Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OKAljOdZUU8wwkBpvCxZaua9XRs.roa
File: OKAljOdZUU8wwkBpvCxZaua9XRs.roa (raw, json)
Hash identifier: UFHdMQTfK8egzKytCJ5zch8NryoEKzvtCvVp9NeTf0I=
Subject key identifier: 38:A0:25:8C:E7:59:51:4F:30:C2:40:69:BC:2C:59:6A:E6:BD:5D:1B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0654B9A7E745529415543EEEC5132
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OKAljOdZUU8wwkBpvCxZaua9XRs.roa
Signing time: Wed 07 Feb 2024 05:00:31 +0000
ROA not before: Wed 07 Feb 2024 05:00:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57308
IP address blocks: 2a0f:b241:11f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:65:4b:9a:7e:74:55:29:41:55:43:ee:ec:51:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38a0258ce759514f30c24069bc2c596ae6bd5d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:70:10:ae:97:31:5d:bb:a0:13:d9:71:48:
4e:4f:7c:6d:0e:b1:93:8f:1b:b2:e7:b9:85:be:52:
5c:fe:83:3e:fd:ab:45:96:c6:1b:17:72:0c:f0:10:
ac:33:4e:13:ae:77:e2:6d:07:88:e4:fc:f4:bc:49:
f2:e2:92:65:87:3f:84:34:2c:6d:45:70:ee:81:f3:
46:f5:1e:a6:72:5d:a6:15:be:54:84:3d:f2:81:f3:
80:92:70:00:88:42:43:dc:79:72:bd:2a:2f:ed:07:
9a:0f:49:bd:f0:24:9c:65:4e:40:e3:b7:bd:b4:f4:
4f:85:89:40:35:e2:16:b3:03:14:3a:44:8d:cb:1c:
a4:6f:bb:ec:16:d4:aa:a9:8c:64:d0:73:c4:06:66:
e4:81:63:3c:d8:9f:bb:21:3f:ba:40:3f:c1:fd:c9:
c8:27:83:97:3f:0b:57:d6:97:b3:47:53:b2:44:29:
95:94:34:e0:38:d9:21:d3:af:26:91:2c:01:9a:c8:
0e:cd:3e:04:a4:01:e1:2b:de:ab:9c:0a:04:2e:80:
d7:ec:4d:2f:2a:67:13:9a:29:42:1c:6e:ba:73:a0:
06:c7:ad:63:8f:2a:b8:02:02:80:1c:9b:3d:a7:bd:
8b:88:c4:78:fd:34:b1:cb:c8:22:d7:af:b8:8e:e6:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:25:8C:E7:59:51:4F:30:C2:40:69:BC:2C:59:6A:E6:BD:5D:1B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OKAljOdZUU8wwkBpvCxZaua9XRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:11f::/48
Signature Algorithm: sha256WithRSAEncryption
82:95:5f:83:48:c5:62:dd:cb:b6:53:0e:d7:8a:14:cb:71:af:
3d:78:4f:4e:df:e5:80:e8:b9:a6:bb:00:66:68:8f:10:46:1e:
9c:97:6e:68:f6:e9:ef:b5:4d:d6:30:61:c2:c7:8f:30:cf:02:
42:8d:4e:57:8b:5e:30:5e:c6:45:37:c6:bf:34:fd:14:ae:16:
94:10:3b:79:eb:86:65:9f:51:e2:5d:52:31:ed:b4:95:e7:b6:
39:66:86:b6:99:1f:c5:ac:1a:2d:cc:ac:61:9c:6d:6f:c1:a0:
b4:29:9c:db:f2:f3:83:a2:af:a7:30:91:08:3b:97:2a:2e:b6:
65:1e:fe:29:76:89:86:b6:ed:4d:b3:9b:c8:9d:68:e2:db:df:
17:51:d7:7d:57:95:04:fe:97:e7:42:78:d2:80:61:8c:9e:60:
45:d6:ed:c6:fd:ba:09:42:5c:5f:d2:85:71:3d:3f:d5:ec:16:
32:18:81:88:b6:47:77:4c:79:f2:b7:4b:ed:77:89:38:05:a7:
7a:f9:8a:99:15:41:f8:8b:d2:9f:1f:f8:43:b7:f4:a5:dc:23:
92:da:c6:68:c5:10:99:c3:38:7b:db:5b:4e:f4:ea:6e:29:ae:
56:23:ed:a3:4f:33:fb:7b:fc:4c:c4:5e:c9:68:b6:12:f9:03:
8f:40:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org