Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oCkm37fII5hqPi4eJz5EgjoCbqQ.roa
File: oCkm37fII5hqPi4eJz5EgjoCbqQ.roa (raw, json)
Hash identifier: BG5h6LyBzDwqQnlrvXQg0qcUQ5eABl8g8LxEtbv2nWM=
Subject key identifier: A0:29:26:DF:B7:C8:23:98:6A:3E:2E:1E:27:3E:44:82:3A:02:6E:A4
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA8107BEBB06F23CF3F8968464DCA41
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oCkm37fII5hqPi4eJz5EgjoCbqQ.roa
Signing time: Tue 06 Feb 2024 18:22:17 +0000
ROA not before: Tue 06 Feb 2024 18:22:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200007
IP address blocks: 2a0f:b241:90::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:10:7b:eb:b0:6f:23:cf:3f:89:68:46:4d:ca:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:22:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a02926dfb7c823986a3e2e1e273e44823a026ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:8a:c7:14:86:ee:72:36:08:22:dd:3c:1a:
91:96:8b:47:18:59:9d:87:00:92:4f:e3:06:76:f4:
19:07:49:ab:76:e7:ef:8d:c6:2d:cd:17:22:df:52:
47:5d:a9:60:d7:b9:56:f1:af:55:5c:32:59:58:84:
e8:9a:3e:42:2c:25:86:4f:39:fe:11:e5:ac:90:9e:
51:67:b4:0d:6c:f0:27:c1:6d:dd:bd:bb:1a:28:22:
a6:2f:21:22:68:6f:39:72:72:ad:b8:2e:0a:c8:7c:
ff:51:07:3d:d0:08:63:95:66:1e:53:82:85:b0:a6:
a9:af:81:7c:62:5d:a4:5b:c9:34:d9:75:84:0d:6a:
5d:e1:33:fc:5f:36:29:b5:d5:78:90:cb:3f:ee:1b:
ee:cb:b6:99:e6:e5:0c:6e:09:cb:1e:3e:20:72:ed:
30:72:06:5e:65:62:43:ab:7a:73:18:a6:34:ed:54:
44:f8:e3:e1:20:10:84:49:05:f9:5d:37:ac:a2:8b:
79:94:1c:58:1c:6a:6f:7c:31:65:05:bc:e7:83:86:
c5:64:4a:81:cd:f6:af:76:89:89:d9:d3:1f:ca:20:
86:46:14:01:a2:a4:de:0d:37:c8:dd:e3:e7:d2:68:
c4:16:da:f8:00:51:bf:f7:68:4c:c0:97:c6:96:fb:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:29:26:DF:B7:C8:23:98:6A:3E:2E:1E:27:3E:44:82:3A:02:6E:A4
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oCkm37fII5hqPi4eJz5EgjoCbqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:90::/48
Signature Algorithm: sha256WithRSAEncryption
17:9c:5e:6b:5d:62:cd:7f:99:d7:8c:66:b2:ff:0a:40:04:8f:
72:88:fc:3a:fb:c7:fe:be:6a:99:61:e3:9f:a6:e4:66:2b:5c:
a1:1e:99:70:d8:e9:31:35:91:fe:f9:9f:4a:cb:4b:23:ef:40:
10:a4:52:a0:96:ee:0d:97:0d:e8:6d:2e:6d:da:1d:ea:f1:65:
d5:a8:b8:ce:b0:88:6c:c0:ee:5a:4c:39:a4:08:b2:4e:c8:bd:
40:70:10:73:78:e4:0e:12:9a:a4:06:83:14:dd:5a:97:8d:a5:
25:95:55:f8:3d:46:ba:10:61:e5:20:d4:6f:7c:0f:93:48:80:
91:5e:cf:07:e0:e3:f7:3c:03:70:5b:af:ef:2c:d3:8f:5f:f7:
fd:70:37:c9:b0:f5:fa:c8:f9:ca:aa:d8:b2:89:ac:a7:e7:95:
9f:d1:76:fd:27:09:2b:dc:7b:44:bf:92:4f:ff:b5:eb:d6:68:
13:7f:28:79:ea:c0:02:b1:32:10:25:3e:e9:94:b3:6e:6d:01:
05:f4:c3:81:dd:eb:79:0f:d7:fa:b8:25:4a:c5:e7:19:a3:be:
9e:89:7a:3e:3b:9c:26:95:87:53:44:20:92:74:43:a2:9e:e8:
23:ab:c7:47:46:a8:cd:89:3c:bc:4b:6a:c1:ee:e2:d1:55:ff:
a2:2a:02:53
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qBB767BvI88/iWhGTcpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDI5MjZkZmI3YzgyMzk4NmEzZTJlMWUyNzNlNDQ4MjNhMDI2ZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaiKxxSG7nI2CCLdPBqRlotHGFmd
hwCST+MGdvQZB0mrdufvjcYtzRci31JHXalg17lW8a9VXDJZWITomj5CLCWGTzn+
EeWskJ5RZ7QNbPAnwW3dvbsaKCKmLyEiaG85cnKtuC4KyHz/UQc90AhjlWYeU4KF
sKapr4F8Yl2kW8k02XWEDWpd4TP8XzYptdV4kMs/7hvuy7aZ5uUMbgnLHj4gcu0w
cgZeZWJDq3pzGKY07VRE+OPhIBCESQX5XTesoot5lBxYHGpvfDFlBbzng4bFZEqB
zfavdomJ2dMfyiCGRhQBoqTeDTfI3ePn0mjEFtr4AFG/92hMwJfGlvv0bQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKApJt+3yCOYaj4uHic+RII6Am6kMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvb0NrbTM3ZklJNWhxUGk0ZUp6NUVnam9DYnFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQCQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAXnF5rXWLNf5nXjGay/wpABI9yiPw6+8f+vmqZ
YeOfpuRmK1yhHplw2OkxNZH++Z9Ky0sj70AQpFKglu4Nlw3obS5t2h3q8WXVqLjO
sIhswO5aTDmkCLJOyL1AcBBzeOQOEpqkBoMU3VqXjaUllVX4PUa6EGHlINRvfA+T
SICRXs8H4OP3PANwW6/vLNOPX/f9cDfJsPX6yPnKqtiyiayn55Wf0Xb9Jwkr3HtE
v5JP/7Xr1mgTfyh56sACsTIQJT7plLNubQEF9MOB3et5D9f6uCVKxecZo76eiXo+
O5wmlYdTRCCSdEOinugjq8dHRqjNiTy8S2rB7uLRVf+iKgJT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:10 2024 by rpki-client on console-ams.rpki-client.org