Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9oirRtW2vtICJ_ddBWo4BH1h2sk.roa
File: 9oirRtW2vtICJ_ddBWo4BH1h2sk.roa (raw, json)
Hash identifier: yFNLnQcxGg1bvCegwDOPV1xw9pFtiSkjLbbD6hofFTo=
Subject key identifier: F6:88:AB:46:D5:B6:BE:D2:02:27:F7:5D:05:6A:38:04:7D:61:DA:C9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96A760791BBEB59DE25CE78C6FCF96
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9oirRtW2vtICJ_ddBWo4BH1h2sk.roa
Signing time: Tue 06 Feb 2024 18:03:16 +0000
ROA not before: Tue 06 Feb 2024 18:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44487
IP address blocks: 2a0f:b241:62::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:a7:60:79:1b:be:b5:9d:e2:5c:e7:8c:6f:cf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f688ab46d5b6bed20227f75d056a38047d61dac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:c8:7d:d1:14:53:24:42:29:ff:04:dd:2e:
32:7e:ff:38:c3:57:e0:17:1c:ad:33:33:17:aa:11:
85:8e:e7:eb:28:19:17:05:24:44:b5:e0:1f:0d:fc:
cb:c0:c2:5d:7e:0c:8a:b2:87:fa:27:2e:96:b9:91:
05:38:ef:36:67:3f:25:ec:f9:88:dd:20:62:f6:c4:
3f:bc:2e:d1:86:ad:ca:e2:4c:24:19:15:41:e9:7f:
2b:ca:ad:11:2c:eb:9f:a6:ef:87:87:2d:f6:a7:ca:
d4:27:cc:69:a8:8b:6b:70:95:f9:20:9c:c2:05:97:
af:fb:8b:8e:bb:71:44:22:d9:29:bc:32:d3:46:88:
dc:d0:da:0b:53:0c:d4:6c:2b:f3:b6:52:fe:23:a1:
3e:ac:0c:fc:39:1a:fe:af:fe:03:e0:75:14:39:f9:
74:f8:52:cb:04:91:2d:8b:28:18:f4:d1:bd:e4:94:
f6:2e:8f:56:1c:c9:ae:34:f8:89:ed:7a:6a:6b:80:
b2:b8:bc:ea:f5:98:ca:3c:9b:b2:0c:9a:a4:8c:c2:
4b:8d:4d:08:d8:6a:28:07:28:a9:a9:30:ec:40:e8:
7a:68:75:6e:f5:dd:7e:1a:88:18:75:28:cd:bd:82:
94:17:7e:8a:d4:61:08:af:18:c7:95:4e:a2:e5:44:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:88:AB:46:D5:B6:BE:D2:02:27:F7:5D:05:6A:38:04:7D:61:DA:C9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9oirRtW2vtICJ_ddBWo4BH1h2sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:62::/48
Signature Algorithm: sha256WithRSAEncryption
24:5f:7b:fb:8e:64:be:26:bd:d6:e5:a0:ff:4c:55:12:b5:bc:
a6:f6:9b:f0:c6:01:2d:df:fb:79:9a:ee:2a:ee:da:5f:7e:0a:
64:8a:13:d9:21:c2:42:c6:ad:b0:79:c5:ea:2f:c6:ca:0e:b2:
b2:31:e0:58:9c:a6:79:71:f2:76:80:07:5e:96:bd:b0:70:19:
2d:c3:80:85:4c:59:ea:b1:41:99:1d:86:fe:03:8c:1b:5b:00:
3b:f2:96:8e:5f:28:bb:78:e0:3d:da:ec:f9:cc:97:f0:15:77:
35:b4:e1:40:21:43:8f:f6:83:ae:97:e0:75:9d:e3:ba:08:46:
4b:51:41:5d:6b:a9:5b:78:e5:97:4c:88:1d:d7:6f:84:49:02:
19:d7:e7:42:2b:83:e0:1c:4f:fb:e5:1a:59:91:3a:cf:0c:9b:
49:2f:96:09:f8:37:04:ba:2e:57:71:aa:aa:fe:b2:28:bc:91:
f6:37:f4:74:f7:fe:a9:77:93:33:e6:6b:46:c4:d0:2d:f9:1e:
17:f3:7b:34:f8:da:d5:00:3e:c9:40:2d:02:c1:54:03:0b:68:
ba:25:c3:19:d3:8e:a4:ea:07:cd:d8:0e:8d:87:d4:b9:2e:cf:
35:e1:2f:39:14:94:be:a6:37:1d:01:94:84:09:03:f8:bd:e2:
db:19:b3:b3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/lqdgeRu+tZ3iXOeMb8+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjg4YWI0NmQ1YjZiZWQyMDIyN2Y3NWQwNTZhMzgwNDdkNjFkYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6PIfdEUUyRCKf8E3S4yfv84w1fg
FxytMzMXqhGFjufrKBkXBSREteAfDfzLwMJdfgyKsof6Jy6WuZEFOO82Zz8l7PmI
3SBi9sQ/vC7Rhq3K4kwkGRVB6X8ryq0RLOufpu+Hhy32p8rUJ8xpqItrcJX5IJzC
BZev+4uOu3FEItkpvDLTRojc0NoLUwzUbCvztlL+I6E+rAz8ORr+r/4D4HUUOfl0
+FLLBJEtiygY9NG95JT2Lo9WHMmuNPiJ7Xpqa4CyuLzq9ZjKPJuyDJqkjMJLjU0I
2GooByipqTDsQOh6aHVu9d1+GogYdSjNvYKUF36K1GEIrxjHlU6i5UQvdQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPaIq0bVtr7SAif3XQVqOAR9YdrJMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvOW9pclJ0VzJ2dElDSl9kZEJXbzRCSDFoMnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQBi
MA0GCSqGSIb3DQEBCwUAA4IBAQAkX3v7jmS+Jr3W5aD/TFUStbym9pvwxgEt3/t5
mu4q7tpffgpkihPZIcJCxq2wecXqL8bKDrKyMeBYnKZ5cfJ2gAdelr2wcBktw4CF
TFnqsUGZHYb+A4wbWwA78paOXyi7eOA92uz5zJfwFXc1tOFAIUOP9oOul+B1neO6
CEZLUUFda6lbeOWXTIgd12+ESQIZ1+dCK4PgHE/75RpZkTrPDJtJL5YJ+DcEui5X
caqq/rIovJH2N/R09/6pd5Mz5mtGxNAt+R4X83s0+NrVAD7JQC0CwVQDC2i6JcMZ
046k6gfN2A6Nh9S5Ls814S85FJS+pjcdAZSECQP4veLbGbOz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org