Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/obbnpJcwObsgPqVoOWgDTPs3AtQ.roa
File: obbnpJcwObsgPqVoOWgDTPs3AtQ.roa (raw, json)
Hash identifier: tcNOq9QOOfes+AmRI1nPHzJBBLgPbrtTu/YUG3acBEE=
Subject key identifier: A1:B6:E7:A4:97:30:39:BB:20:3E:A5:68:39:68:03:4C:FB:37:02:D4
Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial: 018CCA2BE37B96F54A9D6C369F586FC0C2F7
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/obbnpJcwObsgPqVoOWgDTPs3AtQ.roa
Signing time: Tue 02 Jan 2024 12:35:23 +0000
ROA not before: Tue 02 Jan 2024 12:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200149
IP address blocks: 2001:67c:2f08::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e3:7b:96:f5:4a:9d:6c:36:9f:58:6f:c0:c2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Validity
Not Before: Jan 2 12:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1b6e7a4973039bb203ea5683968034cfb3702d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:93:e4:db:9c:9a:ad:96:43:dc:09:15:80:
1e:be:cd:89:ff:19:5e:6b:90:48:77:36:a4:15:8f:
37:26:3d:6a:61:c7:dd:ea:43:b8:97:5b:43:41:e0:
9e:e0:8e:80:1f:cb:d4:18:3e:d2:a8:98:1d:33:4d:
9a:bd:ac:df:76:4b:c7:78:70:8a:20:be:b0:36:60:
61:f3:9c:1f:81:38:05:46:8c:69:1c:7e:e8:9e:d0:
69:cf:64:bc:93:8a:fe:84:87:dd:f2:03:23:53:1e:
91:ff:ed:da:9d:91:5d:a5:82:e3:cb:60:f8:46:24:
c6:74:d9:4e:28:4c:2c:a9:9b:ac:7a:09:b6:73:0e:
60:b6:09:f4:2c:a0:ac:98:4c:da:3c:1c:0c:56:ec:
8a:8f:56:24:48:b1:73:80:bb:5f:2d:5b:d7:43:e0:
f3:d4:f2:6d:9b:4e:94:4c:45:36:09:25:67:7b:57:
69:75:f5:fd:e7:d3:fc:25:02:4b:70:05:8e:09:6a:
2c:2d:29:a6:43:a4:47:03:e6:ee:7c:7d:8b:ee:a3:
56:71:f0:f2:c6:40:99:09:51:df:6a:bc:56:ef:e8:
53:91:37:02:31:3d:29:69:7b:31:75:8d:c3:cb:fd:
bb:51:eb:0e:40:1e:41:1a:f9:74:f3:53:0e:0b:c8:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B6:E7:A4:97:30:39:BB:20:3E:A5:68:39:68:03:4C:FB:37:02:D4
X509v3 Authority Key Identifier:
keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/obbnpJcwObsgPqVoOWgDTPs3AtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f08::/48
Signature Algorithm: sha256WithRSAEncryption
1a:39:50:66:f9:76:ef:6d:96:57:70:f9:85:ef:3c:35:d6:cf:
09:9a:a6:92:9b:ee:22:ab:81:63:cc:61:26:52:f1:58:3f:e1:
17:ea:a5:c7:e7:ea:2b:ec:20:9d:99:71:8c:c4:d1:62:8b:d3:
ab:f1:fd:ea:b1:bf:65:77:25:7e:3a:36:ea:dd:ec:0f:65:7d:
3f:e2:ca:c8:fd:bb:b0:3d:49:d8:66:fb:a0:9d:b4:6b:8d:85:
38:48:aa:28:f5:23:8a:09:13:ed:57:db:c1:99:eb:a5:98:d6:
6d:7f:86:24:f4:64:0b:f3:08:82:82:c5:24:db:22:cd:74:c2:
54:36:19:e2:6e:ae:bb:0c:11:f6:ea:61:e1:40:54:12:b1:48:
f0:c7:e7:31:48:49:05:d1:f5:ff:50:1c:fe:eb:89:1b:ce:ed:
ee:fa:20:2f:80:50:61:c6:54:01:61:18:8d:a6:e5:ab:4a:b8:
ba:b7:a5:50:71:83:11:dc:4a:d8:db:2f:79:f6:4e:e5:2d:e2:
0c:1b:a3:2e:6e:45:96:d8:7e:55:5b:8a:12:7a:cd:34:e4:72:
11:9e:00:14:4a:a3:d4:59:85:7f:18:21:5e:62:aa:26:15:f8:
99:68:38:c7:5e:a5:a4:96:64:3f:02:f9:3b:84:d8:0c:6a:c0:
2d:95:7b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:32 2025 by rpki-client