Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/OjiRD-sjDCqnGDSUJM0YsuOpOfU.roa
File: OjiRD-sjDCqnGDSUJM0YsuOpOfU.roa (raw, json)
Hash identifier: LKdrA1JMiFmRC6djQhS6Xc9bjDsuGeKCx7ZFJwcLhyY=
Subject key identifier: 3A:38:91:0F:EB:23:0C:2A:A7:18:34:94:24:CD:18:B2:E3:A9:39:F5
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 018CC42465D2F8C1426BA4756A20FBDD19B7
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/OjiRD-sjDCqnGDSUJM0YsuOpOfU.roa
Signing time: Mon 01 Jan 2024 08:29:28 +0000
ROA not before: Mon 01 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42691
IP address blocks: 192.109.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:65:d2:f8:c1:42:6b:a4:75:6a:20:fb:dd:19:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Jan 1 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a38910feb230c2aa718349424cd18b2e3a939f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:9c:a5:58:47:4c:8d:f7:0b:c8:85:5e:f2:
40:a9:79:f7:52:ed:e1:94:21:e0:d3:07:3a:01:42:
d8:f1:98:bb:3f:9a:36:c8:a9:39:4f:4c:9f:54:84:
3c:32:09:19:6a:4c:eb:14:f5:da:8b:4a:4f:da:2a:
af:43:63:34:26:08:dc:35:02:be:20:57:59:f5:b3:
d6:60:9f:9a:17:40:ae:c4:26:b2:f6:39:33:bb:17:
d0:94:de:22:89:4e:bb:43:62:c7:4f:e6:ba:9e:c7:
a8:b2:5e:8c:c1:a4:b1:b6:dc:94:04:a2:ac:3f:2a:
82:6a:74:97:9c:41:dd:af:16:f2:00:05:73:e0:2a:
c2:b0:07:04:d3:e0:fc:1e:30:07:73:c7:7c:d1:35:
a8:a3:cf:df:fe:95:d8:f1:a3:ba:21:21:9a:30:fe:
e2:68:1a:55:be:10:b1:7e:23:1e:ca:6c:e4:06:11:
b7:8d:d8:92:cf:f4:ed:15:34:96:f2:1b:3f:65:73:
95:aa:79:be:b9:5b:8c:0e:22:7a:05:6a:c6:55:a3:
c1:bb:af:a8:c3:13:5a:5e:47:27:b2:0e:13:d2:3a:
5a:f5:44:85:ac:88:8d:28:bb:34:8c:6d:42:38:85:
29:35:13:71:fe:8b:37:1f:ef:6a:f4:1a:72:54:76:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:91:0F:EB:23:0C:2A:A7:18:34:94:24:CD:18:B2:E3:A9:39:F5
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/OjiRD-sjDCqnGDSUJM0YsuOpOfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4e:02:7a:b3:8f:5c:ad:57:c6:98:22:9f:da:32:15:70:40:
fb:7d:42:a0:66:7b:bc:0d:d3:fc:42:ac:a5:c5:cc:05:4a:08:
60:09:32:94:2e:4b:63:09:93:b1:39:de:6f:13:5b:96:3a:9f:
c0:c7:db:eb:a8:eb:83:e0:2d:7e:fb:58:80:87:0f:6e:7d:d9:
d5:34:59:2d:dd:80:4e:e1:0b:7a:1b:6c:82:1a:26:05:4e:69:
34:40:5d:0d:e0:c0:72:42:3b:3b:2e:3e:20:53:33:63:8c:89:
3c:a7:94:83:87:53:e4:ed:25:3b:3d:b7:88:38:60:2b:27:64:
ec:d1:e2:fa:fe:06:a8:67:73:9e:14:15:94:e8:eb:b0:44:9a:
cb:4b:52:2f:48:d9:52:e5:3a:d2:e9:89:3c:cc:30:18:27:11:
0d:9e:ed:fa:c4:69:be:a5:50:80:fb:b3:ae:54:ac:79:ed:bd:
90:77:7b:df:16:fa:44:4c:f6:71:d6:48:a9:97:a3:63:08:da:
e4:76:be:de:7e:5f:5d:ea:e7:84:75:67:d2:39:4f:64:76:b7:
52:c9:06:1a:71:4a:8e:19:86:fa:f0:b7:a5:2f:f6:25:42:03:
d5:f6:29:f0:df:83:0e:52:b1:60:ea:dc:92:e8:3a:a5:4a:ae:
0a:84:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:59 2025 by rpki-client