Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/v3AzcviVfdPEXICIQ6Wr6KjwZBI.roa
File: v3AzcviVfdPEXICIQ6Wr6KjwZBI.roa (raw, json)
Hash identifier: q4T3qQq5v4j16DK0ka8P5VKc8ePIICG2rRGtQRwGbXo=
Subject key identifier: BF:70:33:72:F8:95:7D:D3:C4:5C:80:88:43:A5:AB:E8:A8:F0:64:12
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAE7AC9C92076D983D0E6CE1928CBF2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/v3AzcviVfdPEXICIQ6Wr6KjwZBI.roa
Signing time: Tue 06 Feb 2024 18:29:17 +0000
ROA not before: Tue 06 Feb 2024 18:29:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51856
IP address blocks: 2a0f:b241:11c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ae:7a:c9:c9:20:76:d9:83:d0:e6:ce:19:28:cb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:29:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf703372f8957dd3c45c808843a5abe8a8f06412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:a2:a7:02:ae:d9:5a:00:da:16:d3:a1:e6:
cd:f9:8c:73:d0:b3:27:dd:fa:d6:04:9b:7b:18:b3:
49:08:f9:2b:20:cd:f0:98:08:9e:aa:61:0d:74:24:
bb:e4:9c:86:c3:35:b0:5f:4c:cd:21:5e:91:3e:cb:
2b:8e:16:29:01:32:1d:ab:ef:0f:df:ba:f5:3b:a8:
28:e4:43:6a:0a:58:e4:6b:a9:0f:eb:84:3f:9b:93:
fc:2c:f0:5e:d9:f1:52:ff:95:e8:c4:69:2b:dd:b2:
b2:9a:f2:df:d1:91:d1:04:69:02:da:79:5f:bc:f7:
ac:d2:c4:2a:52:8a:39:29:d4:db:18:47:18:23:05:
e1:13:c4:47:92:1e:7f:cd:c3:48:5b:fb:c2:06:1c:
eb:c0:8e:a9:98:eb:fe:c0:d4:a7:c0:bc:c1:1a:27:
40:13:cd:6a:ba:b5:a4:01:63:91:e1:a7:6e:de:8f:
7d:83:9e:8d:8e:66:b2:e4:1e:97:cb:bd:2b:8d:c9:
ac:e4:ad:53:99:10:72:35:70:39:bb:de:d7:71:48:
94:8b:f3:09:e6:97:c4:a0:bd:51:3b:1b:f6:2a:49:
1b:02:9a:3d:10:05:e9:8c:4e:f8:5b:a3:cf:34:69:
44:10:88:15:25:d7:24:99:c8:5f:cd:0f:a5:5f:f8:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:70:33:72:F8:95:7D:D3:C4:5C:80:88:43:A5:AB:E8:A8:F0:64:12
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/v3AzcviVfdPEXICIQ6Wr6KjwZBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:11c::/48
Signature Algorithm: sha256WithRSAEncryption
05:99:a1:c5:e0:46:27:30:94:ab:86:e8:c1:d4:eb:42:00:7b:
a9:ce:30:e4:b0:af:6e:92:29:9d:0c:76:82:58:1f:6b:7e:8d:
0d:62:9c:43:e9:88:6b:e9:51:a6:02:f0:f0:b1:90:43:f6:af:
54:2a:55:9f:9a:eb:b2:b1:b2:d1:e0:d4:e4:7b:61:74:10:a0:
b0:c9:cb:2d:0c:04:1a:5d:1e:c4:d3:44:9a:a6:ce:b8:61:d6:
26:95:18:3b:ea:2c:94:d0:3a:51:6a:92:c0:72:c3:78:00:48:
a9:93:91:fb:33:39:7c:af:6e:80:83:6d:58:49:84:2e:af:96:
f2:13:31:64:a8:30:86:43:aa:38:7f:5b:d5:89:72:17:bf:46:
1d:13:f4:5f:f4:83:9b:79:86:a2:e0:c0:88:18:f3:bd:c2:56:
2a:ba:89:d1:30:c0:78:cb:f9:47:fb:a5:de:26:17:27:13:ad:
a6:78:48:6a:e1:ff:26:d7:5f:bc:00:a7:a7:df:86:e0:c8:1d:
b3:11:6c:be:ae:8c:b9:b8:3a:14:6f:8e:80:eb:d4:49:3a:54:
44:10:d0:26:db:89:0d:65:ca:6b:3d:08:0e:92:8f:fb:07:a2:
64:b0:55:0c:04:d2:5c:fe:f3:44:e2:56:de:78:f1:0c:10:e7:
59:5c:42:b1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/rnrJySB22YPQ5s4ZKMvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyOTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjcwMzM3MmY4OTU3ZGQzYzQ1YzgwODg0M2E1YWJlOGE4ZjA2NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNCipwKu2VoA2hbToebN+Yxz0LMn
3frWBJt7GLNJCPkrIM3wmAieqmENdCS75JyGwzWwX0zNIV6RPssrjhYpATIdq+8P
37r1O6go5ENqCljka6kP64Q/m5P8LPBe2fFS/5XoxGkr3bKymvLf0ZHRBGkC2nlf
vPes0sQqUoo5KdTbGEcYIwXhE8RHkh5/zcNIW/vCBhzrwI6pmOv+wNSnwLzBGidA
E81qurWkAWOR4adu3o99g56Njmay5B6Xy70rjcms5K1TmRByNXA5u97XcUiUi/MJ
5pfEoL1ROxv2KkkbApo9EAXpjE74W6PPNGlEEIgVJdckmchfzQ+lX/h6aQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL9wM3L4lX3TxFyAiEOlq+io8GQSMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvdjNBemN2aVZmZFBFWElDSVE2V3I2S2p3WkJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQEc
MA0GCSqGSIb3DQEBCwUAA4IBAQAFmaHF4EYnMJSrhujB1OtCAHupzjDksK9ukimd
DHaCWB9rfo0NYpxD6Yhr6VGmAvDwsZBD9q9UKlWfmuuysbLR4NTke2F0EKCwycst
DAQaXR7E00Saps64YdYmlRg76iyU0DpRapLAcsN4AEipk5H7Mzl8r26Ag21YSYQu
r5byEzFkqDCGQ6o4f1vViXIXv0YdE/Rf9IObeYai4MCIGPO9wlYquonRMMB4y/lH
+6XeJhcnE62meEhq4f8m11+8AKen34bgyB2zEWy+roy5uDoUb46A69RJOlREENAm
24kNZcprPQgOko/7B6JksFUMBNJc/vNE4lbeePEMEOdZXEKx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org