Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CbjPKcxbH8MPHJ_EBj43AHpSblQ.roa
File: CbjPKcxbH8MPHJ_EBj43AHpSblQ.roa (raw, json)
Hash identifier: vJcdF+8rllGXWgsF9/trwdMBBz8qFqDrSyIVofD8ogc=
Subject key identifier: 09:B8:CF:29:CC:5B:1F:C3:0F:1C:9F:C4:06:3E:37:00:7A:52:6E:54
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E0D78E3BDDEB0D418906A94006CF
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CbjPKcxbH8MPHJ_EBj43AHpSblQ.roa
Signing time: Tue 06 Feb 2024 18:24:16 +0000
ROA not before: Tue 06 Feb 2024 18:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200690
IP address blocks: 2a0f:b241:c8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e0:d7:8e:3b:dd:eb:0d:41:89:06:a9:40:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09b8cf29cc5b1fc30f1c9fc4063e37007a526e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:00:11:0d:97:56:fb:37:33:51:3b:f4:1a:a4:
ba:47:9b:d0:a8:ea:dd:3e:51:98:63:20:30:8d:4b:
df:f6:fe:6a:89:5a:f9:90:91:99:80:3b:46:d9:5e:
1a:fb:93:33:c8:f8:82:d2:a3:7c:3c:ed:9a:c5:96:
88:13:8d:77:28:c5:51:87:06:9b:2b:e8:6a:f5:d1:
46:3c:8f:81:a0:f6:9b:22:2f:de:60:03:bb:63:0a:
0f:94:e0:ad:c9:19:fa:79:bf:cb:51:3b:23:31:34:
67:59:94:4e:28:97:ee:67:75:d6:b5:7b:36:42:6b:
86:ec:eb:be:ce:85:3f:6f:c9:99:23:b6:fc:38:14:
16:6a:76:cb:61:a6:b9:f7:8d:78:ad:ba:9c:59:53:
3c:58:b8:ee:55:f1:5e:c0:6d:ed:e7:0a:19:1a:69:
1d:83:53:80:a6:a4:11:61:ea:dc:2f:74:8c:e3:0c:
bb:e9:2f:35:50:de:6d:09:74:55:60:25:a8:50:a0:
8b:44:37:eb:fd:69:4c:2d:1c:4a:78:4b:e5:a3:35:
d7:1c:41:9d:30:d7:25:ee:d1:e3:69:6d:6a:95:8a:
c2:65:c2:74:1a:a8:2a:38:0b:f0:17:8d:52:18:1e:
26:9d:a2:68:f8:14:cb:3c:fb:4c:e5:5e:8c:e4:27:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:CF:29:CC:5B:1F:C3:0F:1C:9F:C4:06:3E:37:00:7A:52:6E:54
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CbjPKcxbH8MPHJ_EBj43AHpSblQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:c8::/48
Signature Algorithm: sha256WithRSAEncryption
17:28:a5:69:d4:d4:9a:b1:a6:7b:03:47:2a:81:4b:43:8f:0e:
6e:c2:26:47:3b:13:fa:d7:c0:ff:60:ed:59:08:55:7e:13:e5:
8d:c6:73:6b:ad:12:fa:c6:88:04:47:f7:91:e4:10:50:ca:a7:
2c:7b:b9:1c:8a:c4:8e:26:5b:fe:a3:e7:0d:77:ee:aa:a9:fb:
fd:53:0f:f1:a0:a5:c0:e9:57:7f:2e:7f:90:e8:23:1b:3b:b9:
ea:d0:4d:0a:a3:92:f2:ec:bd:57:e0:10:8d:52:b8:10:b9:8a:
cc:80:e3:b4:2b:6d:11:3f:a3:07:9d:16:9d:a6:c5:b6:3a:a9:
03:35:05:e0:0e:39:8e:b7:7f:62:78:1e:e5:0f:1e:ed:2c:10:
cf:75:cb:e4:f7:77:01:b1:a3:64:92:76:30:03:51:e0:11:0f:
49:f7:d0:69:9b:9c:f9:ba:fd:69:79:dc:6d:79:7c:26:66:13:
11:83:aa:08:48:45:15:65:bf:c2:a5:2b:c1:7b:74:18:dd:67:
d7:5e:95:fb:20:10:9f:0a:75:db:27:0e:c0:c0:43:32:f6:f2:
82:38:0d:b0:75:5a:00:a4:24:f8:cf:e9:60:05:6c:e0:b4:a9:
e0:f1:6a:f4:83:45:22:fc:e0:ae:71:72:cf:e3:36:23:9b:40:
aa:5c:fd:8c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qeDXjjvd6w1BiQapQAbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWI4Y2YyOWNjNWIxZmMzMGYxYzlmYzQwNjNlMzcwMDdhNTI2ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQARDZdW+zczUTv0GqS6R5vQqOrd
PlGYYyAwjUvf9v5qiVr5kJGZgDtG2V4a+5MzyPiC0qN8PO2axZaIE413KMVRhwab
K+hq9dFGPI+BoPabIi/eYAO7YwoPlOCtyRn6eb/LUTsjMTRnWZROKJfuZ3XWtXs2
QmuG7Ou+zoU/b8mZI7b8OBQWanbLYaa59414rbqcWVM8WLjuVfFewG3t5woZGmkd
g1OApqQRYercL3SM4wy76S81UN5tCXRVYCWoUKCLRDfr/WlMLRxKeEvlozXXHEGd
MNcl7tHjaW1qlYrCZcJ0GqgqOAvwF41SGB4mnaJo+BTLPPtM5V6M5CeUQQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAm4zynMWx/DDxyfxAY+NwB6Um5UMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvQ2JqUEtjeGJIOE1QSEpfRUJqNDNBSHBTYmxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDI
MA0GCSqGSIb3DQEBCwUAA4IBAQAXKKVp1NSasaZ7A0cqgUtDjw5uwiZHOxP618D/
YO1ZCFV+E+WNxnNrrRL6xogER/eR5BBQyqcse7kcisSOJlv+o+cNd+6qqfv9Uw/x
oKXA6Vd/Ln+Q6CMbO7nq0E0Ko5Ly7L1X4BCNUrgQuYrMgOO0K20RP6MHnRadpsW2
OqkDNQXgDjmOt39ieB7lDx7tLBDPdcvk93cBsaNkknYwA1HgEQ9J99Bpm5z5uv1p
edxteXwmZhMRg6oISEUVZb/CpSvBe3QY3WfXXpX7IBCfCnXbJw7AwEMy9vKCOA2w
dVoApCT4z+lgBWzgtKng8Wr0g0Ui/OCucXLP4zYjm0CqXP2M
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org