Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/D3n22krmN7ZesG7iRfFQd63GHX4.roa
File: D3n22krmN7ZesG7iRfFQd63GHX4.roa (raw, json)
Hash identifier: sXJ02cKxRZ4unh5aAr9Mu8ZsuJFRmbzB8Q5puBL8+B4=
Subject key identifier: 0F:79:F6:DA:4A:E6:37:B6:5E:B0:6E:E2:45:F1:50:77:AD:C6:1D:7E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F9490F938C7A40EC2919E3DB1FB9E0A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/D3n22krmN7ZesG7iRfFQd63GHX4.roa
Signing time: Tue 06 Feb 2024 18:00:59 +0000
ROA not before: Tue 06 Feb 2024 18:00:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200009
IP address blocks: 2a0f:b241:34::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:94:90:f9:38:c7:a4:0e:c2:91:9e:3d:b1:fb:9e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:00:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f79f6da4ae637b65eb06ee245f15077adc61d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4a:03:01:16:4a:b9:06:64:7c:dd:46:98:2b:
d0:5e:de:4a:61:3a:d3:1f:bc:ea:2c:ff:17:2e:d7:
93:53:bb:ca:ec:e7:18:d7:e6:38:cf:cf:0d:6c:f6:
e2:77:8b:01:81:a9:c1:e9:e5:90:fd:7f:a6:e8:f9:
d5:1d:3a:97:3e:02:da:2f:88:2e:f7:e5:d7:c2:b6:
cf:70:8a:18:a2:24:3d:d0:8c:85:c3:33:04:0d:87:
9f:b3:a9:66:59:cf:b7:90:fe:6d:6f:31:6a:74:b7:
13:62:48:4a:08:89:92:e0:6b:0f:0e:92:59:c3:ce:
d0:43:d8:0b:40:a4:de:c5:bd:8f:35:c2:11:3b:c2:
02:c5:af:b5:d2:2a:35:77:1e:ce:4a:3b:74:e9:19:
ac:8a:24:c4:e3:7d:d0:26:80:fd:58:49:be:1f:7d:
8c:05:85:18:2f:c1:6b:01:66:ac:a5:f6:ce:db:f8:
14:db:12:3d:fd:6c:f6:91:c9:29:b8:60:ec:9e:ad:
92:c1:b9:03:72:8d:4e:09:06:31:d6:ed:73:85:be:
dd:8a:98:dd:5c:62:82:7f:20:03:a0:13:02:8f:1e:
f3:69:d1:0d:3a:e5:90:dc:ad:2d:03:6f:da:c8:ad:
32:e6:47:05:44:f9:60:b1:f9:96:ff:fa:7d:b0:61:
e9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:79:F6:DA:4A:E6:37:B6:5E:B0:6E:E2:45:F1:50:77:AD:C6:1D:7E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/D3n22krmN7ZesG7iRfFQd63GHX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:34::/48
Signature Algorithm: sha256WithRSAEncryption
06:9e:eb:69:d3:7e:bd:31:37:0a:9e:5a:77:2b:cc:fc:c4:d5:
61:0c:c1:a7:3d:46:4e:54:12:6e:e1:a6:56:85:5d:d3:36:26:
de:6b:56:18:b4:16:c9:d1:58:83:e3:ea:1a:11:52:62:0c:b4:
28:af:4f:80:ed:ee:b1:1b:d6:a8:b2:1c:70:87:c4:93:cc:42:
eb:d0:68:5e:cb:7d:f1:e9:12:af:be:db:1b:98:26:a5:30:f2:
36:22:e8:10:6c:e3:1f:c7:a6:a9:e3:59:76:2b:fb:9e:75:ef:
e7:a0:91:c9:54:95:94:5c:80:85:ed:31:0d:d8:3d:c7:0f:69:
26:63:48:39:69:55:fd:b6:ec:29:8e:0d:ac:01:d4:88:c9:3a:
5a:c7:c4:cf:fe:85:8e:c8:7c:65:ab:1a:3f:61:fc:fb:97:e9:
5f:63:e9:b9:46:95:2c:d0:ea:a5:4a:d1:38:18:37:58:80:bd:
45:57:50:6b:7f:0b:82:c9:73:b3:13:43:4c:60:a0:54:8b:2f:
63:26:95:0f:83:43:e1:c5:28:76:dc:40:71:e0:62:a6:cc:a6:
7b:2d:6f:3e:eb:af:fb:23:94:40:77:e4:68:cb:be:10:ba:88:
be:81:e5:2a:b2:8b:e4:84:94:6e:c8:56:bc:bb:6a:c5:df:28:
dd:f6:30:6d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/lJD5OMekDsKRnj2x+54KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjc5ZjZkYTRhZTYzN2I2NWViMDZlZTI0NWYxNTA3N2FkYzYxZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEoDARZKuQZkfN1GmCvQXt5KYTrT
H7zqLP8XLteTU7vK7OcY1+Y4z88NbPbid4sBganB6eWQ/X+m6PnVHTqXPgLaL4gu
9+XXwrbPcIoYoiQ90IyFwzMEDYefs6lmWc+3kP5tbzFqdLcTYkhKCImS4GsPDpJZ
w87QQ9gLQKTexb2PNcIRO8ICxa+10io1dx7OSjt06RmsiiTE433QJoD9WEm+H32M
BYUYL8FrAWaspfbO2/gU2xI9/Wz2kckpuGDsnq2SwbkDco1OCQYx1u1zhb7dipjd
XGKCfyADoBMCjx7zadENOuWQ3K0tA2/ayK0y5kcFRPlgsfmW//p9sGHpzQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA959tpK5je2XrBu4kXxUHetxh1+MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvRDNuMjJrcm1ON1plc0c3aVJmRlFkNjNHSFg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQA0
MA0GCSqGSIb3DQEBCwUAA4IBAQAGnutp0369MTcKnlp3K8z8xNVhDMGnPUZOVBJu
4aZWhV3TNibea1YYtBbJ0ViD4+oaEVJiDLQor0+A7e6xG9aoshxwh8STzELr0Ghe
y33x6RKvvtsbmCalMPI2IugQbOMfx6ap41l2K/uede/noJHJVJWUXICF7TEN2D3H
D2kmY0g5aVX9tuwpjg2sAdSIyTpax8TP/oWOyHxlqxo/Yfz7l+lfY+m5RpUs0Oql
StE4GDdYgL1FV1BrfwuCyXOzE0NMYKBUiy9jJpUPg0PhxSh23EBx4GKmzKZ7LW8+
66/7I5RAd+Roy74Quoi+geUqsovkhJRuyFa8u2rF3yjd9jBt
-----END CERTIFICATE-----
Generated at Wed Feb 7 09:08:19 2024 by rpki-client on console-fra.rpki-client.org