Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OHPdYll2vZRvvPvP0EDhSFHxcFk.roa
File: OHPdYll2vZRvvPvP0EDhSFHxcFk.roa (raw, json)
Hash identifier: Ad4KBADj8jFVvauif5AgtrziaBcrBCH93UqaOhofN4c=
Subject key identifier: 38:73:DD:62:59:76:BD:94:6F:BC:FB:CF:D0:40:E1:48:51:F1:70:59
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA80B08E3610458E96E0D1343F09DC6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OHPdYll2vZRvvPvP0EDhSFHxcFk.roa
Signing time: Tue 06 Feb 2024 18:22:15 +0000
ROA not before: Tue 06 Feb 2024 18:22:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199613
IP address blocks: 2a0f:b241:88::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:0b:08:e3:61:04:58:e9:6e:0d:13:43:f0:9d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3873dd625976bd946fbcfbcfd040e14851f17059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:a1:43:2e:bf:5c:55:3a:93:6a:ad:1a:e1:
02:1b:73:2d:e5:0f:e0:2f:2a:cd:e9:4b:a1:de:bb:
aa:e0:29:76:d9:79:c9:c6:a3:4e:c9:98:96:4e:d3:
2b:bb:49:f1:ce:5a:e9:84:f5:71:d6:d2:c0:8d:74:
e3:1a:fd:2e:9e:a6:bc:f3:20:a7:17:cf:60:c2:00:
a4:10:a1:3e:99:c2:c6:b4:1b:59:ae:9b:05:ce:bc:
da:5b:d2:37:76:05:8d:18:1b:17:ab:dc:d5:15:40:
6a:49:d8:47:ff:0d:c9:98:df:ab:43:aa:73:4b:55:
d4:cd:64:62:5d:6a:fe:55:dc:11:ee:c8:51:8e:3f:
1c:e0:3f:ce:95:70:42:5b:3f:11:40:7f:1a:f8:27:
13:13:33:8d:28:89:2a:3e:f3:2c:8d:4b:39:14:a4:
5f:6b:33:a6:70:8f:04:0c:d9:b0:78:60:d5:fe:ad:
9d:b3:90:97:7f:dd:f9:ac:85:17:52:d5:3f:a6:0e:
38:14:22:42:0d:63:1f:77:9d:8f:35:24:e7:dc:fc:
1a:e9:a8:bc:21:f5:fe:74:63:88:3c:14:60:fd:08:
47:ff:b2:eb:a4:62:11:23:af:3e:8a:73:71:85:c3:
de:69:5f:79:98:9c:0a:37:99:9f:a6:32:a6:75:6b:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:73:DD:62:59:76:BD:94:6F:BC:FB:CF:D0:40:E1:48:51:F1:70:59
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OHPdYll2vZRvvPvP0EDhSFHxcFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:88::/48
Signature Algorithm: sha256WithRSAEncryption
57:1e:9a:be:9b:99:7b:64:36:6e:9e:69:77:92:db:18:30:1f:
b4:7b:84:57:42:64:bb:34:b5:e8:37:a7:49:6b:d9:80:fa:c6:
6c:4a:d2:c0:e3:88:5f:59:18:3d:4f:d1:b0:2f:e0:7b:4f:6f:
ab:02:92:6a:58:90:42:68:1c:59:76:07:6a:73:fa:61:1e:7e:
0b:8d:f1:7d:db:7c:c5:5e:a1:df:a0:2f:00:4a:c5:ae:9e:b9:
4e:48:7f:99:58:93:43:a7:bd:b8:25:d5:0b:8b:0e:9b:19:a3:
36:32:b2:37:c5:05:60:c1:95:60:9b:c5:65:3a:0e:94:35:68:
f7:1b:5f:04:51:77:27:db:ee:11:cc:37:85:3a:d1:06:c0:a1:
8d:9b:93:e5:0d:4a:1d:b4:0a:8d:08:80:24:eb:2d:5c:f5:62:
e7:d5:4a:25:e5:7b:70:30:3d:ae:0e:e9:5f:84:69:7c:a1:bc:
33:ab:e9:c4:c6:8e:b2:e0:f7:9f:48:e5:83:7c:82:95:54:1f:
51:1e:55:b6:c9:5b:8e:5f:4f:21:3a:55:95:f8:ab:87:ff:3a:
02:b7:0d:d0:cd:0d:00:80:b5:10:dc:bb:2f:6e:77:0a:b1:bb:
03:92:7e:e5:16:e0:73:e9:3c:68:d8:57:d3:9e:63:1b:8e:a5:
6a:45:ab:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org