Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/zJymYS6lUYZTC0wBMCKhXtwd5T8.roa
File: zJymYS6lUYZTC0wBMCKhXtwd5T8.roa (raw, json)
Hash identifier: 65/2MBqLr6U1fkyhRRugRFPT2Nyt72N/DaCtMtG2b2U=
Subject key identifier: CC:9C:A6:61:2E:A5:51:86:53:0B:4C:01:30:22:A1:5E:DC:1D:E5:3F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB7A31F642466E8847731978E96FA40
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/zJymYS6lUYZTC0wBMCKhXtwd5T8.roa
Signing time: Tue 06 Feb 2024 18:39:17 +0000
ROA not before: Tue 06 Feb 2024 18:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211411
IP address blocks: 2a0f:b241:145::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:a3:1f:64:24:66:e8:84:77:31:97:8e:96:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc9ca6612ea55186530b4c013022a15edc1de53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:71:1b:d5:08:21:32:56:4b:a4:14:00:af:
c2:33:7c:7f:0f:f3:53:fe:9f:cb:d5:95:0f:95:6a:
c9:96:74:0b:76:1c:f7:22:a5:49:92:1d:cf:e2:68:
d5:7e:c3:d1:51:76:f7:af:2e:fe:4d:f2:a2:bc:26:
03:30:fa:a0:ab:7d:c1:86:62:09:ef:59:0c:ec:3f:
36:d3:4c:0b:28:5b:75:87:2c:25:ba:d9:84:62:52:
d5:36:a9:8d:ef:6a:b1:96:85:33:60:ff:b3:df:6a:
75:a7:43:f6:68:94:89:b6:ed:31:d8:f0:a5:21:a6:
70:6f:2c:b0:96:36:b9:e6:a9:d3:0c:8a:6e:bc:bb:
9e:3d:6c:e3:77:c9:4d:af:66:ca:21:7f:4b:12:84:
42:bc:5c:08:0b:11:3c:30:7e:a1:8f:52:96:22:fb:
44:96:5b:7b:85:53:fc:1d:d8:34:e2:4a:f8:a8:34:
63:28:3f:e3:97:b6:02:a2:e4:9d:5e:9d:d9:86:9c:
8d:5b:a1:7d:78:14:27:c0:d6:05:cf:36:3f:ac:07:
f8:44:d6:8b:89:d5:3a:8b:b9:1f:64:ac:ad:94:d8:
25:11:37:db:d4:99:b2:cf:a0:88:08:89:75:f3:8e:
41:f2:f5:f0:21:6c:79:e8:bc:21:49:54:0d:57:e3:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:A6:61:2E:A5:51:86:53:0B:4C:01:30:22:A1:5E:DC:1D:E5:3F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/zJymYS6lUYZTC0wBMCKhXtwd5T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:145::/48
Signature Algorithm: sha256WithRSAEncryption
86:c2:ea:69:c6:09:59:6b:e8:84:97:fc:73:1f:1b:7d:5c:b6:
09:47:a5:83:3a:79:37:9d:bc:7a:f2:ff:1b:d7:d5:3f:ac:c0:
ab:3b:ee:6e:62:74:ae:0d:31:15:50:5b:f7:41:59:3e:09:e0:
79:37:85:bf:71:3f:9b:a8:ee:a9:3b:c8:e8:1f:35:8e:06:f5:
86:00:0e:8b:31:06:f6:72:3c:64:cc:45:d2:3b:1c:88:f9:80:
60:9f:20:a8:a7:ae:cc:2d:36:08:ec:35:8c:25:58:69:94:be:
ed:43:cb:7b:d2:a3:cc:4e:c1:0c:0e:42:e4:99:3e:16:c8:92:
be:83:d4:5a:89:0c:87:15:3c:c6:0e:5a:ad:fd:06:af:14:f4:
c8:70:41:97:23:9c:4e:c9:82:19:79:44:ec:fd:d7:9d:ae:8e:
e0:31:aa:a4:7f:31:51:67:61:88:6f:4e:b2:f1:b7:c7:be:28:
f9:b0:34:50:d6:1f:38:fe:c7:22:60:cb:ff:4e:ab:be:3c:91:
4f:75:eb:e1:c0:75:36:b9:10:ea:64:ea:b4:30:0d:49:9f:2f:
bf:60:c5:c5:b7:dc:5b:e5:59:14:9e:ca:a1:9b:55:4c:ce:ad:
ba:b1:04:19:85:57:d5:8d:a5:4d:52:97:10:e7:fc:05:44:bc:
7a:e6:3d:c9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/t6MfZCRm6IR3MZeOlvpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgzOTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzljYTY2MTJlYTU1MTg2NTMwYjRjMDEzMDIyYTE1ZWRjMWRlNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF9xG9UIITJWS6QUAK/CM3x/D/NT
/p/L1ZUPlWrJlnQLdhz3IqVJkh3P4mjVfsPRUXb3ry7+TfKivCYDMPqgq33BhmIJ
71kM7D8200wLKFt1hywlutmEYlLVNqmN72qxloUzYP+z32p1p0P2aJSJtu0x2PCl
IaZwbyywlja55qnTDIpuvLuePWzjd8lNr2bKIX9LEoRCvFwICxE8MH6hj1KWIvtE
llt7hVP8Hdg04kr4qDRjKD/jl7YCouSdXp3ZhpyNW6F9eBQnwNYFzzY/rAf4RNaL
idU6i7kfZKytlNglETfb1Jmyz6CICIl1845B8vXwIWx56LwhSVQNV+MKFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMycpmEupVGGUwtMATAioV7cHeU/MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvekp5bVlTNmxVWVpUQzB3Qk1DS2hYdHdkNVQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQFF
MA0GCSqGSIb3DQEBCwUAA4IBAQCGwuppxglZa+iEl/xzHxt9XLYJR6WDOnk3nbx6
8v8b19U/rMCrO+5uYnSuDTEVUFv3QVk+CeB5N4W/cT+bqO6pO8joHzWOBvWGAA6L
MQb2cjxkzEXSOxyI+YBgnyCop67MLTYI7DWMJVhplL7tQ8t70qPMTsEMDkLkmT4W
yJK+g9RaiQyHFTzGDlqt/QavFPTIcEGXI5xOyYIZeUTs/dedro7gMaqkfzFRZ2GI
b06y8bfHvij5sDRQ1h84/sciYMv/Tqu+PJFPdevhwHU2uRDqZOq0MA1Jny+/YMXF
t9xb5VkUnsqhm1VMzq26sQQZhVfVjaVNUpcQ5/wFRLx65j3J
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org