Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vm3bRyZrp1X8cYMUVD9Vxt6YNIY.roa
File: vm3bRyZrp1X8cYMUVD9Vxt6YNIY.roa (raw, json)
Hash identifier: brDDMWUK9M1SycfjBONMMiiOAslZ1IjfDOPzi0QD/Qg=
Subject key identifier: BE:6D:DB:47:26:6B:A7:55:FC:71:83:14:54:3F:55:C6:DE:98:34:86
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F8D81F17A5213823F0E79820AC625AA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vm3bRyZrp1X8cYMUVD9Vxt6YNIY.roa
Signing time: Tue 06 Feb 2024 17:53:16 +0000
ROA not before: Tue 06 Feb 2024 17:53:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213312
IP address blocks: 2a0f:b241:24::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:8d:81:f1:7a:52:13:82:3f:0e:79:82:0a:c6:25:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 17:53:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be6ddb47266ba755fc718314543f55c6de983486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:02:66:10:0e:ac:64:9e:9f:8b:02:eb:17:51:
b3:8f:16:bc:a9:c7:34:d4:88:7d:ef:22:9b:f4:12:
b2:76:d3:f5:8d:90:b4:06:8a:4e:05:b6:ef:28:bb:
c8:7f:8e:2f:8e:4c:1c:79:da:7a:30:92:ed:bc:4e:
34:bf:37:d9:d1:e1:b1:30:9b:82:be:9a:ed:e0:60:
fc:0b:00:b1:b2:cc:21:5d:4c:9a:e1:6c:bc:e8:b7:
60:29:19:31:45:5a:4e:7b:5c:53:6b:4c:96:1b:0e:
6e:4f:f3:5f:d2:a1:19:02:32:b6:43:1c:a1:34:7d:
65:ef:fe:ea:11:22:b1:d4:9a:1c:90:d3:05:89:a7:
c7:cd:1c:70:45:51:b5:d6:fe:68:a8:99:69:ed:69:
37:35:33:91:cb:77:4b:8b:28:03:05:17:e4:d7:23:
81:31:e9:7e:a2:e6:57:48:7d:7f:01:e6:19:ae:34:
d2:a3:e5:2a:b9:01:9f:1d:dc:a1:d4:33:50:35:08:
27:73:1d:15:6d:c4:fd:57:d1:36:c7:96:01:92:fa:
f4:9a:66:47:37:ad:56:52:e0:b4:9f:2a:9a:98:5b:
6b:75:d0:1d:cb:9c:56:57:b5:39:5d:05:05:e1:fa:
03:13:5f:67:af:41:ab:dc:00:50:e7:50:f0:95:a3:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:DB:47:26:6B:A7:55:FC:71:83:14:54:3F:55:C6:DE:98:34:86
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vm3bRyZrp1X8cYMUVD9Vxt6YNIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:24::/48
Signature Algorithm: sha256WithRSAEncryption
49:28:77:79:32:c7:11:f9:99:3e:a6:05:51:26:34:4e:0a:13:
11:63:08:0d:ee:83:6d:5a:28:30:35:e6:e8:2d:15:24:94:7e:
da:b9:82:27:f8:52:b9:c0:d0:ce:e6:80:fa:cf:9b:5e:80:11:
fb:fb:02:0b:6c:b1:3d:d8:67:0a:22:f3:1b:0d:e0:d0:6c:7f:
02:85:a6:25:87:52:80:35:1a:c0:06:cf:bd:9a:44:3a:97:0f:
79:d1:e7:2d:72:ff:ba:55:36:03:c9:aa:c6:04:f5:2f:ea:7c:
b2:21:6f:c5:87:50:60:02:fd:5f:46:5e:e7:ab:50:ca:3a:e5:
f7:8f:8c:40:c7:60:94:33:67:73:2a:5c:09:d0:de:7f:01:0f:
92:e9:36:2d:1c:ef:7a:07:15:fc:30:d0:3c:f5:9d:85:a4:6b:
3c:4b:58:15:9d:c3:81:af:ac:41:87:74:2c:d7:19:e7:b3:ae:
56:51:b8:49:d8:4a:36:d9:a0:fd:bf:15:99:06:3d:dd:43:d9:
00:37:37:0d:14:40:7b:29:f0:0d:e7:ce:59:0c:8c:0e:3e:fa:
05:48:fb:4d:3b:02:75:15:c5:53:29:0e:94:25:6a:7f:e8:3c:
47:c8:93:96:c9:e5:91:df:e0:02:40:a5:5b:75:df:be:bc:bf:
e0:14:ab:b8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/jYHxelITgj8OeYIKxiWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTc1MzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTZkZGI0NzI2NmJhNzU1ZmM3MTgzMTQ1NDNmNTVjNmRlOTgzNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQJmEA6sZJ6fiwLrF1Gzjxa8qcc0
1Ih97yKb9BKydtP1jZC0BopOBbbvKLvIf44vjkwcedp6MJLtvE40vzfZ0eGxMJuC
vprt4GD8CwCxsswhXUya4Wy86LdgKRkxRVpOe1xTa0yWGw5uT/Nf0qEZAjK2Qxyh
NH1l7/7qESKx1JockNMFiafHzRxwRVG11v5oqJlp7Wk3NTORy3dLiygDBRfk1yOB
Mel+ouZXSH1/AeYZrjTSo+UquQGfHdyh1DNQNQgncx0VbcT9V9E2x5YBkvr0mmZH
N61WUuC0nyqamFtrddAdy5xWV7U5XQUF4foDE19nr0Gr3ABQ51DwlaMHiQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL5t20cma6dV/HGDFFQ/VcbemDSGMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvdm0zYlJ5WnJwMVg4Y1lNVVZEOVZ4dDZZTklZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQAk
MA0GCSqGSIb3DQEBCwUAA4IBAQBJKHd5MscR+Zk+pgVRJjROChMRYwgN7oNtWigw
NeboLRUklH7auYIn+FK5wNDO5oD6z5tegBH7+wILbLE92GcKIvMbDeDQbH8ChaYl
h1KANRrABs+9mkQ6lw950ectcv+6VTYDyarGBPUv6nyyIW/Fh1BgAv1fRl7nq1DK
OuX3j4xAx2CUM2dzKlwJ0N5/AQ+S6TYtHO96BxX8MNA89Z2FpGs8S1gVncOBr6xB
h3Qs1xnns65WUbhJ2Eo22aD9vxWZBj3dQ9kANzcNFEB7KfAN585ZDIwOPvoFSPtN
OwJ1FcVTKQ6UJWp/6DxHyJOWyeWR3+ACQKVbdd++vL/gFKu4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org