Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vyv-EiseO0nQ2Ru5pUUFXHH3pOg.roa
File: vyv-EiseO0nQ2Ru5pUUFXHH3pOg.roa (raw, json)
Hash identifier: XFKHlYDivS7881XLY7iwBUR/xqBd+XgTlU5g7Rqz990=
Subject key identifier: BF:2B:FE:12:2B:1E:3B:49:D0:D9:1B:B9:A5:45:05:5C:71:F7:A4:E8
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA90180A7DD55C174B45649D36B922A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vyv-EiseO0nQ2Ru5pUUFXHH3pOg.roa
Signing time: Tue 06 Feb 2024 18:23:18 +0000
ROA not before: Tue 06 Feb 2024 18:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200557
IP address blocks: 2a0f:b241:c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:01:80:a7:dd:55:c1:74:b4:56:49:d3:6b:92:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf2bfe122b1e3b49d0d91bb9a545055c71f7a4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:65:8b:b5:35:9e:9f:af:06:17:19:84:9d:
2c:32:09:ae:e0:5a:9c:a7:87:00:80:4f:62:ec:ec:
67:77:a8:9a:c7:92:e9:e3:bc:a0:2d:2b:f2:e8:0e:
b4:b8:45:18:49:10:94:b3:fe:1d:ca:69:67:1f:2e:
93:6e:8e:dc:44:ac:23:0f:d0:0e:68:d4:39:73:f6:
93:31:ff:84:ce:9b:63:1b:97:71:2c:91:55:08:b1:
13:cd:5a:42:09:b9:0f:c4:51:35:d2:e0:a9:9e:79:
aa:a0:ac:51:e9:07:07:94:d3:84:07:8e:de:b8:4b:
b0:56:a5:85:02:a1:56:67:0a:34:43:83:6d:09:b5:
3a:7f:36:54:2b:1d:da:a2:6b:fa:41:00:6b:d3:0c:
f7:68:ac:fa:ad:1e:fd:21:71:5c:ec:fd:a2:ad:ec:
21:97:f7:ae:ca:66:43:30:84:fa:3c:ee:1f:1f:d3:
61:88:68:c1:fc:6c:70:41:21:f4:90:c1:58:4f:3a:
94:99:c3:fa:05:a4:22:30:17:25:38:ad:b5:78:51:
df:6d:30:6e:77:4c:fd:d8:bb:09:3f:76:ef:30:22:
05:80:b4:a9:0d:cb:09:bb:e0:1b:f6:ba:05:3f:c9:
14:54:b8:8e:14:58:26:ed:59:64:88:f5:52:28:47:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2B:FE:12:2B:1E:3B:49:D0:D9:1B:B9:A5:45:05:5C:71:F7:A4:E8
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vyv-EiseO0nQ2Ru5pUUFXHH3pOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:c0::/48
Signature Algorithm: sha256WithRSAEncryption
1f:dd:da:d0:c0:59:d0:2c:51:7b:aa:a0:4f:00:c9:a1:9c:7b:
a6:12:a3:d5:9f:14:79:59:31:84:01:90:c4:1a:e2:fb:87:84:
cc:2a:af:a3:63:28:fd:f5:13:78:e3:91:7d:7b:bc:5c:15:07:
66:e7:c9:f0:07:c3:dc:90:b3:09:be:5b:db:a9:28:46:ee:02:
15:c9:f7:39:f6:2a:97:72:60:17:1a:cb:c3:1c:8c:a0:c1:cf:
e6:8b:03:13:35:c0:cc:2e:8f:12:29:f4:39:22:62:56:16:4b:
fc:85:eb:cd:b9:e5:b7:4b:0e:d6:36:0e:77:f9:8c:d6:c3:b4:
94:2e:3f:42:8d:9d:aa:9c:de:c7:52:79:a9:2b:bb:d1:36:60:
e6:63:fa:8b:53:9b:cb:12:8e:67:14:18:35:0f:dd:fc:44:f0:
12:7e:b6:74:b2:3e:f8:12:7b:19:d4:d1:32:04:e8:40:b7:c9:
f5:9d:52:8d:7e:5d:10:91:0a:92:34:e3:78:fa:14:29:c4:b0:
47:b3:3f:a6:73:98:a6:19:c5:08:95:06:74:4a:77:87:71:c5:
78:58:f8:d3:80:e4:40:ee:07:f3:c6:10:b6:e9:ef:5d:e1:dc:
91:6e:55:a1:ae:49:2f:36:bf:c6:98:f3:5e:9f:a3:c9:18:46:
e8:2b:1a:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qQGAp91VwXS0VknTa5IqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjJiZmUxMjJiMWUzYjQ5ZDBkOTFiYjlhNTQ1MDU1YzcxZjdhNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Bli7U1np+vBhcZhJ0sMgmu4Fqc
p4cAgE9i7Oxnd6iax5Lp47ygLSvy6A60uEUYSRCUs/4dymlnHy6Tbo7cRKwjD9AO
aNQ5c/aTMf+EzptjG5dxLJFVCLETzVpCCbkPxFE10uCpnnmqoKxR6QcHlNOEB47e
uEuwVqWFAqFWZwo0Q4NtCbU6fzZUKx3aomv6QQBr0wz3aKz6rR79IXFc7P2irewh
l/euymZDMIT6PO4fH9NhiGjB/GxwQSH0kMFYTzqUmcP6BaQiMBclOK21eFHfbTBu
d0z92LsJP3bvMCIFgLSpDcsJu+Ab9roFP8kUVLiOFFgm7VlkiPVSKEdoGQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL8r/hIrHjtJ0NkbuaVFBVxx96ToMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvdnl2LUVpc2VPMG5RMlJ1NXBVVUZYSEgzcE9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDA
MA0GCSqGSIb3DQEBCwUAA4IBAQAf3drQwFnQLFF7qqBPAMmhnHumEqPVnxR5WTGE
AZDEGuL7h4TMKq+jYyj99RN445F9e7xcFQdm58nwB8PckLMJvlvbqShG7gIVyfc5
9iqXcmAXGsvDHIygwc/miwMTNcDMLo8SKfQ5ImJWFkv8hevNueW3Sw7WNg53+YzW
w7SULj9CjZ2qnN7HUnmpK7vRNmDmY/qLU5vLEo5nFBg1D938RPASfrZ0sj74EnsZ
1NEyBOhAt8n1nVKNfl0QkQqSNON4+hQpxLBHsz+mc5imGcUIlQZ0SneHccV4WPjT
gORA7gfzxhC26e9d4dyRblWhrkkvNr/GmPNen6PJGEboKxp0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org