Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eG8VLbPvtkXseVd7g1vdSe7l0OI.roa
File: eG8VLbPvtkXseVd7g1vdSe7l0OI.roa (raw, json)
Hash identifier: E4NiH6s2Z4bfZSkM/cJdUXlubY03h/b889WOi3QBWks=
Subject key identifier: 78:6F:15:2D:B3:EF:B6:45:EC:79:57:7B:83:5B:DD:49:EE:E5:D0:E2
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAAD0B577C5FFE8B9CCD1FC7342594D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eG8VLbPvtkXseVd7g1vdSe7l0OI.roa
Signing time: Tue 06 Feb 2024 18:25:17 +0000
ROA not before: Tue 06 Feb 2024 18:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202201
IP address blocks: 2a0f:b241:e1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:d0:b5:77:c5:ff:e8:b9:cc:d1:fc:73:42:59:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=786f152db3efb645ec79577b835bdd49eee5d0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:0f:83:03:32:7d:cc:78:c4:53:4e:1c:6a:
45:84:5f:c5:c4:f8:74:b0:cf:70:e8:ca:24:f9:ac:
60:8b:c7:a6:66:ba:f6:df:35:2b:8f:cc:10:8c:d0:
07:d5:cf:c6:d8:b5:8a:c5:94:18:a7:7e:12:19:07:
25:59:b1:3b:15:b9:3f:5b:ab:15:f1:c0:7c:f8:4e:
22:66:b6:4a:c7:d1:e6:de:3d:2b:f9:54:85:98:66:
92:01:b7:5b:31:ac:6f:1c:cb:d9:73:7a:fe:08:b4:
29:55:7f:a1:9d:1b:f9:d8:a3:42:92:3f:fb:d0:1a:
0c:7e:32:bc:dd:38:c3:08:91:64:36:b4:8b:0e:94:
06:6e:2c:2a:fa:a6:be:37:8f:67:74:3b:9f:51:9d:
f7:a5:9d:02:d7:9c:46:a3:0a:7e:be:b3:64:ad:62:
b6:08:e1:a0:97:ec:4c:18:76:28:f2:75:30:68:1f:
81:09:f7:b1:ec:a9:cf:fa:94:f1:a1:b4:ff:a0:49:
9e:09:e3:9f:cc:0c:3f:5e:d1:04:22:7c:7e:b9:54:
44:02:88:c9:2b:63:b2:21:a0:14:e5:05:09:24:83:
b4:d0:68:87:48:a5:97:f9:3d:31:83:e1:ca:39:bd:
0a:ab:15:cb:0c:56:46:22:fd:ba:30:b0:f0:73:e7:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:15:2D:B3:EF:B6:45:EC:79:57:7B:83:5B:DD:49:EE:E5:D0:E2
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eG8VLbPvtkXseVd7g1vdSe7l0OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e1::/48
Signature Algorithm: sha256WithRSAEncryption
11:be:98:9a:de:3d:c1:f9:83:36:b8:fd:cc:a5:d7:18:ee:ba:
95:54:90:c8:b3:16:7a:88:39:8a:d3:5b:dd:be:c2:92:61:01:
a3:f0:a7:0e:c2:6a:8f:87:01:2f:24:90:80:dd:89:26:78:43:
d2:31:ab:c4:6e:e9:63:f2:50:29:a0:4e:6f:97:5a:d1:8c:c5:
86:85:01:25:fb:f1:37:af:50:fe:c4:28:0e:21:fe:25:25:a4:
e7:6f:15:53:a1:e1:cb:3a:5e:21:6c:20:a9:3d:d3:92:90:86:
db:58:f2:6f:fa:f9:2b:b3:05:1a:dc:9e:a0:a1:17:b6:30:5e:
49:62:ee:47:4e:a6:5b:98:4d:18:6b:93:ae:53:04:2d:3f:9c:
5f:cb:d2:c1:9e:66:41:2c:c0:d0:c0:6d:0b:35:81:b7:97:24:
cb:81:6e:10:1d:83:0b:55:a0:02:5c:fa:1c:6f:5e:bf:bc:3e:
f4:f7:53:ac:ba:3f:86:79:69:6d:44:ee:43:94:83:06:97:b8:
ff:77:0c:d8:75:14:4c:89:9c:cc:30:05:94:a4:55:ca:af:ab:
89:ba:ad:5d:bd:70:2e:62:2c:f2:dc:14:8a:3f:ac:ec:d2:61:
13:ca:06:9a:d5:c8:14:aa:e8:4b:e5:04:80:75:84:9f:dd:ab:
2b:69:36:cc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qtC1d8X/6LnM0fxzQllNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODZmMTUyZGIzZWZiNjQ1ZWM3OTU3N2I4MzViZGQ0OWVlZTVkMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+EPgwMyfcx4xFNOHGpFhF/FxPh0
sM9w6Mok+axgi8emZrr23zUrj8wQjNAH1c/G2LWKxZQYp34SGQclWbE7Fbk/W6sV
8cB8+E4iZrZKx9Hm3j0r+VSFmGaSAbdbMaxvHMvZc3r+CLQpVX+hnRv52KNCkj/7
0BoMfjK83TjDCJFkNrSLDpQGbiwq+qa+N49ndDufUZ33pZ0C15xGowp+vrNkrWK2
COGgl+xMGHYo8nUwaB+BCfex7KnP+pTxobT/oEmeCeOfzAw/XtEEInx+uVREAojJ
K2OyIaAU5QUJJIO00GiHSKWX+T0xg+HKOb0KqxXLDFZGIv26MLDwc+fULQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHhvFS2z77ZF7HlXe4Nb3Unu5dDiMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvZUc4VkxiUHZ0a1hzZVZkN2cxdmRTZTdsME9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDh
MA0GCSqGSIb3DQEBCwUAA4IBAQARvpia3j3B+YM2uP3MpdcY7rqVVJDIsxZ6iDmK
01vdvsKSYQGj8KcOwmqPhwEvJJCA3YkmeEPSMavEbulj8lApoE5vl1rRjMWGhQEl
+/E3r1D+xCgOIf4lJaTnbxVToeHLOl4hbCCpPdOSkIbbWPJv+vkrswUa3J6goRe2
MF5JYu5HTqZbmE0Ya5OuUwQtP5xfy9LBnmZBLMDQwG0LNYG3lyTLgW4QHYMLVaAC
XPocb16/vD7091Osuj+GeWltRO5DlIMGl7j/dwzYdRRMiZzMMAWUpFXKr6uJuq1d
vXAuYizy3BSKP6zs0mETygaa1cgUquhL5QSAdYSf3asraTbM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org