Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YvOVNhaNFOxIjGb4WrdHtRBL8F8.roa
File: YvOVNhaNFOxIjGb4WrdHtRBL8F8.roa (raw, json)
Hash identifier: kAOHF+nBaU7grgAec+4iGMk+LdRhMmGLCaQrEs2OusI=
Subject key identifier: 62:F3:95:36:16:8D:14:EC:48:8C:66:F8:5A:B7:47:B5:10:4B:F0:5F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F9491CB77EC3F463BB12F5A9D593269
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YvOVNhaNFOxIjGb4WrdHtRBL8F8.roa
Signing time: Tue 06 Feb 2024 18:00:59 +0000
ROA not before: Tue 06 Feb 2024 18:00:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200211
IP address blocks: 2a0f:b241:35::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:94:91:cb:77:ec:3f:46:3b:b1:2f:5a:9d:59:32:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:00:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62f39536168d14ec488c66f85ab747b5104bf05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:bd:a2:c3:c7:60:9a:62:8f:34:c9:af:04:
8a:e6:a0:80:30:53:fa:d1:c2:a4:76:9a:20:11:72:
8b:7a:ff:a4:d9:9a:e3:bc:6d:9a:13:75:d5:ed:db:
e1:e3:68:5c:a9:c5:da:26:be:a7:61:4e:0b:b2:21:
1c:93:80:00:21:d9:4d:e7:da:7d:c8:02:41:a6:d3:
62:e9:8e:ad:a9:3a:1b:c0:4e:5f:56:8f:69:0c:25:
b2:02:94:cd:1d:7d:cd:69:87:d5:9f:0b:b5:99:ea:
52:8f:df:88:23:93:dc:c1:aa:aa:bb:0e:2b:8a:49:
6b:42:cb:c9:7c:c3:1c:8d:11:ae:c0:df:c9:fc:27:
54:31:87:2f:24:18:d6:4f:22:bf:bb:a8:14:fa:0d:
d3:11:25:56:fa:a3:c7:0d:06:bd:82:9c:33:29:6b:
3d:57:6f:39:be:a2:8c:85:1a:32:02:c9:95:d4:00:
23:ec:76:84:26:06:0a:6f:57:7d:bf:4b:ad:c9:4b:
f0:ab:5d:19:7b:7b:84:cb:21:0e:95:d0:10:76:49:
87:f0:77:c8:35:3d:8e:eb:7a:2d:2c:71:2a:1d:13:
cb:59:52:ad:88:78:b2:02:ea:ab:dd:ce:87:57:13:
f9:92:80:0f:66:d5:b6:66:ab:8e:b6:ce:1b:8a:18:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:95:36:16:8D:14:EC:48:8C:66:F8:5A:B7:47:B5:10:4B:F0:5F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YvOVNhaNFOxIjGb4WrdHtRBL8F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:35::/48
Signature Algorithm: sha256WithRSAEncryption
2b:9d:59:95:8e:07:15:94:50:77:91:55:ae:ae:89:f3:fe:b0:
1c:82:bc:70:05:d0:32:93:77:97:3d:09:4c:25:04:d1:d1:89:
f3:45:27:9c:01:a4:6b:0b:ec:19:24:1b:c0:a0:78:10:4d:f1:
cd:9f:f6:a4:08:2c:c7:c0:54:75:32:33:87:93:99:8d:bf:61:
84:bd:79:ab:0a:19:bb:19:42:c3:fa:27:c9:3c:3c:51:2e:01:
c5:1f:bb:26:14:46:0f:dc:74:b0:9e:ad:4b:72:9a:f5:3c:70:
5c:33:3b:a0:b4:c4:4f:6b:d8:de:47:9e:85:ab:e7:a2:58:7d:
97:3d:06:b0:e6:b5:4a:55:79:ed:de:b0:e8:41:57:c7:1c:f5:
e5:53:4b:0d:b0:00:2f:77:e3:75:ac:ef:48:b9:3b:b2:db:0a:
7c:5c:aa:0b:ed:d8:a0:bf:97:db:92:1e:8a:1c:64:21:17:9a:
28:05:d2:b7:c0:d2:62:3f:2e:65:98:18:b3:b2:3a:83:8f:79:
91:ad:6c:5f:af:fb:e8:fc:07:35:50:74:ad:8d:2f:96:b4:d9:
f0:7c:70:ef:ae:a7:31:b3:49:17:33:4f:a9:73:80:20:a7:1d:
26:b2:5e:5a:ab:4e:f2:63:93:40:a2:67:22:bf:82:f4:55:39:
e1:ba:1a:25
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/lJHLd+w/RjuxL1qdWTJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmYzOTUzNjE2OGQxNGVjNDg4YzY2Zjg1YWI3NDdiNTEwNGJmMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVq9osPHYJpijzTJrwSK5qCAMFP6
0cKkdpogEXKLev+k2ZrjvG2aE3XV7dvh42hcqcXaJr6nYU4LsiEck4AAIdlN59p9
yAJBptNi6Y6tqTobwE5fVo9pDCWyApTNHX3NaYfVnwu1mepSj9+II5Pcwaqquw4r
iklrQsvJfMMcjRGuwN/J/CdUMYcvJBjWTyK/u6gU+g3TESVW+qPHDQa9gpwzKWs9
V285vqKMhRoyAsmV1AAj7HaEJgYKb1d9v0utyUvwq10Ze3uEyyEOldAQdkmH8HfI
NT2O63otLHEqHRPLWVKtiHiyAuqr3c6HVxP5koAPZtW2ZquOts4bihi0XQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGLzlTYWjRTsSIxm+Fq3R7UQS/BfMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvWXZPVk5oYU5GT3hJakdiNFdyZEh0UkJMOEY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQA1
MA0GCSqGSIb3DQEBCwUAA4IBAQArnVmVjgcVlFB3kVWuronz/rAcgrxwBdAyk3eX
PQlMJQTR0YnzRSecAaRrC+wZJBvAoHgQTfHNn/akCCzHwFR1MjOHk5mNv2GEvXmr
Chm7GULD+ifJPDxRLgHFH7smFEYP3HSwnq1Lcpr1PHBcMzugtMRPa9jeR56Fq+ei
WH2XPQaw5rVKVXnt3rDoQVfHHPXlU0sNsAAvd+N1rO9IuTuy2wp8XKoL7digv5fb
kh6KHGQhF5ooBdK3wNJiPy5lmBizsjqDj3mRrWxfr/vo/Ac1UHStjS+WtNnwfHDv
rqcxs0kXM0+pc4Agpx0msl5aq07yY5NAomciv4L0VTnhuhol
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org