Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ofkBjfvBvS_mxjxmWXD59h3NjeI.roa
File: ofkBjfvBvS_mxjxmWXD59h3NjeI.roa (raw, json)
Hash identifier: HtFccjVawSVPlTxtANPIdpPBMKVu7tKMnOUexQ95dvE=
Subject key identifier: A1:F9:01:8D:FB:C1:BD:2F:E6:C6:3C:66:59:70:F9:F6:1D:CD:8D:E2
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7F95C521C29D3271F9E47B30D78FA12E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ofkBjfvBvS_mxjxmWXD59h3NjeI.roa
Signing time: Tue 06 Feb 2024 18:02:18 +0000
ROA not before: Tue 06 Feb 2024 18:02:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215605
IP address blocks: 2a0f:b241:4c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:95:c5:21:c2:9d:32:71:f9:e4:7b:30:d7:8f:a1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:02:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1f9018dfbc1bd2fe6c63c665970f9f61dcd8de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:72:ee:af:a9:ec:41:1f:02:e5:a3:71:07:1d:
88:4a:0b:51:df:27:1e:f8:b5:fb:77:4f:9b:34:ad:
04:6b:d5:8c:98:4f:d3:d4:77:86:78:3e:f7:ed:70:
0e:42:74:18:18:25:da:98:f2:bb:47:64:a0:8f:d0:
0e:89:93:59:bc:fd:93:46:1e:9d:6d:65:04:1c:a1:
8a:da:5c:fb:c4:ce:ba:53:d3:a3:bd:77:60:ee:32:
31:33:cf:65:91:78:de:7e:94:4b:c2:eb:3e:10:68:
7b:fe:4e:d4:a6:4f:49:67:94:81:cd:60:e3:1c:ee:
37:35:18:17:90:42:f8:4b:fd:af:60:1f:01:60:8b:
84:67:7e:cc:94:a8:0b:94:0d:4b:85:ea:c9:da:d4:
68:c9:e9:8d:8e:8a:5d:1f:76:5f:70:32:e2:07:d6:
97:37:5f:16:fb:1d:ca:02:db:aa:f5:b8:08:02:5c:
52:94:3d:c6:c6:81:99:21:d8:d8:49:d7:c4:e3:04:
d8:55:59:a9:9a:c6:e9:96:20:d7:7b:4d:7c:5d:ca:
d8:fd:75:6a:48:04:3e:d6:03:01:bd:19:ea:54:6a:
56:d1:d2:61:1d:30:41:d1:05:18:ec:87:58:08:02:
2f:dd:8c:f6:bf:6d:25:d4:0b:5e:c4:22:27:40:54:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:01:8D:FB:C1:BD:2F:E6:C6:3C:66:59:70:F9:F6:1D:CD:8D:E2
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ofkBjfvBvS_mxjxmWXD59h3NjeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:4c::/48
Signature Algorithm: sha256WithRSAEncryption
00:ae:31:0a:2e:28:43:f0:f1:63:08:dd:2e:9d:72:dd:cf:92:
8e:38:64:1d:29:25:5b:01:a0:cc:89:d2:7b:66:93:b2:ce:3f:
28:a7:14:23:63:8b:a4:97:b9:aa:ce:e4:b3:15:39:81:ed:53:
10:f5:fc:6f:d4:ef:1b:a7:00:2b:c3:41:41:fd:11:c3:78:58:
4d:4f:4a:e4:a7:fa:e2:2a:32:77:1a:92:c3:aa:a4:80:0e:c3:
4b:59:d6:1f:c3:18:26:1f:9d:19:a0:51:2f:5d:45:8b:dc:7e:
dc:a3:73:f3:5b:e9:5c:0b:13:d6:d3:44:95:22:e5:ef:77:4b:
72:a0:b2:a3:9d:99:bb:52:b1:45:25:1f:49:f0:90:e7:34:77:
53:b6:7a:7c:76:69:ef:dc:3d:43:b8:90:58:8c:2c:f6:6f:a4:
d3:0e:5d:bc:72:e6:58:d8:2f:94:21:0a:6b:73:a1:87:d1:fd:
5a:07:80:70:d0:a2:af:09:be:e5:25:3a:fa:f5:65:d4:8a:30:
7d:4e:2a:86:6e:a3:14:fd:22:4f:cf:06:2a:2c:5e:c3:91:f2:
11:d2:67:b0:93:43:c9:80:cb:6c:95:cb:df:dc:2e:c9:ec:1d:
59:3f:d0:0b:17:fa:db:c8:9e:b7:f5:00:32:8e:65:91:79:e0:
e4:7e:84:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org