:06:95:64:01:3d:13:3b:45:ba:b8:cf:03:3f:7e:d1:38:ea:
f6:ce:21:7c:8e:c5:42:0f:da:3b:35:9a:c2:21:f6:d5:df:10:
7c:a9:87:e8:cc:c3:11:d0:e6:98:c8:b1:51:6c:fe:fe:95:f2:
12:44:59:c7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2B8IsGeqRjdysnY2duCkQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUwMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZThhOWMzYmQ3NDIxNmY0NzE3ZGViYjNjM2Q3YjhlN2VjMGNjNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6L60SXT4z4aZreMPl86uRBxsQeA
XEHmTik8P0Z4qDxltpihuRKTRhuhxWVI1sI+Vz10FWRkyOA8uBOX3ZkmAXZ9ijSR
+zBDWUG1imf+kalk7r34j0nEH4YmHmqFtKTfZj1Dr8eVaJ4ujo5VR4k89xzSjdPH
9JRbBV8GtlRFnhgx7C6m5kHI6RdI8+9XIvtSnhqoyD+blwCDyjLNO6WPZ7cTDeK8
5WOEv8R3Vob4gpBv81oxy4VnOFsKOYYep68uLo652U0E5Zc6jG8EDthXT8yHhIzB
lutdCUhWvNluCq3H6NkJ/mxCwUfna/XHTkXKHm20W9/dFJgTyorEb1WErQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL6KnDvXQhb0cX3rs8PXuOfsDMZiMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvdm9xY085ZENGdlJ4ZmV1enc5ZTQ1LXdNeG1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQE1
MA0GCSqGSIb3DQEBCwUAA4IBAQAiJuDr6pDcEQ4YYQ5CyiqTUQaXxzLPRY4JIB9n
ddilnLcQQHgeewc2Fi8gcfQbxDkeA7t33RkxexoIJuBio9ONiAZE8JMWv1HJOa8S
eZBv5iey8PG1Fq/uVdxoJZ4K/0B7LwWQAO42y0eALzM+CuZMxFvhC3I/YEFvW/q6
kia0UQXMGutk+yny5BuECe+rfO006QELoc/qMKg+QWOK/TraG5kstggoZxquhsRA
GqQg1+dSIaj0/RXnqi17TJds2sLej8M5xwKBBpVkAT0TO0W6uM8DP37ROOr2ziF8
jsVCD9o7NZrCIfbV3xB8qYfozMMR0OaYyLFRbP7+lfISRFnH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org