Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xGqTJm9V646etaSE1051oVH4W4c.roa
File: xGqTJm9V646etaSE1051oVH4W4c.roa (raw, json)
Hash identifier: E88Dz3RME/aqSB/ks2SFem5i7FFLkogVhJzK8mAHQJI=
Subject key identifier: C4:6A:93:26:6F:55:EB:8E:9E:B5:A4:84:D7:4E:75:A1:51:F8:5B:87
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAAD2B9D620312DF250EBEF36B95D70
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xGqTJm9V646etaSE1051oVH4W4c.roa
Signing time: Tue 06 Feb 2024 18:25:17 +0000
ROA not before: Tue 06 Feb 2024 18:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202732
IP address blocks: 2a0f:b241:e2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:aa:d2:b9:d6:20:31:2d:f2:50:eb:ef:36:b9:5d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c46a93266f55eb8e9eb5a484d74e75a151f85b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a0:c0:76:36:af:b9:ec:3b:37:39:01:f7:b6:
d9:85:06:aa:f7:37:bd:de:4f:0b:84:4c:cb:c9:02:
83:1d:eb:e7:e0:35:f8:89:17:ff:c7:37:d2:2d:82:
fd:d3:88:ac:31:09:4c:8c:aa:58:fe:e4:09:8e:e8:
86:ae:0a:c5:0c:24:64:d9:e3:d0:4f:12:eb:27:72:
52:1f:d2:d7:d2:a4:de:dc:1f:3a:57:28:d9:ba:59:
53:38:6a:25:44:6f:22:77:f8:0a:37:76:6b:0b:31:
7a:b6:65:b5:0a:60:65:38:a5:f8:1e:ae:9e:9d:00:
dd:5b:c5:e5:f5:04:13:fe:47:0c:1d:75:12:43:7d:
3f:93:5c:6d:db:8a:d5:41:d1:22:b5:ab:b0:dc:a5:
2a:1e:79:4d:90:cf:fb:47:4c:1e:c6:c3:85:4e:50:
92:9f:93:31:0a:10:38:95:54:2e:7e:fc:e9:5c:65:
6e:77:29:de:99:87:59:3a:11:59:7c:37:cd:12:8e:
f2:4f:cf:d8:38:eb:c4:0a:23:24:7f:e4:f6:2d:c7:
5b:1e:a7:2e:39:09:75:f3:28:2c:59:94:fd:ce:d5:
27:64:c1:09:1a:c1:58:26:51:ab:54:fd:41:fb:0b:
aa:6e:fc:8a:8f:46:7e:f9:3b:3b:0c:1b:05:33:93:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6A:93:26:6F:55:EB:8E:9E:B5:A4:84:D7:4E:75:A1:51:F8:5B:87
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xGqTJm9V646etaSE1051oVH4W4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:e2::/48
Signature Algorithm: sha256WithRSAEncryption
2c:1d:0f:62:c5:f1:d9:48:ae:c2:46:a2:94:fd:11:21:25:4f:
b3:d2:7f:9d:4a:20:62:b2:82:7a:d2:30:95:43:88:d6:89:43:
7a:c7:c6:71:71:e8:b8:3f:42:d1:ea:4f:a2:ec:06:7f:c5:dc:
b8:6e:e0:81:df:7d:bf:61:ef:7c:86:ed:ae:35:ce:99:fe:0e:
02:25:26:55:f1:74:20:88:ea:62:2f:df:3a:17:12:98:1d:28:
50:29:c4:ee:c0:54:9e:83:db:6c:e4:ba:2b:47:6e:0e:86:24:
6d:0d:2e:f8:9c:c6:b4:68:9f:67:f0:1e:bd:75:65:a0:02:6a:
4e:a3:9f:55:5b:4a:f3:40:22:5b:16:51:e2:a8:11:01:4d:f0:
88:f8:9d:4a:40:08:75:48:a8:24:cd:ad:82:80:0c:eb:a0:14:
b0:7d:20:7b:36:3c:a2:ab:02:70:0b:2a:02:57:4c:c2:e7:e8:
7b:8b:b6:a8:7e:35:71:72:95:a0:02:9c:c8:e8:1c:2a:fa:ed:
8e:78:be:29:c0:34:61:35:13:a9:9a:51:50:07:b2:6b:ed:ea:
a6:e7:ef:10:37:4b:e1:68:48:4c:4c:f7:d0:e3:04:ac:38:37:
f3:e1:df:49:a7:12:10:0f:b0:82:88:ee:fc:9a:ac:cf:12:c8:
06:f5:c0:e5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qtK51iAxLfJQ6+82uV1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDZhOTMyNjZmNTVlYjhlOWViNWE0ODRkNzRlNzVhMTUxZjg1Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKDAdjavuew7NzkB97bZhQaq9ze9
3k8LhEzLyQKDHevn4DX4iRf/xzfSLYL904isMQlMjKpY/uQJjuiGrgrFDCRk2ePQ
TxLrJ3JSH9LX0qTe3B86VyjZullTOGolRG8id/gKN3ZrCzF6tmW1CmBlOKX4Hq6e
nQDdW8Xl9QQT/kcMHXUSQ30/k1xt24rVQdEitauw3KUqHnlNkM/7R0wexsOFTlCS
n5MxChA4lVQufvzpXGVudynemYdZOhFZfDfNEo7yT8/YOOvECiMkf+T2LcdbHqcu
OQl18ygsWZT9ztUnZMEJGsFYJlGrVP1B+wuqbvyKj0Z++Ts7DBsFM5POPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMRqkyZvVeuOnrWkhNdOdaFR+FuHMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEveEdxVEptOVY2NDZldGFTRTEwNTFvVkg0VzRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDi
MA0GCSqGSIb3DQEBCwUAA4IBAQAsHQ9ixfHZSK7CRqKU/REhJU+z0n+dSiBisoJ6
0jCVQ4jWiUN6x8Zxcei4P0LR6k+i7AZ/xdy4buCB332/Ye98hu2uNc6Z/g4CJSZV
8XQgiOpiL986FxKYHShQKcTuwFSeg9ts5LorR24OhiRtDS74nMa0aJ9n8B69dWWg
AmpOo59VW0rzQCJbFlHiqBEBTfCI+J1KQAh1SKgkza2CgAzroBSwfSB7NjyiqwJw
CyoCV0zC5+h7i7aofjVxcpWgApzI6Bwq+u2OeL4pwDRhNROpmlFQB7Jr7eqm5+8Q
N0vhaEhMTPfQ4wSsODfz4d9JpxIQD7CCiO78mqzPEsgG9cDl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org