Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wpAbkm0lhEnmRwLYelMguoTcFbo.roa
File: wpAbkm0lhEnmRwLYelMguoTcFbo.roa (raw, json)
Hash identifier: 82X36oQTvuiDwSc2KKGlLb7UG+w3/rXj/J4WTT1wOWE=
Subject key identifier: C2:90:1B:92:6D:25:84:49:E6:47:02:D8:7A:53:20:BA:84:DC:15:BA
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9EA18717060B272C4B9D52F9904DE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wpAbkm0lhEnmRwLYelMguoTcFbo.roa
Signing time: Tue 06 Feb 2024 18:24:18 +0000
ROA not before: Tue 06 Feb 2024 18:24:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200912
IP address blocks: 2a0f:b241:d8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:ea:18:71:70:60:b2:72:c4:b9:d5:2f:99:04:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2901b926d258449e64702d87a5320ba84dc15ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:33:6e:d2:f1:15:eb:3f:ef:f3:1f:2a:59:
c6:db:96:4e:24:1d:24:52:a3:37:a3:cb:f4:0e:c9:
bc:0e:5e:32:f7:8c:b0:22:e0:3b:d1:3e:89:f6:e7:
8d:79:92:43:37:af:3b:e9:b6:3c:88:ce:f1:3d:a3:
a2:8d:2f:a4:79:df:ee:48:78:52:0d:8b:be:a6:d0:
e7:2c:8c:16:92:09:a6:30:1b:ea:61:52:0b:04:46:
4c:b0:82:fe:9e:f7:48:79:64:4d:18:78:23:cb:71:
1c:62:1a:f9:c4:3d:34:67:bb:de:c4:3e:7e:e1:25:
46:58:73:8c:18:69:84:22:ea:fb:18:69:94:12:64:
d0:a4:b4:e9:94:75:0d:5b:12:2d:10:56:92:62:d2:
d7:f6:eb:2c:56:a9:28:72:9c:46:7e:f1:86:19:8c:
09:49:d6:bd:fd:a9:f2:4f:f8:b1:e3:16:80:26:e2:
13:c6:56:cb:2d:ff:27:bb:10:77:98:c0:7a:3a:78:
e6:63:c2:9f:38:1f:b4:cc:ff:03:9f:6b:63:76:6b:
7f:53:28:22:58:ae:72:8d:50:1d:b4:9e:32:e7:87:
c1:54:89:e1:fc:a7:67:d8:02:c0:ec:de:ee:f4:40:
3b:ef:44:ef:2d:f9:50:21:15:c2:af:78:ac:fb:27:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:90:1B:92:6D:25:84:49:E6:47:02:D8:7A:53:20:BA:84:DC:15:BA
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wpAbkm0lhEnmRwLYelMguoTcFbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d8::/48
Signature Algorithm: sha256WithRSAEncryption
16:6a:48:43:b5:61:96:71:39:1f:e4:4e:a1:0a:1a:7e:7c:da:
b7:21:1b:fb:11:7f:61:36:26:ea:71:a7:d5:92:d0:73:b3:9b:
e2:61:b2:b2:aa:ca:43:ec:b6:2d:4c:54:f4:e2:7e:75:d1:51:
83:27:6c:db:40:75:91:2f:d4:10:65:5e:83:47:64:dc:8e:4f:
99:4c:bc:8c:b7:07:cf:d5:9a:90:62:c3:3c:55:6f:31:1b:87:
37:b6:92:6c:68:bd:c4:9a:b8:27:f1:30:e7:c3:4b:41:64:8a:
d6:6d:66:87:21:c5:e7:24:78:f2:e2:f3:85:ff:cc:b7:53:e4:
fc:f0:81:a4:3e:d2:c3:8b:76:fb:59:97:90:7b:f7:51:88:b7:
98:3c:76:93:79:64:dc:86:df:b4:a1:c1:30:bc:38:51:84:60:
ca:4b:1b:46:0b:83:f5:a1:80:93:63:5a:f0:2e:b5:1b:69:6d:
0e:da:b4:44:7e:a2:44:67:68:d6:9f:7a:f7:c9:c1:df:b9:74:
23:15:b6:36:41:ca:39:1f:16:72:ed:b7:39:43:00:5e:b6:15:
4f:12:27:32:df:7f:cc:4f:d4:b2:0a:2f:82:7c:6a:72:21:d2:
0e:2e:dd:12:10:1f:1a:94:68:2c:ce:5e:00:3f:ca:30:76:a9:
fe:5c:48:d1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qeoYcXBgsnLEudUvmQTeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjkwMWI5MjZkMjU4NDQ5ZTY0NzAyZDg3YTUzMjBiYTg0ZGMxNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1EzbtLxFes/7/MfKlnG25ZOJB0k
UqM3o8v0Dsm8Dl4y94ywIuA70T6J9ueNeZJDN6876bY8iM7xPaOijS+ked/uSHhS
DYu+ptDnLIwWkgmmMBvqYVILBEZMsIL+nvdIeWRNGHgjy3EcYhr5xD00Z7vexD5+
4SVGWHOMGGmEIur7GGmUEmTQpLTplHUNWxItEFaSYtLX9ussVqkocpxGfvGGGYwJ
Sda9/anyT/ix4xaAJuITxlbLLf8nuxB3mMB6OnjmY8KfOB+0zP8Dn2tjdmt/Uygi
WK5yjVAdtJ4y54fBVInh/Kdn2ALA7N7u9EA770TvLflQIRXCr3is+ydeEQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMKQG5JtJYRJ5kcC2HpTILqE3BW6MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvd3BBYmttMGxoRW5tUndMWWVsTWd1b1RjRmJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDY
MA0GCSqGSIb3DQEBCwUAA4IBAQAWakhDtWGWcTkf5E6hChp+fNq3IRv7EX9hNibq
cafVktBzs5viYbKyqspD7LYtTFT04n510VGDJ2zbQHWRL9QQZV6DR2Tcjk+ZTLyM
twfP1ZqQYsM8VW8xG4c3tpJsaL3Emrgn8TDnw0tBZIrWbWaHIcXnJHjy4vOF/8y3
U+T88IGkPtLDi3b7WZeQe/dRiLeYPHaTeWTcht+0ocEwvDhRhGDKSxtGC4P1oYCT
Y1rwLrUbaW0O2rREfqJEZ2jWn3r3ycHfuXQjFbY2Qco5HxZy7bc5QwBethVPEicy
33/MT9SyCi+CfGpyIdIOLt0SEB8alGgszl4AP8owdqn+XEjR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org