Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xi8aCq0UqSue6KLyb--Wgvcboxc.roa
File: xi8aCq0UqSue6KLyb--Wgvcboxc.roa (raw, json)
Hash identifier: 3S44PKa8BRc/HkIp3Qub6SRhyIVvJtq5LztZSGiugDI=
Subject key identifier: C6:2F:1A:0A:AD:14:A9:2B:9E:E8:A2:F2:6F:EF:96:82:F7:1B:A3:17
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F07A36D5A7869D3DF94DB022B64C1D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xi8aCq0UqSue6KLyb--Wgvcboxc.roa
Signing time: Wed 07 Feb 2024 05:00:37 +0000
ROA not before: Wed 07 Feb 2024 05:00:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199668
IP address blocks: 2a0f:b241:8a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:7a:36:d5:a7:86:9d:3d:f9:4d:b0:22:b6:4c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c62f1a0aad14a92b9ee8a2f26fef9682f71ba317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:9f:d6:9b:b4:52:f9:ad:d9:07:aa:4c:22:
03:37:65:d2:2a:75:4a:2b:31:b3:78:39:4f:8c:f4:
f4:ec:3b:7f:c0:18:13:87:23:02:14:a0:48:bf:ca:
26:eb:8d:33:85:14:b7:59:17:07:3f:14:31:78:c1:
6d:7f:fc:3b:0c:14:44:bb:bc:42:53:19:e5:58:69:
87:de:31:74:81:4f:65:aa:81:7f:ac:05:9e:78:f2:
3c:c6:af:f3:6a:d6:d8:de:27:51:55:b4:2f:90:1e:
ca:a4:d2:1e:0c:9d:d2:d1:9d:7b:e1:9d:92:e7:bd:
de:f7:f7:99:3b:fc:1b:91:26:21:ef:ab:33:b5:9a:
11:a2:87:d4:81:24:94:63:80:82:15:f8:0c:b9:25:
f7:15:9e:82:0a:d4:2a:7e:99:6e:d7:2d:20:71:ad:
78:79:6f:ff:f4:6a:5c:33:13:3b:99:68:df:52:ca:
03:6f:d8:be:34:0f:fa:82:7d:12:99:e1:c2:24:67:
0e:59:0c:83:05:8c:82:0f:0b:ac:f2:6e:e3:80:3b:
44:9a:30:e5:28:c8:19:27:4c:64:ee:02:72:a9:70:
89:13:c9:49:3e:a9:55:6c:38:22:d0:b5:a2:a0:2a:
fd:77:57:b7:cf:e8:4a:e4:3b:79:20:c8:1a:48:34:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2F:1A:0A:AD:14:A9:2B:9E:E8:A2:F2:6F:EF:96:82:F7:1B:A3:17
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xi8aCq0UqSue6KLyb--Wgvcboxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:8a::/48
Signature Algorithm: sha256WithRSAEncryption
5a:3a:04:3c:de:4b:cc:c9:70:dc:cb:3c:75:54:a4:02:63:a8:
a9:11:49:1f:ea:8c:20:42:74:6b:96:1d:5b:f3:f5:b8:d3:51:
72:68:40:dc:2e:96:65:31:56:32:f3:a1:62:c2:dd:13:78:49:
93:a5:32:e7:0a:c9:21:d5:50:a9:ac:5e:3a:b3:78:a8:42:97:
53:99:f2:6e:44:8f:69:57:d5:56:77:80:cf:64:c8:da:c6:58:
be:b2:6c:bf:98:ca:1c:af:53:5e:1d:07:6c:9c:6e:b5:a1:c4:
81:3c:7d:60:0f:b2:88:87:b3:64:c1:2f:91:13:28:d8:95:a2:
d6:7c:79:46:2d:6b:27:d7:3f:7e:47:0b:76:70:3f:f4:9a:26:
d0:de:30:2e:c6:de:7c:49:e4:70:c3:ff:98:9a:ea:e6:21:c8:
e6:e2:f3:73:15:ff:da:3b:b5:40:1b:36:16:c8:71:0f:f8:6a:
5b:1a:3a:5b:83:72:2d:18:23:f1:46:4b:7f:6b:eb:63:d5:ec:
1e:e8:9a:c3:1e:7a:aa:c2:1e:38:82:19:c1:62:3f:34:ab:34:
72:0a:e4:bb:15:f4:79:68:55:b8:f2:79:8b:01:63:be:08:5c:
d8:81:da:46:f4:9d:2e:b0:5a:bd:c2:55:40:93:a1:ec:12:31:
86:e5:b3:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2B8Ho21aeGnT35TbAitkwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA3MDUwMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjJmMWEwYWFkMTRhOTJiOWVlOGEyZjI2ZmVmOTY4MmY3MWJhMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL+f1pu0Uvmt2QeqTCIDN2XSKnVK
KzGzeDlPjPT07Dt/wBgThyMCFKBIv8om640zhRS3WRcHPxQxeMFtf/w7DBREu7xC
UxnlWGmH3jF0gU9lqoF/rAWeePI8xq/zatbY3idRVbQvkB7KpNIeDJ3S0Z174Z2S
573e9/eZO/wbkSYh76sztZoRoofUgSSUY4CCFfgMuSX3FZ6CCtQqfplu1y0gca14
eW//9GpcMxM7mWjfUsoDb9i+NA/6gn0SmeHCJGcOWQyDBYyCDwus8m7jgDtEmjDl
KMgZJ0xk7gJyqXCJE8lJPqlVbDgi0LWioCr9d1e3z+hK5Dt5IMgaSDTGZwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMYvGgqtFKkrnuii8m/vloL3G6MXMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEveGk4YUNxMFVxU3VlNktMeWItLVdndmNib3hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQCK
MA0GCSqGSIb3DQEBCwUAA4IBAQBaOgQ83kvMyXDcyzx1VKQCY6ipEUkf6owgQnRr
lh1b8/W401FyaEDcLpZlMVYy86Fiwt0TeEmTpTLnCskh1VCprF46s3ioQpdTmfJu
RI9pV9VWd4DPZMjaxli+smy/mMocr1NeHQdsnG61ocSBPH1gD7KIh7NkwS+REyjY
laLWfHlGLWsn1z9+Rwt2cD/0mibQ3jAuxt58SeRww/+YmurmIcjm4vNzFf/aO7VA
GzYWyHEP+GpbGjpbg3ItGCPxRkt/a+tj1ewe6JrDHnqqwh44ghnBYj80qzRyCuS7
FfR5aFW48nmLAWO+CFzYgdpG9J0usFq9wlVAk6HsEjGG5bP4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org