Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/aWTA1rxCCH_5yP3MEdNNxuL0eCg.roa
File: aWTA1rxCCH_5yP3MEdNNxuL0eCg.roa (raw, json)
Hash identifier: IoFw4csPFrOhqo8b9lhzaF5ZQ2vj5iAr6n8z88hzrf0=
Subject key identifier: 69:64:C0:D6:BC:42:08:7F:F9:C8:FD:CC:11:D3:4D:C6:E2:F4:78:28
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F96A62E0BE8FEA2946BEBE26A2DFBCA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/aWTA1rxCCH_5yP3MEdNNxuL0eCg.roa
Signing time: Tue 06 Feb 2024 18:03:15 +0000
ROA not before: Tue 06 Feb 2024 18:03:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44354
IP address blocks: 2a0f:b241:62::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:96:a6:2e:0b:e8:fe:a2:94:6b:eb:e2:6a:2d:fb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:03:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6964c0d6bc42087ff9c8fdcc11d34dc6e2f47828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ab:f4:38:77:4c:95:2d:a9:22:5a:bf:1d:81:
d0:0c:33:e7:db:07:13:8b:45:6e:bb:33:0b:6e:14:
d0:69:f3:50:ba:70:c8:8f:de:83:8e:29:1e:85:dc:
33:12:1e:6d:e1:ad:67:e1:d5:20:e4:60:b0:bb:b3:
6e:66:9b:46:17:0c:7c:6b:d6:34:47:25:57:94:ea:
d5:92:79:60:be:d5:e4:52:a2:a1:07:6c:8c:ce:f2:
fd:f0:de:cf:0f:10:c9:c7:87:ff:f0:a5:c4:c0:7b:
d5:4f:d7:4f:75:6c:c4:db:86:46:0c:f7:83:83:af:
7b:68:b6:53:4f:36:4b:e2:3d:73:fd:d8:8b:3a:db:
91:de:07:92:e6:f9:10:fb:45:09:df:b9:57:38:5b:
b8:65:94:7c:e2:19:52:d0:7d:a2:03:52:92:f0:e6:
58:70:9d:93:71:0b:e1:70:50:4e:54:36:8a:ad:77:
ba:16:06:3e:f0:b7:86:39:2b:d8:66:ff:0c:a4:21:
95:0d:a8:b8:90:ce:a2:86:af:aa:32:52:a0:d6:d8:
79:db:22:a2:0a:59:a1:09:d1:e1:b1:8a:32:e5:d9:
e4:70:1f:51:4d:e5:1d:39:61:2e:62:ec:45:ab:4d:
74:45:80:ab:5e:a8:84:e3:f3:9c:3c:91:3a:5a:fb:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:64:C0:D6:BC:42:08:7F:F9:C8:FD:CC:11:D3:4D:C6:E2:F4:78:28
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/aWTA1rxCCH_5yP3MEdNNxuL0eCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:62::/48
Signature Algorithm: sha256WithRSAEncryption
6f:79:1f:80:4f:45:b1:ef:d1:5b:40:71:65:dd:56:1d:a0:15:
df:af:24:b9:e1:da:ce:6e:a3:5e:59:68:d0:3d:88:9a:ff:b0:
c5:c2:52:8e:2e:c2:46:e5:ac:19:06:d7:65:fe:1e:69:b7:96:
c7:09:b5:b8:cf:f5:eb:60:e0:d5:f8:75:35:17:b5:20:0d:14:
82:aa:f4:9a:54:28:20:06:dc:6a:18:07:fb:e3:c9:5a:f8:48:
cc:5e:75:5b:4f:57:56:93:98:f1:31:6a:01:e2:35:62:e8:17:
85:14:ed:aa:71:ef:9a:d3:f9:8d:dd:f7:4f:3d:36:70:dd:d0:
83:78:14:52:b9:5b:dd:71:7b:6b:64:32:62:f9:03:71:ed:ed:
e9:27:cc:ed:9d:d5:e8:c9:e9:26:ef:14:13:89:35:3b:bc:83:
33:09:60:76:e1:c7:dc:00:08:f4:b7:87:48:a1:53:0b:7f:29:
c5:9e:8b:5f:ff:77:b6:7d:35:f5:9a:79:5b:23:76:ac:cc:af:
21:49:bb:56:83:13:6c:cd:e5:6d:fd:a5:a9:6d:ca:42:b5:18:
d9:6d:e2:9a:fc:ea:f6:30:c2:73:b9:4d:46:29:36:86:2a:c7:
ff:d5:a6:f4:5d:02:cf:10:5d:7a:cb:df:f5:32:67:d2:2c:a7:
f1:c1:0c:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/lqYuC+j+opRr6+JqLfvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgwMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTY0YzBkNmJjNDIwODdmZjljOGZkY2MxMWQzNGRjNmUyZjQ3ODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qv0OHdMlS2pIlq/HYHQDDPn2wcT
i0VuuzMLbhTQafNQunDIj96DjikehdwzEh5t4a1n4dUg5GCwu7NuZptGFwx8a9Y0
RyVXlOrVknlgvtXkUqKhB2yMzvL98N7PDxDJx4f/8KXEwHvVT9dPdWzE24ZGDPeD
g697aLZTTzZL4j1z/diLOtuR3geS5vkQ+0UJ37lXOFu4ZZR84hlS0H2iA1KS8OZY
cJ2TcQvhcFBOVDaKrXe6FgY+8LeGOSvYZv8MpCGVDai4kM6ihq+qMlKg1th52yKi
ClmhCdHhsYoy5dnkcB9RTeUdOWEuYuxFq010RYCrXqiE4/OcPJE6WvspRQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGlkwNa8Qgh/+cj9zBHTTcbi9HgoMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvYVdUQTFyeENDSF81eVAzTUVkTk54dUwwZUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQBi
MA0GCSqGSIb3DQEBCwUAA4IBAQBveR+AT0Wx79FbQHFl3VYdoBXfryS54drObqNe
WWjQPYia/7DFwlKOLsJG5awZBtdl/h5pt5bHCbW4z/XrYODV+HU1F7UgDRSCqvSa
VCggBtxqGAf748la+EjMXnVbT1dWk5jxMWoB4jVi6BeFFO2qce+a0/mN3fdPPTZw
3dCDeBRSuVvdcXtrZDJi+QNx7e3pJ8ztndXoyekm7xQTiTU7vIMzCWB24cfcAAj0
t4dIoVMLfynFnotf/3e2fTX1mnlbI3aszK8hSbtWgxNszeVt/aWpbcpCtRjZbeKa
/Or2MMJzuU1GKTaGKsf/1ab0XQLPEF16y9/1MmfSLKfxwQw/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org