Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/OjlqIYN3LMeW8-OB8psz1tL-jvM.roa
File: OjlqIYN3LMeW8-OB8psz1tL-jvM.roa (raw, json)
Hash identifier: sTy+6EFlkHVhPdCZRQM+eo0RTwV36T9JKxn6iHlA2Jk=
Subject key identifier: 3A:39:6A:21:83:77:2C:C7:96:F3:E3:81:F2:9B:33:D6:D2:FE:8E:F3
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0185718C19063FC1664E7EDC2D9DA8E6C5F9
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/OjlqIYN3LMeW8-OB8psz1tL-jvM.roa
Signing time: Mon 02 Jan 2023 08:14:44 +0000
ROA not before: Mon 02 Jan 2023 08:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208386
IP address blocks: 2a0f:9700::/29 maxlen: 29
2a0e:c640::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:19:06:3f:c1:66:4e:7e:dc:2d:9d:a8:e6:c5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 08:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a396a2183772cc796f3e381f29b33d6d2fe8ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:fc:cb:36:10:a3:92:bf:d1:02:58:c9:60:
9e:99:26:b3:22:55:64:9e:f5:5c:45:5f:cf:cf:a0:
8c:ff:8e:06:2b:96:35:07:94:c1:57:ab:8e:62:85:
85:22:7b:51:75:28:26:23:ba:5a:29:dd:4b:e0:b7:
4a:f0:8c:ac:3e:d9:18:55:09:02:5d:28:f7:bc:e0:
5b:8b:77:44:eb:99:ee:2b:aa:a1:1b:79:52:eb:7a:
41:f1:46:f8:a0:9d:3e:ff:68:37:0f:f4:a2:8e:4b:
e6:c7:5b:6b:cc:e9:1f:7e:91:f6:2b:af:26:0e:52:
26:eb:5a:65:38:25:84:77:71:37:f0:79:6d:a9:33:
d4:3c:07:f7:4c:a5:df:0a:46:40:b5:6f:49:12:a4:
69:f0:42:9c:3f:81:06:4f:3d:43:b1:fa:cd:b6:76:
02:88:70:36:a8:1f:5e:90:bf:f9:95:f0:4e:5b:40:
84:3e:9d:5a:c6:46:05:04:e0:a5:46:81:eb:07:e5:
21:da:dd:94:79:7a:b9:86:b9:ba:ff:a5:b6:fb:99:
bd:0a:09:ab:e0:81:e8:eb:16:b0:07:c1:1f:4a:d4:
1b:1c:32:1d:28:40:14:02:8b:8a:a9:0a:16:e6:42:
ba:6c:77:63:52:65:93:47:59:1f:7f:e8:b8:59:c0:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:39:6A:21:83:77:2C:C7:96:F3:E3:81:F2:9B:33:D6:D2:FE:8E:F3
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/OjlqIYN3LMeW8-OB8psz1tL-jvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c640::/29
2a0f:9700::/29
Signature Algorithm: sha256WithRSAEncryption
bb:1a:6e:76:be:d6:9a:d8:74:fc:17:b8:e2:d4:fb:47:35:13:
f2:ab:29:73:49:4a:89:47:df:ef:c6:9e:c5:30:fd:d3:0e:60:
b4:a1:95:e7:51:d6:18:f2:91:40:0d:bb:34:36:dc:23:65:68:
05:68:2a:35:48:24:9d:b0:78:47:b9:bd:0b:6b:2f:10:f8:97:
ce:1d:ed:53:60:e1:79:1f:f6:35:42:c2:a0:35:3e:b5:34:41:
5b:fe:29:05:24:ba:f0:31:2c:c9:f3:81:fa:3e:04:f9:83:c4:
0b:88:0c:c2:4e:1c:fd:5e:02:41:cf:f9:b7:a1:9b:f6:53:7c:
29:a1:27:e1:08:de:34:2e:05:cd:77:6a:3b:89:94:62:77:7f:
76:c6:6a:c6:d4:95:65:df:ca:4c:10:94:03:06:91:1f:a4:cd:
4d:38:0a:c9:43:25:fc:2d:96:28:34:6b:3a:6c:17:27:29:b4:
a0:10:c4:e1:db:30:e3:6c:e8:9d:6f:1c:4e:45:56:fa:6c:95:
35:04:f7:03:5b:53:0f:92:0f:30:7f:b1:1a:b2:cc:06:1f:1a:
ba:42:29:a2:6f:dd:93:c6:68:d8:4f:70:b4:e2:36:3c:07:03:
10:4d:0d:23:19:2b:5b:ea:d0:6c:a6:7c:e2:f8:3f:1a:a7:93:
be:31:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org