Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/orjoOCW31A57SjzBskJGGjZVyog.roa
File: orjoOCW31A57SjzBskJGGjZVyog.roa (raw, json)
Hash identifier: wj32DPKsg9v/aDFPofB6JA9xwynMwNN54xD9PwQMOMM=
Subject key identifier: A2:B8:E8:38:25:B7:D4:0E:7B:4A:3C:C1:B2:42:46:1A:36:55:CA:88
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0849164B4478FF587383A47089A38
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/orjoOCW31A57SjzBskJGGjZVyog.roa
Signing time: Wed 07 Feb 2024 05:00:39 +0000
ROA not before: Wed 07 Feb 2024 05:00:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200708
IP address blocks: 2a0f:b241:133::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:84:91:64:b4:47:8f:f5:87:38:3a:47:08:9a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2b8e83825b7d40e7b4a3cc1b242461a3655ca88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:23:24:9e:8b:13:67:19:d5:15:13:60:85:
40:9a:03:e5:68:05:41:ad:76:c3:29:7f:a2:98:63:
32:0d:eb:67:63:db:ad:a0:59:77:aa:6c:47:0d:51:
d3:23:4b:f9:03:89:e9:9c:44:ff:17:68:41:22:6a:
20:91:76:18:ef:07:a7:8b:13:0d:43:67:a4:af:ae:
9b:0d:ee:27:11:34:ae:7d:a0:fc:af:ae:05:47:89:
ac:1c:e1:c5:ec:33:8d:00:be:64:db:1c:9a:72:9e:
13:53:85:9a:71:d5:cc:3a:56:41:9d:0a:08:91:92:
c1:31:86:a7:b0:ec:f1:0e:be:fb:8e:d1:c4:86:c2:
16:9a:a0:76:68:80:b4:8d:cc:42:16:bd:ad:a7:b2:
35:a5:40:02:40:d2:6a:32:99:e9:28:81:95:05:20:
1f:39:33:fb:c3:65:54:a6:dc:f2:a6:b1:40:fd:d6:
8d:c0:2a:45:e8:34:9a:40:13:19:ae:c6:31:9f:0b:
62:48:64:7a:07:d9:bf:af:c5:ce:1a:7c:47:fb:ca:
a2:86:97:72:54:08:84:83:f6:b2:ad:67:d6:06:34:
ff:03:7e:78:02:40:af:e7:1e:4c:08:64:0d:9d:46:
20:67:36:3d:d5:f7:00:60:c4:b8:2b:4c:7a:3b:46:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:E8:38:25:B7:D4:0E:7B:4A:3C:C1:B2:42:46:1A:36:55:CA:88
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/orjoOCW31A57SjzBskJGGjZVyog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:133::/48
Signature Algorithm: sha256WithRSAEncryption
11:06:db:d6:3d:81:0c:88:62:8f:b3:f9:b5:a4:d5:f1:ed:9d:
81:06:fa:52:3a:11:68:2f:4d:20:29:9e:40:9f:ec:0f:9f:2a:
bf:89:7a:fe:b7:0f:0d:16:2b:d6:ab:dd:24:f3:e1:ff:43:97:
5a:af:d6:a0:42:d1:b1:ca:ac:f5:b4:91:1e:ee:2b:2a:5d:3a:
58:ba:54:65:e6:f7:95:c0:bd:f7:c6:f8:f5:2a:18:94:87:ec:
2c:f2:95:a6:b0:ba:c9:b7:2a:32:e2:29:15:2e:44:27:14:28:
5a:12:81:e5:e4:f1:2f:d6:b7:86:2b:53:b0:29:c8:9f:37:04:
47:27:c5:9f:8d:de:cb:77:4e:8c:c5:6e:4e:f3:8d:fe:53:51:
2c:25:73:fa:9f:38:5b:db:88:cc:47:67:16:f4:27:d6:8c:d2:
22:8c:e1:89:51:c2:a3:f1:02:50:f3:83:c8:4f:10:90:70:fd:
1b:d1:47:dc:cb:6a:29:2c:28:e3:ae:fc:30:a3:52:00:e7:e2:
42:b5:82:fe:ba:92:64:a8:7f:70:b1:5d:a5:f6:c4:8d:5a:ec:
9f:43:47:0a:14:5a:da:ec:4f:18:0e:88:fa:d0:f1:81:2a:07:
d0:be:78:f8:26:74:04:3a:61:6e:82:1c:e4:44:57:b7:0a:6b:
0d:ef:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org