Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/o0-8IAOORYzXj2vRzGcApkeR5CU.roa
File: o0-8IAOORYzXj2vRzGcApkeR5CU.roa (raw, json)
Hash identifier: HoJbGYwowGoJYLUx6CDmfpdqMPFBIyYBnH0rN81hIV4=
Subject key identifier: A3:4F:BC:20:03:8E:45:8C:D7:8F:6B:D1:CC:67:00:A6:47:91:E4:25
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB6B3AB6FE5C6ABBFC803304A92EE58
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/o0-8IAOORYzXj2vRzGcApkeR5CU.roa
Signing time: Tue 06 Feb 2024 18:38:16 +0000
ROA not before: Tue 06 Feb 2024 18:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199591
IP address blocks: 2a0f:b241:12e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b6:b3:ab:6f:e5:c6:ab:bf:c8:03:30:4a:92:ee:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a34fbc20038e458cd78f6bd1cc6700a64791e425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:6a:32:79:22:d0:33:dc:b1:24:07:85:21:
61:22:6d:2a:7f:85:cb:a2:93:ea:d6:8b:42:22:c7:
5c:45:f4:8c:1f:f9:63:33:67:ee:61:8a:94:a7:72:
6c:c3:4a:ed:c5:eb:5b:5f:3b:08:b0:39:3f:b2:8e:
fb:ab:94:45:ed:4c:09:54:59:18:83:00:ba:7c:0f:
5a:b4:23:1d:04:1a:b2:77:77:25:d8:28:63:36:d0:
46:a4:a3:1d:30:42:78:57:07:47:89:b7:31:31:cc:
d2:22:9d:d8:bb:5d:08:48:f2:17:7c:3e:52:68:24:
4f:f0:22:9e:55:db:7f:67:ad:3c:33:e0:76:33:24:
bf:e0:e4:d6:b5:dc:7f:30:01:e9:5b:aa:e9:cb:c9:
85:4b:7a:ed:4c:ab:99:fd:db:c9:a5:39:c6:25:6f:
e8:e2:fb:88:18:ac:59:2e:c4:66:d3:ba:c3:9d:2e:
77:4d:37:40:da:45:7c:35:47:fc:3b:73:75:f5:b5:
33:7a:80:06:90:46:0c:ad:c0:5b:37:01:64:e9:8c:
b1:3f:33:8c:fc:2c:58:bb:eb:21:f8:c6:90:36:69:
54:78:fc:4b:fb:79:2e:9a:83:22:54:69:85:5b:ee:
77:0e:8d:6e:9d:fc:4a:de:b7:09:20:dd:d0:83:99:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4F:BC:20:03:8E:45:8C:D7:8F:6B:D1:CC:67:00:A6:47:91:E4:25
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/o0-8IAOORYzXj2vRzGcApkeR5CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12e::/48
Signature Algorithm: sha256WithRSAEncryption
7c:b2:3f:63:59:eb:15:fe:3f:a0:5d:2c:d2:0f:c3:21:fa:17:
8d:cb:a6:66:b9:cc:5d:e5:f1:6a:be:ce:f1:70:20:e9:18:f6:
1e:25:80:6d:d1:13:d4:83:75:6a:30:51:8c:8d:c8:ab:80:c5:
c8:44:61:7a:e7:b8:5d:65:cc:6b:b4:a0:60:b1:68:1a:c9:92:
b5:29:03:47:a0:ab:2c:c6:28:ab:c4:4c:61:4b:fc:b9:83:5b:
4d:e9:c9:0e:ec:e9:42:08:c5:f8:13:8e:9a:56:39:88:e2:81:
66:66:91:6e:45:40:cb:31:3e:70:c8:89:79:a8:67:4e:ba:c7:
74:52:0b:11:ff:8b:b4:38:ad:be:49:55:d2:9e:00:15:6b:7c:
cf:59:bf:76:7e:2a:52:fc:1d:46:d6:59:05:ce:fe:33:4e:10:
73:05:74:81:6b:01:23:d2:7d:e9:7e:ac:91:f7:29:25:1b:ee:
ed:22:d9:08:c6:18:ff:05:b0:7e:f5:70:68:8f:58:d0:e0:31:
44:3f:84:d3:c4:f9:f2:82:d7:27:14:27:9a:1d:c4:eb:dd:69:
0d:17:4e:c9:f5:3a:8d:82:45:ae:d5:f8:ed:a7:6a:cf:87:82:
b5:24:27:eb:37:9a:5a:68:30:67:5b:19:ae:76:f7:d7:79:fc:
7b:c4:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org