Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uiEI50MQ2niHt05gj8EI4PFCHEk.roa
File: uiEI50MQ2niHt05gj8EI4PFCHEk.roa (raw, json)
Hash identifier: 66+k12pJ0MIzdpEPNORfhcHDkmI8tp+THWpVSEBQqR0=
Subject key identifier: BA:21:08:E7:43:10:DA:78:87:B7:4E:60:8F:C1:08:E0:F1:42:1C:49
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0194303E55C14D5A6A785F3B87407BD47F41
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uiEI50MQ2niHt05gj8EI4PFCHEk.roa
Signing time: Sat 04 Jan 2025 07:36:18 +0000
ROA not before: Sat 04 Jan 2025 07:36:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 2a0f:b242:6000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 17 Feb 2025 15:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:30:3e:55:c1:4d:5a:6a:78:5f:3b:87:40:7b:d4:7f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 4 07:36:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba2108e74310da7887b74e608fc108e0f1421c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:c7:9d:cf:27:5c:d8:31:6a:ca:f3:53:e7:
9c:66:53:56:9c:92:9b:f8:2c:f0:29:84:eb:56:a6:
84:9f:c4:a1:68:cd:e6:db:66:8b:a9:b8:cd:6a:ec:
8f:d4:b4:eb:6c:57:9e:f1:5f:8a:29:24:66:77:30:
f1:7e:b7:df:5a:a8:98:8f:10:b7:e9:55:88:eb:84:
63:1d:31:1c:3e:ef:3f:6c:e0:d5:44:e5:f6:c5:fe:
f4:6a:f5:3d:ea:14:ac:64:09:16:a1:1c:d9:4d:1e:
06:e2:da:ad:0a:66:73:d6:41:30:89:e2:3f:93:8e:
e8:60:0c:c0:6b:5f:6c:39:36:1e:cd:81:29:4e:17:
e8:20:9a:20:8a:14:95:36:87:6c:91:2b:27:e7:e1:
4d:cb:e4:f6:4b:10:76:5d:05:47:a6:e8:fa:81:1d:
0d:e4:36:cc:62:4d:9c:f2:bb:00:5c:1d:92:57:23:
61:2d:73:47:75:9f:98:cb:a3:c8:77:f7:4a:6a:28:
a6:1f:7e:ee:b2:79:1b:74:00:2e:7a:d9:06:80:e3:
3d:5b:3f:52:4b:86:d0:02:45:8e:cb:8f:89:db:8b:
32:7b:fd:50:40:b2:a4:60:db:45:6d:4e:e9:e7:58:
8d:d4:5b:45:02:e7:b2:d7:2b:63:ac:77:72:c3:c6:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:21:08:E7:43:10:DA:78:87:B7:4E:60:8F:C1:08:E0:F1:42:1C:49
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/uiEI50MQ2niHt05gj8EI4PFCHEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b242:6000::/36
Signature Algorithm: sha256WithRSAEncryption
12:60:2a:a9:61:91:1c:76:52:6e:4d:59:2f:85:8b:e0:eb:99:
e4:5d:a1:55:d1:65:ac:c7:60:5f:9d:33:2d:4f:17:67:a9:3c:
6d:50:b9:77:a9:d7:de:ca:70:5e:8c:fa:fc:b6:83:de:da:c0:
f9:83:f4:b2:24:88:53:c4:4b:31:fe:19:2a:07:20:65:0e:7a:
b4:1c:2f:3a:06:ec:dd:b9:25:b0:74:72:6a:cb:cc:14:c5:1c:
f6:7a:5f:e4:ec:fb:0c:db:17:41:45:23:42:13:dc:2d:41:e5:
86:7c:d0:28:25:ea:0d:00:b4:86:bf:77:b2:04:5e:42:58:a3:
c3:c2:2b:6c:87:90:6f:b5:58:28:c6:9b:d7:9b:d2:0d:b7:08:
ed:38:03:a7:d2:12:e0:6c:35:c9:5b:87:13:99:e9:aa:81:69:
0b:a5:c8:6a:5f:bb:ad:ad:f5:64:d7:c2:ac:08:93:b5:1f:9f:
29:9e:fd:e3:57:ff:c6:ae:b4:f9:1a:19:16:e2:04:3f:18:7a:
08:91:e5:d8:b2:b7:cd:61:ea:83:c5:b6:c2:e6:0f:61:c6:eb:
1e:e2:7d:e2:dd:c6:be:88:3a:cc:69:a9:02:e4:a7:f6:30:00:
7c:55:43:27:0d:6f:30:f8:a3:88:67:78:8a:bf:36:bb:7f:b6:
68:a4:b9:3f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQwPlXBTVpqeF87h0B71H9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUwMTA0MDczNjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTIxMDhlNzQzMTBkYTc4ODdiNzRlNjA4ZmMxMDhlMGYxNDIxYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIDHnc8nXNgxasrzU+ecZlNWnJKb
+CzwKYTrVqaEn8ShaM3m22aLqbjNauyP1LTrbFee8V+KKSRmdzDxfrffWqiYjxC3
6VWI64RjHTEcPu8/bODVROX2xf70avU96hSsZAkWoRzZTR4G4tqtCmZz1kEwieI/
k47oYAzAa19sOTYezYEpThfoIJogihSVNodskSsn5+FNy+T2SxB2XQVHpuj6gR0N
5DbMYk2c8rsAXB2SVyNhLXNHdZ+Yy6PId/dKaiimH37usnkbdAAuetkGgOM9Wz9S
S4bQAkWOy4+J24sye/1QQLKkYNtFbU7p51iN1FtFAuey1ytjrHdyw8YWRQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLohCOdDENp4h7dOYI/BCODxQhxJMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvdWlFSTUwTVEybmlIdDA1Z2o4RUk0UEZDSEVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKg+yQmAw
DQYJKoZIhvcNAQELBQADggEBABJgKqlhkRx2Um5NWS+Fi+DrmeRdoVXRZazHYF+d
My1PF2epPG1QuXep197KcF6M+vy2g97awPmD9LIkiFPESzH+GSoHIGUOerQcLzoG
7N25JbB0cmrLzBTFHPZ6X+Ts+wzbF0FFI0IT3C1B5YZ80Cgl6g0AtIa/d7IEXkJY
o8PCK2yHkG+1WCjGm9eb0g23CO04A6fSEuBsNclbhxOZ6aqBaQulyGpfu62t9WTX
wqwIk7Ufnyme/eNX/8autPkaGRbiBD8YegiR5diyt81h6oPFtsLmD2HG6x7ifeLd
xr6IOsxpqQLkp/YwAHxVQycNbzD4o4hneIq/Nrt/tmikuT8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:24:59 2025 by rpki-client