Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/6FCcrbqowFlwn-oEgj_c2dG9-Ks.roa
File: 6FCcrbqowFlwn-oEgj_c2dG9-Ks.roa (raw, json)
Hash identifier: 2QykpcsNptz8fETuOTKHFB5Dd/H9WQnzziRHVaq9OLI=
Subject key identifier: E8:50:9C:AD:BA:A8:C0:59:70:9F:EA:04:82:3F:DC:D9:D1:BD:F8:AB
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 0187E6E492427FA33809CF39F02A14682BF7
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/6FCcrbqowFlwn-oEgj_c2dG9-Ks.roa
Signing time: Thu 04 May 2023 13:12:31 +0000
ROA not before: Thu 04 May 2023 13:12:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 2001:67c:9f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 May 2023 14:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:e4:92:42:7f:a3:38:09:cf:39:f0:2a:14:68:2b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: May 4 13:12:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8509cadbaa8c059709fea04823fdcd9d1bdf8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:4c:e8:40:36:4c:70:b5:a7:1f:63:3a:0d:
6f:e8:99:07:d5:04:03:5e:48:2e:6b:59:23:1e:5d:
3d:29:cc:cc:6f:e5:c3:65:e6:0f:d7:c2:0c:ea:0b:
f3:8a:1b:a1:96:04:30:ad:d9:54:c4:d8:96:ee:9c:
b8:72:fd:02:ca:be:dc:f1:70:30:95:7f:13:ef:e7:
38:bb:c3:cf:51:3e:14:6f:db:57:3d:6b:f2:c1:24:
d3:12:82:13:6e:38:a5:e2:94:5e:95:2a:fa:83:d2:
83:64:f9:41:f7:0c:51:70:46:d1:31:3e:90:60:94:
a5:ce:df:d8:76:69:d7:9b:b4:e4:7c:ba:a8:2f:cd:
35:28:ca:e9:58:a2:30:2f:88:c5:c1:ce:5f:77:83:
4f:8a:8a:5e:61:0c:02:b8:56:98:0b:69:56:ac:6c:
8a:da:9c:5f:e3:21:fb:5d:bd:56:3c:b8:7b:9e:75:
27:6c:8b:f7:c0:51:8e:b2:c0:6a:15:ca:f9:3d:6a:
8d:fc:36:1d:20:00:53:fe:4c:7c:f3:4b:7d:e2:f9:
36:30:fa:09:c7:39:6c:39:cf:88:ee:99:87:63:53:
e1:85:96:84:d9:2a:bc:89:5c:64:ef:d6:e4:04:ed:
ad:d9:de:0b:26:d9:1a:68:bf:73:94:e5:d3:f9:92:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:50:9C:AD:BA:A8:C0:59:70:9F:EA:04:82:3F:DC:D9:D1:BD:F8:AB
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/6FCcrbqowFlwn-oEgj_c2dG9-Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9f0::/48
Signature Algorithm: sha256WithRSAEncryption
68:e9:8b:10:2e:3b:5a:4c:d7:95:85:f3:55:5b:83:af:28:cd:
6c:ab:03:7b:88:a4:f1:09:f2:2c:bb:a7:3b:df:88:f1:08:4f:
8c:c9:1d:4e:f4:71:1f:fb:87:2f:52:d6:e7:5c:3b:40:00:68:
4c:6f:5d:6d:c0:78:7b:84:47:a7:72:b4:d9:00:51:52:3d:5e:
5c:0d:d3:97:fa:5a:c0:1c:c8:2d:72:b0:a8:0b:9f:cf:33:64:
43:d3:d0:3e:02:d7:cf:96:74:a9:6b:d1:cd:23:e6:bf:e8:f5:
2f:d4:4b:c0:17:c8:ea:95:76:0f:79:15:58:31:be:1b:74:86:
22:6a:06:46:52:21:8f:c6:b7:44:93:97:79:ac:d1:2e:2a:46:
f7:04:e0:1c:68:b9:0f:70:68:2b:1f:e2:4d:4b:a5:ba:02:75:
51:5d:b5:55:a1:f7:c3:3f:c4:2a:6b:e2:3c:19:e2:75:83:74:
a1:02:5e:95:33:78:cd:35:30:fa:1a:5c:11:d9:c1:75:cd:45:
a1:23:b0:43:5c:27:e0:59:32:50:ab:c3:9a:b9:44:27:6d:d0:
bc:b5:4c:3c:dc:03:a1:67:89:65:4c:f5:d2:55:fc:a0:a2:d7:
ff:36:7e:ec:8e:d4:11:76:8d:e7:d2:48:c7:80:a5:f7:2c:10:
a5:88:25:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYfm5JJCf6M4Cc858CoUaCv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYjljZmI5MTMwOWQ1ZDkxZmZjMzJiY2FmMDZjMzZiMDk3
NzI1NTcwHhcNMjMwNTA0MTMxMjMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODUwOWNhZGJhYThjMDU5NzA5ZmVhMDQ4MjNmZGNkOWQxYmRmOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2dM6EA2THC1px9jOg1v6JkH1QQD
Xkgua1kjHl09KczMb+XDZeYP18IM6gvzihuhlgQwrdlUxNiW7py4cv0Cyr7c8XAw
lX8T7+c4u8PPUT4Ub9tXPWvywSTTEoITbjil4pRelSr6g9KDZPlB9wxRcEbRMT6Q
YJSlzt/YdmnXm7TkfLqoL801KMrpWKIwL4jFwc5fd4NPiopeYQwCuFaYC2lWrGyK
2pxf4yH7Xb1WPLh7nnUnbIv3wFGOssBqFcr5PWqN/DYdIABT/kx880t94vk2MPoJ
xzlsOc+I7pmHY1PhhZaE2Sq8iVxk79bkBO2t2d4LJtkaaL9zlOXT+ZIsvwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOhQnK26qMBZcJ/qBII/3NnRvfirMB8GA1UdIwQY
MBaAFIC5z7kTCdXZH/wyvK8Gw2sJdyVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mZDk0ODItOGNkMS00ODk5LThjZGIt
MjdiYjBiODg3NWE4LzEvNkZDY3JicW93Rmx3bi1vRWdqX2MyZEc5LUtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mZDk0ODItOGNkMS00ODk5LThjZGItMjdiYjBiODg3NWE4
LzEvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAnw
MA0GCSqGSIb3DQEBCwUAA4IBAQBo6YsQLjtaTNeVhfNVW4OvKM1sqwN7iKTxCfIs
u6c734jxCE+MyR1O9HEf+4cvUtbnXDtAAGhMb11twHh7hEencrTZAFFSPV5cDdOX
+lrAHMgtcrCoC5/PM2RD09A+AtfPlnSpa9HNI+a/6PUv1EvAF8jqlXYPeRVYMb4b
dIYiagZGUiGPxrdEk5d5rNEuKkb3BOAcaLkPcGgrH+JNS6W6AnVRXbVVoffDP8Qq
a+I8GeJ1g3ShAl6VM3jNNTD6GlwR2cF1zUWhI7BDXCfgWTJQq8OauUQnbdC8tUw8
3AOhZ4llTPXSVfygotf/Nn7sjtQRdo3n0kjHgKX3LBCliCXI
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:51 2024 by rpki-client on console-ams.rpki-client.org