Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oo_Onkjo9RwCampq1Mn_dAN1BFA.roa
File: oo_Onkjo9RwCampq1Mn_dAN1BFA.roa (raw, json)
Hash identifier: rSFbdn1K0lNSomUJMu8LNiT678Gq/KqQJc4T8ZRaHw0=
Subject key identifier: A2:8F:CE:9E:48:E8:F5:1C:02:6A:6A:6A:D4:C9:FF:74:03:75:04:50
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E39C72D09CDB78B8AB9636492847
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oo_Onkjo9RwCampq1Mn_dAN1BFA.roa
Signing time: Tue 06 Feb 2024 18:24:16 +0000
ROA not before: Tue 06 Feb 2024 18:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200775
IP address blocks: 2a0f:b241:d1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e3:9c:72:d0:9c:db:78:b8:ab:96:36:49:28:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a28fce9e48e8f51c026a6a6ad4c9ff7403750450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:65:3c:fc:16:a4:ca:70:96:0d:3d:9f:2d:83:
bb:7d:c8:6c:ec:67:84:93:09:fa:9c:71:79:52:57:
e5:40:7c:b5:e5:c2:15:0e:0e:4b:f1:e8:0b:1e:ac:
5d:95:34:ca:b4:3e:d5:88:85:53:24:a3:dc:5c:dd:
21:67:d4:88:66:01:4a:4f:ac:3e:15:f4:ad:cb:01:
ce:9e:67:93:34:ec:40:e8:7a:d4:e1:0f:8b:a7:77:
07:eb:ad:fa:42:3e:c1:fc:8e:12:d3:58:38:0e:a7:
3b:46:35:59:5c:65:22:45:61:55:e0:81:d4:71:ed:
9e:ec:2d:c9:ca:72:31:f0:2c:f9:3b:d9:0a:7d:37:
30:41:81:54:f8:07:ab:f1:f2:e1:f4:d4:60:23:f0:
7b:50:d8:d6:10:9b:34:40:bf:65:25:19:0b:5e:a5:
da:70:89:2b:d6:d3:72:9b:08:77:ba:3c:32:14:86:
0b:00:2c:19:34:c4:d1:44:f3:ea:cb:6d:f3:b0:91:
94:37:64:80:b9:5d:b1:60:a3:ab:13:ae:85:fc:ab:
3e:cf:8f:14:e3:1d:8c:16:5e:7a:82:4a:d5:86:a3:
b2:72:34:dc:b6:83:2a:18:9b:6c:79:60:58:fb:8d:
14:55:55:48:8a:d5:56:2d:47:4c:e2:7d:79:43:fd:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:CE:9E:48:E8:F5:1C:02:6A:6A:6A:D4:C9:FF:74:03:75:04:50
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oo_Onkjo9RwCampq1Mn_dAN1BFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d1::/48
Signature Algorithm: sha256WithRSAEncryption
3f:fe:2b:3a:48:68:2f:54:92:d1:35:cd:d8:d3:eb:34:ec:5c:
d1:58:e0:53:4a:b2:87:0f:b5:8b:53:06:ab:4b:30:74:61:02:
7a:e8:67:77:62:c9:e8:67:ec:e6:f3:3a:35:63:04:d4:e0:6d:
6e:30:09:4d:68:d4:e6:0b:5b:93:1e:a7:b5:04:e0:b2:92:a7:
d0:ac:b0:07:92:17:cd:f0:72:5b:e7:6b:aa:34:6d:40:82:86:
97:e4:60:80:5a:e3:39:b6:0c:53:e6:f4:2f:51:71:bd:9e:18:
f1:41:34:de:d2:57:81:b6:9a:2c:d8:78:9f:ca:8e:d5:b5:77:
59:d3:d5:2c:df:d6:75:81:13:a8:d1:b6:1e:9c:21:c1:db:8b:
b5:56:b4:3a:dc:43:15:dc:30:33:e8:7e:81:77:0e:fe:6d:b3:
d8:91:bb:90:43:fa:02:c4:2c:f6:4d:1c:8c:2e:b6:d6:9e:76:
2f:c0:6d:74:c6:f9:1e:15:98:06:60:7b:32:46:42:ca:93:79:
64:bf:e0:6e:ea:0f:8f:a7:a7:60:06:be:19:a3:bf:f6:c3:d6:
dc:b8:5d:c7:88:95:c3:c3:0e:0a:c7:27:e9:a5:6c:0c:3c:08:
1a:ec:27:fa:14:e9:c5:fc:75:cd:1b:87:a4:ae:fb:a3:04:e0:
7c:fe:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:13 2024 by rpki-client on console-fra.rpki-client.org