Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OlPGz3XFl0_w2gNHtUvyhyD2LkU.roa
File: OlPGz3XFl0_w2gNHtUvyhyD2LkU.roa (raw, json)
Hash identifier: Rp+MisY+/GZELdqQgYc58a63MIjKI4wNjpRsHzDjiwU=
Subject key identifier: 3A:53:C6:CF:75:C5:97:4F:F0:DA:03:47:B5:4B:F2:87:20:F6:2E:45
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6B369E66090C83C7C32D1A6028D90
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OlPGz3XFl0_w2gNHtUvyhyD2LkU.roa
Signing time: Tue 06 Feb 2024 18:38:16 +0000
ROA not before: Tue 06 Feb 2024 18:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199392
IP address blocks: 2a0f:b241:12e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:b3:69:e6:60:90:c8:3c:7c:32:d1:a6:02:8d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a53c6cf75c5974ff0da0347b54bf28720f62e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:a9:1f:2d:89:8a:c4:e8:b0:eb:f8:0c:16:
6b:65:35:fc:bc:5e:c3:f7:31:04:dc:07:f5:32:eb:
9a:c8:74:da:9c:07:e4:2a:77:46:9d:18:4f:e9:46:
cb:47:e3:6f:72:c2:f8:0e:8c:7f:68:63:7d:2b:f8:
ce:56:28:f9:e0:c1:e5:4a:f3:1e:33:38:9f:d9:92:
f0:cd:f9:59:8a:cf:75:b0:ea:3b:38:d4:73:f8:50:
45:8b:bc:fd:d2:6d:fd:e8:34:03:e3:22:16:54:de:
01:ab:bd:65:16:e2:fa:4e:90:80:f3:a6:84:03:03:
07:64:85:0f:7a:28:c8:04:cf:2f:9f:f1:80:f6:39:
d9:66:4d:2b:f2:a4:aa:f5:12:4c:50:06:c9:3a:59:
80:41:a2:8b:5b:93:53:55:09:b4:c2:45:76:ac:72:
6b:92:ae:1a:54:83:e3:c8:a4:5d:4f:b1:b9:b1:e0:
6f:be:bc:89:2a:88:fb:27:7c:92:4d:2e:56:1e:f9:
1c:12:86:52:60:1f:4e:eb:73:d8:09:6a:45:bf:76:
60:02:fd:fa:29:59:a5:d0:ba:73:16:01:e3:eb:80:
ae:fa:75:ad:6b:31:ae:f0:a9:7a:1b:c4:c2:e8:19:
d0:44:27:a1:51:a1:7e:19:50:fd:65:9f:ee:f5:7e:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:C6:CF:75:C5:97:4F:F0:DA:03:47:B5:4B:F2:87:20:F6:2E:45
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OlPGz3XFl0_w2gNHtUvyhyD2LkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12e::/48
Signature Algorithm: sha256WithRSAEncryption
7b:08:fb:ed:e3:8a:8f:18:3a:38:42:6d:85:aa:02:5e:8c:03:
81:e8:00:79:96:db:22:1c:b8:67:28:0c:02:e0:12:b5:ee:0a:
d6:45:de:ce:9b:64:c4:29:39:77:22:e4:70:4a:7b:5c:4a:40:
bb:39:69:a6:1f:b6:46:fd:65:31:81:90:2f:d8:6e:1f:57:09:
f8:e9:a8:9a:1d:2a:d4:a4:3f:bd:d3:a2:00:35:c5:e1:b7:00:
8b:b5:27:bd:71:38:4c:1f:b6:fc:92:69:ed:d1:5d:e9:48:37:
d6:a2:c8:87:a7:ca:88:68:4a:6e:2d:a8:e3:12:cd:4e:c3:e7:
06:8a:c1:92:4a:1d:a0:a2:5f:a0:13:0a:ec:93:62:8c:61:d2:
6c:d5:f9:2d:b2:2d:b4:a3:f3:78:4c:ff:6a:d6:66:42:f5:17:
14:e2:f2:aa:12:6d:86:ec:57:be:28:3c:21:a8:67:8c:e4:77:
3e:71:f9:d3:9e:fc:d4:49:bb:00:f9:f2:b9:7b:3d:40:13:37:
92:df:26:76:54:da:38:6a:06:3e:24:cd:b0:72:b5:cc:74:d1:
4e:e8:f3:4a:04:3c:05:47:8e:17:7f:af:59:08:24:11:e7:c5:
1e:47:7b:77:cc:7c:c8:b7:58:a3:9f:63:32:d5:f0:02:ea:04:
c7:7f:65:0f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/trNp5mCQyDx8MtGmAo2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgzODE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTUzYzZjZjc1YzU5NzRmZjBkYTAzNDdiNTRiZjI4NzIwZjYyZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRKpHy2JisTosOv4DBZrZTX8vF7D
9zEE3Af1MuuayHTanAfkKndGnRhP6UbLR+NvcsL4Dox/aGN9K/jOVij54MHlSvMe
Mzif2ZLwzflZis91sOo7ONRz+FBFi7z90m396DQD4yIWVN4Bq71lFuL6TpCA86aE
AwMHZIUPeijIBM8vn/GA9jnZZk0r8qSq9RJMUAbJOlmAQaKLW5NTVQm0wkV2rHJr
kq4aVIPjyKRdT7G5seBvvryJKoj7J3ySTS5WHvkcEoZSYB9O63PYCWpFv3ZgAv36
KVml0LpzFgHj64Cu+nWtazGu8Kl6G8TC6BnQRCehUaF+GVD9ZZ/u9X7A9QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDpTxs91xZdP8NoDR7VL8ocg9i5FMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvT2xQR3ozWEZsMF93MmdOSHRVdnloeUQyTGtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQEu
MA0GCSqGSIb3DQEBCwUAA4IBAQB7CPvt44qPGDo4Qm2FqgJejAOB6AB5ltsiHLhn
KAwC4BK17grWRd7Om2TEKTl3IuRwSntcSkC7OWmmH7ZG/WUxgZAv2G4fVwn46aia
HSrUpD+906IANcXhtwCLtSe9cThMH7b8kmnt0V3pSDfWosiHp8qIaEpuLajjEs1O
w+cGisGSSh2gol+gEwrsk2KMYdJs1fktsi20o/N4TP9q1mZC9RcU4vKqEm2G7Fe+
KDwhqGeM5Hc+cfnTnvzUSbsA+fK5ez1AEzeS3yZ2VNo4agY+JM2wcrXMdNFO6PNK
BDwFR44Xf69ZCCQR58UeR3t3zHzIt1ijn2My1fAC6gTHf2UP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org