Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qdI19nZJv6LrfJb2bN1OESxJ8K4.roa
File: qdI19nZJv6LrfJb2bN1OESxJ8K4.roa (raw, json)
Hash identifier: oTQjauIomM9Nj4RoiNuIcEnW4/tw2eUErG+o0aoSXdI=
Subject key identifier: A9:D2:35:F6:76:49:BF:A2:EB:7C:96:F6:6C:DD:4E:11:2C:49:F0:AE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F93A5D201262C3BA3E003239A9D7B65
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qdI19nZJv6LrfJb2bN1OESxJ8K4.roa
Signing time: Tue 06 Feb 2024 17:59:59 +0000
ROA not before: Tue 06 Feb 2024 17:59:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57417
IP address blocks: 2a0f:b241:30::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:93:a5:d2:01:26:2c:3b:a3:e0:03:23:9a:9d:7b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:59:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9d235f67649bfa2eb7c96f66cdd4e112c49f0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:f2:ad:eb:d5:07:18:5c:d2:6e:93:84:d9:
3d:c6:f8:81:9c:78:52:35:85:76:d4:67:d5:34:e2:
7b:ca:fd:c0:96:eb:c5:59:4e:d7:1a:94:cf:25:be:
96:ae:e1:09:66:e7:7a:87:56:6c:89:84:bd:70:90:
5e:80:3b:63:5f:9f:a3:4f:6c:f6:51:2f:27:96:c8:
78:bf:11:12:52:3b:ad:c7:e9:05:6b:8a:62:a7:2d:
55:09:e6:bb:fd:0a:79:ca:39:bc:19:92:02:f7:2e:
b4:e9:29:c8:bd:3b:cf:12:a5:11:9a:d9:3b:dc:6b:
e0:20:b6:bc:1e:ce:1b:c7:1c:dd:03:80:76:01:b5:
5c:2f:da:bd:98:f9:30:0c:d5:12:fa:01:48:a5:13:
d7:14:3c:5e:81:03:7b:c5:e0:b1:9d:00:85:9b:b1:
11:7a:0e:be:91:05:2a:07:8b:87:5c:53:ab:60:20:
19:b4:7e:59:04:87:64:0c:cd:d8:b0:62:21:76:cd:
8b:90:95:7c:fd:37:e7:c6:9f:f6:cd:bd:a4:03:5a:
a6:46:89:61:b0:83:6d:ec:72:57:d1:91:fb:1f:59:
62:e3:99:1a:b9:1c:56:68:8e:03:82:0f:d8:68:09:
27:83:2b:dd:fb:c2:6d:70:33:c9:da:ab:1f:2a:21:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:35:F6:76:49:BF:A2:EB:7C:96:F6:6C:DD:4E:11:2C:49:F0:AE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qdI19nZJv6LrfJb2bN1OESxJ8K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:30::/48
Signature Algorithm: sha256WithRSAEncryption
11:b7:28:b0:a1:01:17:3a:a9:94:41:7e:86:83:00:b0:f7:3f:
de:c1:5d:5b:67:fd:93:e4:0f:a4:8d:33:d8:bb:82:e6:ae:d7:
89:b5:25:63:8a:75:1a:5d:9e:65:3d:c1:ff:f0:0f:f9:3a:04:
96:24:13:1e:39:4f:a7:7f:4d:1c:0c:46:31:39:73:e2:30:f5:
9c:e4:e6:19:c8:8a:55:dd:24:17:2d:11:e7:df:96:fb:49:51:
2f:f5:d4:1c:6c:81:2a:85:a2:6e:a1:1d:0e:a3:bb:b8:62:8b:
2a:d7:e9:3f:7c:96:6e:9c:5e:dc:9b:7c:d2:07:30:b3:27:f3:
fe:a0:44:b9:b0:63:5d:a8:78:27:9e:b4:5b:91:ce:78:3f:ec:
79:fe:90:72:f8:44:46:d1:30:55:37:48:6b:6a:db:0c:05:31:
88:c7:2e:c0:a6:e4:06:25:c5:c1:05:96:b8:09:4d:2c:c7:e1:
68:8f:a0:61:92:a7:61:03:8c:12:39:db:9b:c4:d8:42:e0:aa:
b7:f8:a9:7c:d1:85:56:e1:d3:a2:20:be:c5:d5:2b:d2:51:3b:
0d:64:4b:01:84:b1:9a:e0:2d:c9:ad:7d:1b:49:16:66:9e:83:
bc:2a:a5:58:0f:22:bb:e7:2d:32:44:ab:69:82:46:2b:ec:24:
3b:e8:cc:2e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/k6XSASYsO6PgAyOanXtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTc1OTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWQyMzVmNjc2NDliZmEyZWI3Yzk2ZjY2Y2RkNGUxMTJjNDlmMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtfyrevVBxhc0m6ThNk9xviBnHhS
NYV21GfVNOJ7yv3AluvFWU7XGpTPJb6WruEJZud6h1ZsiYS9cJBegDtjX5+jT2z2
US8nlsh4vxESUjutx+kFa4pipy1VCea7/Qp5yjm8GZIC9y606SnIvTvPEqURmtk7
3GvgILa8Hs4bxxzdA4B2AbVcL9q9mPkwDNUS+gFIpRPXFDxegQN7xeCxnQCFm7ER
eg6+kQUqB4uHXFOrYCAZtH5ZBIdkDM3YsGIhds2LkJV8/Tfnxp/2zb2kA1qmRolh
sINt7HJX0ZH7H1li45kauRxWaI4Dgg/YaAkngyvd+8JtcDPJ2qsfKiG6MwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKnSNfZ2Sb+i63yW9mzdThEsSfCuMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvcWRJMTluWkp2NkxyZkpiMmJOMU9FU3hKOEs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQAw
MA0GCSqGSIb3DQEBCwUAA4IBAQARtyiwoQEXOqmUQX6GgwCw9z/ewV1bZ/2T5A+k
jTPYu4LmrteJtSVjinUaXZ5lPcH/8A/5OgSWJBMeOU+nf00cDEYxOXPiMPWc5OYZ
yIpV3SQXLRHn35b7SVEv9dQcbIEqhaJuoR0Oo7u4Yosq1+k/fJZunF7cm3zSBzCz
J/P+oES5sGNdqHgnnrRbkc54P+x5/pBy+ERG0TBVN0hratsMBTGIxy7ApuQGJcXB
BZa4CU0sx+Foj6BhkqdhA4wSOdubxNhC4Kq3+Kl80YVW4dOiIL7F1SvSUTsNZEsB
hLGa4C3JrX0bSRZmnoO8KqVYDyK75y0yRKtpgkYr7CQ76Mwu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org