Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/zc6-g7EVfXlpVxjMCPjmkN6Edu4.roa
File: zc6-g7EVfXlpVxjMCPjmkN6Edu4.roa (raw, json)
Hash identifier: NMWRxMf6ahMD1KxIfLYz5I/YMigS3ZdMKZOdh17F6/k=
Subject key identifier: CD:CE:BE:83:B1:15:7D:79:69:57:18:CC:08:F8:E6:90:DE:84:76:EE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FACA3034FF8444CA3AF7D4225C10A03
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/zc6-g7EVfXlpVxjMCPjmkN6Edu4.roa
Signing time: Tue 06 Feb 2024 18:27:16 +0000
ROA not before: Tue 06 Feb 2024 18:27:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210476
IP address blocks: 2a0f:b241:f8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ac:a3:03:4f:f8:44:4c:a3:af:7d:42:25:c1:0a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:27:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdcebe83b1157d79695718cc08f8e690de8476ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:53:4f:a3:a1:a2:db:47:72:c6:e9:f1:f6:bd:
46:35:2d:02:38:fe:45:42:a6:31:f5:bc:0c:99:c0:
5a:44:f3:43:0f:d5:02:48:a6:4b:fd:59:06:4f:79:
2c:85:0f:1e:e4:22:49:42:73:57:1c:e4:6d:99:3c:
a3:25:fc:be:2f:3f:b9:dd:ac:4c:41:1b:c7:88:55:
5e:60:f3:cb:7b:1e:08:0a:a0:46:ed:f4:a8:b1:c6:
c9:8b:86:3e:60:cc:c5:ba:f7:4e:f1:62:db:f6:e2:
89:43:7a:2a:ab:78:91:d0:4e:06:09:ef:55:fc:a3:
fa:5d:46:dd:3e:fa:21:3b:b9:83:bc:91:7b:87:13:
fa:ee:03:4d:a4:cd:84:07:7c:85:9d:f0:c3:f2:27:
41:5d:89:3a:bb:4a:c4:28:79:be:d0:63:4a:9e:4e:
6c:24:9c:b7:5f:a4:3b:63:fe:23:c7:cd:b8:ee:78:
1b:9f:54:ed:23:a8:aa:0b:c8:65:f6:8a:95:f3:cc:
36:bd:9c:77:7e:9f:57:de:5b:67:2c:b6:ba:39:03:
57:75:2a:ac:98:dd:cc:2f:cd:37:59:58:82:f3:74:
67:a3:ce:d7:94:07:42:d4:84:a9:bd:76:28:58:c7:
1b:79:ee:4e:68:0d:85:f9:7d:51:e1:25:49:b3:d5:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CE:BE:83:B1:15:7D:79:69:57:18:CC:08:F8:E6:90:DE:84:76:EE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/zc6-g7EVfXlpVxjMCPjmkN6Edu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:f8::/48
Signature Algorithm: sha256WithRSAEncryption
19:92:91:d0:fe:7b:40:7a:c0:c9:48:75:6d:19:1e:7d:44:c5:
14:05:0b:67:89:28:ff:51:aa:ac:9d:ca:47:19:ab:ce:b8:a7:
cc:19:ef:fa:0b:9b:fa:e6:0f:cb:ac:48:c8:ec:88:4f:3f:5d:
98:de:77:e3:6c:1c:64:fc:16:b2:c4:08:18:35:9a:cd:89:a7:
13:8f:45:0e:cc:97:46:db:6c:91:cb:8f:56:9c:f6:27:36:f2:
b9:d5:ec:99:e3:65:ec:c7:1f:10:df:cc:4c:7c:2a:d4:36:ff:
dd:38:9f:cc:25:df:7c:6d:9a:c9:ec:81:a9:d2:08:40:21:c4:
f8:a6:41:e1:69:95:8d:fe:c6:42:30:1d:04:91:1b:73:1a:b2:
21:1c:26:3a:20:9c:0d:f2:e6:95:69:49:bf:20:fe:28:c8:5f:
8c:56:c1:9f:df:59:f8:b1:2a:08:82:dd:a2:d7:c7:ec:b6:98:
31:7c:f8:3c:3e:4e:4a:a4:4b:e4:d5:9f:1e:5c:e2:12:8a:6a:
90:3d:20:97:87:a4:eb:3b:60:bb:bc:fe:a8:37:ac:97:11:50:
26:54:7a:dc:c9:79:a0:29:f7:ca:98:05:74:06:3d:5b:c7:34:
3a:22:d2:df:6d:30:ea:85:1e:ef:c8:3a:9b:bb:35:0b:b7:9d:
56:62:88:5f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/rKMDT/hETKOvfUIlwQoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGNlYmU4M2IxMTU3ZDc5Njk1NzE4Y2MwOGY4ZTY5MGRlODQ3NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81NPo6Gi20dyxunx9r1GNS0COP5F
QqYx9bwMmcBaRPNDD9UCSKZL/VkGT3kshQ8e5CJJQnNXHORtmTyjJfy+Lz+53axM
QRvHiFVeYPPLex4ICqBG7fSoscbJi4Y+YMzFuvdO8WLb9uKJQ3oqq3iR0E4GCe9V
/KP6XUbdPvohO7mDvJF7hxP67gNNpM2EB3yFnfDD8idBXYk6u0rEKHm+0GNKnk5s
JJy3X6Q7Y/4jx8247ngbn1TtI6iqC8hl9oqV88w2vZx3fp9X3ltnLLa6OQNXdSqs
mN3ML803WViC83Rno87XlAdC1ISpvXYoWMcbee5OaA2F+X1R4SVJs9Wn7wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM3OvoOxFX15aVcYzAj45pDehHbuMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvemM2LWc3RVZmWGxwVnhqTUNQam1rTjZFZHU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQD4
MA0GCSqGSIb3DQEBCwUAA4IBAQAZkpHQ/ntAesDJSHVtGR59RMUUBQtniSj/Uaqs
ncpHGavOuKfMGe/6C5v65g/LrEjI7IhPP12Y3nfjbBxk/BayxAgYNZrNiacTj0UO
zJdG22yRy49WnPYnNvK51eyZ42Xsxx8Q38xMfCrUNv/dOJ/MJd98bZrJ7IGp0ghA
IcT4pkHhaZWN/sZCMB0EkRtzGrIhHCY6IJwN8uaVaUm/IP4oyF+MVsGf31n4sSoI
gt2i18fstpgxfPg8Pk5KpEvk1Z8eXOISimqQPSCXh6TrO2C7vP6oN6yXEVAmVHrc
yXmgKffKmAV0Bj1bxzQ6ItLfbTDqhR7vyDqbuzULt51WYohf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org