Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OWPc4RX5FUYAwh7loRt9HPFK6EU.roa
File: OWPc4RX5FUYAwh7loRt9HPFK6EU.roa (raw, json)
Hash identifier: FO0JinbCv47vUoiGa0q/pCQPfHKlUOAV3Gc8wqIm37w=
Subject key identifier: 39:63:DC:E1:15:F9:15:46:00:C2:1E:E5:A1:1B:7D:1C:F1:4A:E8:45
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F086B76D6F80D6D56F0FC7DFAB6000
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OWPc4RX5FUYAwh7loRt9HPFK6EU.roa
Signing time: Wed 07 Feb 2024 05:00:40 +0000
ROA not before: Wed 07 Feb 2024 05:00:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200882
IP address blocks: 2a0f:b241:d7::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:86:b7:6d:6f:80:d6:d5:6f:0f:c7:df:ab:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3963dce115f9154600c21ee5a11b7d1cf14ae845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:86:08:2a:0b:05:8b:55:97:78:72:cf:8f:53:
de:69:64:67:6f:da:3e:fb:a0:44:63:16:ca:88:4b:
94:fe:f1:8d:f6:cb:02:f9:00:a7:c4:92:5f:8d:c4:
9d:99:cf:c0:43:b6:3c:65:e5:76:c3:14:ea:e2:21:
71:c1:47:79:ae:78:08:5b:97:d4:4e:a2:ff:bf:82:
18:1c:ab:86:7a:e5:c0:00:05:f2:e8:67:6f:d2:a9:
01:64:97:ff:cc:6c:5e:9d:4b:3d:d8:ae:13:21:e5:
1e:d8:56:0b:22:0d:2e:b8:5e:22:74:b8:6d:43:d8:
cf:2d:c7:59:9f:14:06:e1:23:7b:ec:a3:da:8b:c5:
6a:91:d2:6e:7f:76:bc:dd:76:93:6d:dc:ad:b7:19:
c0:15:4e:30:8f:24:1c:2c:87:3d:89:b1:a2:1e:75:
72:43:e7:db:08:40:7a:b6:ca:64:40:ac:03:1c:d0:
80:dc:ac:64:56:3f:1a:df:71:1f:cd:03:d0:da:21:
7a:35:a3:f7:06:ab:c2:c2:26:4e:aa:8e:46:0b:90:
ee:2e:54:13:44:fb:4c:7c:59:38:4b:84:d0:72:04:
eb:e9:1a:1b:fd:a6:25:0e:81:23:8d:20:41:75:68:
ee:d3:d2:eb:1a:20:86:0c:af:96:98:1d:bf:99:40:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:63:DC:E1:15:F9:15:46:00:C2:1E:E5:A1:1B:7D:1C:F1:4A:E8:45
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OWPc4RX5FUYAwh7loRt9HPFK6EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d7::/48
Signature Algorithm: sha256WithRSAEncryption
6e:3b:11:95:d9:d4:4d:8e:46:62:59:5a:5f:96:8c:c1:ed:7f:
5d:e1:4c:ec:b7:f1:fc:e0:51:48:d9:13:28:74:b0:85:91:dd:
f5:79:85:3c:77:9f:27:2d:63:3e:33:1a:fc:1a:7a:95:d1:11:
ef:56:fc:4d:61:af:ac:24:8b:e9:fe:00:99:75:d2:4e:c7:65:
8d:11:76:b6:d5:5a:79:23:a4:d0:88:7e:73:00:e3:39:29:8b:
d3:e0:8f:c1:de:3f:47:fb:dc:5a:d2:24:dd:ee:79:08:ed:c2:
28:53:89:7f:a9:40:3d:10:fa:3f:fd:9d:09:45:b8:6e:98:e9:
23:3b:07:0e:0d:38:5b:c1:dd:0e:c9:13:ac:2e:55:01:44:bd:
b8:69:10:21:a1:42:63:1a:7f:0d:52:82:c3:fa:e6:5e:1c:11:
28:0d:48:75:c9:8c:87:36:08:dd:aa:f1:5d:e1:62:cc:61:82:
6f:a7:77:d2:59:8c:f6:da:1e:62:9f:7a:57:06:5a:61:86:c3:
5c:67:c0:af:f8:dd:fa:03:43:6d:2e:5f:1e:25:1a:d6:2d:86:
fd:ae:d8:22:72:94:6c:db:10:cd:2d:71:e8:16:68:49:b9:cf:
85:87:c6:3a:96:75:28:b7:c6:55:37:c1:db:9b:bd:50:33:3a:
a6:f5:70:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org