Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/O2mnKzd8_zx7_Jo5nMQIW_mADpk.roa
File: O2mnKzd8_zx7_Jo5nMQIW_mADpk.roa (raw, json)
Hash identifier: 7HFXv31w1X/b8vurtk+kabcy51fcL9+gTUfmGUI7zbU=
Subject key identifier: 3B:69:A7:2B:37:7C:FF:3C:7B:FC:9A:39:9C:C4:08:5B:F9:80:0E:99
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0A0F475374C330D7E449CB435494B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/O2mnKzd8_zx7_Jo5nMQIW_mADpk.roa
Signing time: Wed 07 Feb 2024 05:00:46 +0000
ROA not before: Wed 07 Feb 2024 05:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210285
IP address blocks: 2a0f:b241:140::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:a0:f4:75:37:4c:33:0d:7e:44:9c:b4:35:49:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b69a72b377cff3c7bfc9a399cc4085bf9800e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:61:1b:6a:fe:4b:20:2e:72:35:9b:fe:52:
ad:a3:45:71:41:90:77:55:fc:9f:b5:48:f6:91:a9:
38:43:62:65:52:66:5e:d3:0d:be:80:b8:af:b9:25:
4f:fa:1a:b9:9f:c7:84:f1:67:e4:d1:84:ec:50:33:
f3:03:93:6b:4c:bb:ae:77:fe:d3:10:ff:bd:79:bf:
1c:5c:14:00:b0:74:ed:89:ec:a4:85:37:7e:db:3a:
26:10:fe:88:f2:c1:dc:71:b6:8c:09:28:ac:36:d2:
60:b2:2e:d2:61:29:58:88:40:ef:85:63:35:7f:06:
03:25:fb:7c:dc:fb:73:01:a6:5d:09:a7:20:4b:79:
55:87:07:36:87:8c:c1:7a:ca:d7:8f:31:d6:e5:94:
ad:ba:e8:68:ae:65:f3:29:b7:92:a9:21:f2:ce:2d:
81:9b:78:58:c2:7f:a6:6d:5c:d3:da:dc:4c:aa:36:
7d:15:78:63:24:d3:cf:4f:7d:b9:1a:05:19:3a:94:
6f:30:32:49:02:75:4c:5d:2d:cd:34:ad:95:53:19:
67:a1:22:b9:c6:91:7c:4d:e2:d7:d9:1b:2f:a5:7d:
30:fc:e7:7d:5b:d1:17:c1:14:f8:40:ee:07:1d:5a:
6c:7d:01:b2:43:be:31:cc:14:0f:4a:eb:b8:cf:3a:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:A7:2B:37:7C:FF:3C:7B:FC:9A:39:9C:C4:08:5B:F9:80:0E:99
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/O2mnKzd8_zx7_Jo5nMQIW_mADpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:140::/48
Signature Algorithm: sha256WithRSAEncryption
22:16:ca:c3:53:3d:ed:76:9c:cb:31:d3:e0:d9:f7:d8:40:45:
6c:73:33:21:09:67:43:7c:18:8d:c4:60:9c:7d:f3:19:c6:68:
e2:dd:1f:61:4d:e4:4c:80:e9:2c:c8:77:8d:be:6b:bf:29:46:
a8:11:48:18:f0:a3:0f:10:cf:c1:9b:b5:be:40:37:23:ed:5e:
7c:c9:75:6c:a9:4a:ac:af:f9:be:a8:b8:7f:ee:18:12:26:83:
e9:2b:fc:fc:c2:72:6d:2e:7e:bf:9c:9a:d1:82:5e:6f:4d:65:
27:74:4d:cd:d3:66:1b:2c:59:ec:34:5d:2b:1f:f0:4c:57:f1:
63:6f:f5:59:4f:eb:02:c1:08:d3:9d:67:ae:88:2b:cf:cf:b3:
6a:10:33:aa:98:0c:57:bb:ee:f2:f8:9a:86:9f:94:66:9d:de:
11:35:c7:57:45:b9:3f:66:b7:9b:3a:ac:e5:f5:70:5e:aa:5f:
7d:0d:a9:91:8c:57:d6:a7:44:ae:7e:14:b7:dd:46:e8:73:0f:
ac:4f:31:f0:7c:d9:38:d6:38:08:7d:27:cd:50:17:43:d6:ca:
41:f5:b5:c4:3e:1d:02:8c:f7:c4:3f:6b:7e:fe:25:c4:55:1a:
a6:42:0e:52:7d:8a:2d:b3:a7:9e:46:12:33:07:c5:d8:82:81:
62:78:de:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org