Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0FkuBZg6ivt-lJP6ZvfPFwQOyGg.roa
File: 0FkuBZg6ivt-lJP6ZvfPFwQOyGg.roa (raw, json)
Hash identifier: YnVoXJOydflyVCOaeRzA4lgYGgfjQh9B/3F8xN64BvM=
Subject key identifier: D0:59:2E:05:98:3A:8A:FB:7E:94:93:FA:66:F7:CF:17:04:0E:C8:68
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191BD2A527F3503391959ED539677D25688
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0FkuBZg6ivt-lJP6ZvfPFwQOyGg.roa
Signing time: Wed 04 Sep 2024 13:12:33 +0000
ROA not before: Wed 04 Sep 2024 13:12:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 04 Sep 2024 14:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:2a:52:7f:35:03:39:19:59:ed:53:96:77:d2:56:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 4 13:12:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0592e05983a8afb7e9493fa66f7cf17040ec868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:3b:99:a2:b9:3c:76:a5:2f:a5:9f:82:a5:
ba:d5:35:97:0b:00:cc:d9:e9:89:32:d4:e3:9f:43:
47:ad:41:a7:c1:2b:27:07:1b:67:d1:70:84:63:0e:
b7:b2:0c:37:d3:87:b9:e8:88:4f:20:b4:cf:dc:64:
72:61:42:7b:3f:ad:72:7d:dc:ad:8b:9d:e5:73:78:
be:d3:d4:85:6c:0f:e8:8e:ef:e1:2d:05:25:9c:45:
df:d5:a3:39:1e:79:eb:15:60:8b:60:43:4e:c7:f2:
34:7b:89:1e:5d:51:f7:3f:8a:01:09:06:39:93:d2:
b8:e3:ea:44:67:de:8d:11:4e:08:a1:a0:46:95:56:
07:f6:5c:a9:00:56:37:47:e6:c2:d1:fb:db:6d:8d:
41:a4:9d:5a:3b:da:f3:db:00:84:ef:e0:dd:91:32:
00:e0:f3:5a:f3:ac:0a:ec:f6:7e:59:9f:aa:4f:71:
8b:c7:2e:6d:7c:ab:e2:62:c7:f5:8b:56:6e:c1:13:
49:4b:60:8d:4d:51:8b:4f:de:1d:e8:9b:cf:95:9e:
82:fc:72:07:ea:32:66:36:13:e3:81:33:d9:2c:65:
75:b5:53:43:ec:08:e1:ca:25:e2:37:a2:94:cc:61:
69:34:10:80:f7:6a:57:c5:aa:42:fe:7e:fc:93:3d:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:59:2E:05:98:3A:8A:FB:7E:94:93:FA:66:F7:CF:17:04:0E:C8:68
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0FkuBZg6ivt-lJP6ZvfPFwQOyGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
63:40:46:06:ca:e3:d0:f8:57:9c:1d:92:46:19:e3:8c:da:c1:
74:88:1c:5b:27:16:9f:37:a4:d6:29:2e:1a:76:f4:91:f2:70:
4b:d3:d0:a6:29:e8:d7:41:ea:db:a4:d1:14:9f:61:c6:25:b5:
b7:d1:c0:f5:6a:2c:c1:b3:b0:81:2c:5e:2e:99:c4:af:7a:c6:
35:bc:5a:ba:9a:5f:7b:86:63:91:d9:3e:f1:2f:ad:5a:45:ed:
53:a6:a9:55:b8:2f:ad:5b:f1:c7:69:86:3c:2f:4a:98:f2:c8:
f0:c0:1e:a4:35:cc:f8:40:df:90:81:75:a0:60:7d:f0:6d:32:
6b:8f:e8:d0:e4:f2:03:87:4c:98:e5:55:ae:6b:4d:4c:c6:e5:
93:a7:54:24:53:a5:2f:16:71:b7:f7:dc:4b:11:69:f7:9e:18:
b4:a9:78:2e:94:b8:3e:61:bf:cd:46:e3:81:ed:9a:16:f1:99:
ee:9d:c0:d9:ba:2a:c3:b8:9e:16:00:4d:c2:e5:31:73:bb:e1:
68:ed:cd:3f:51:ec:ac:bf:bc:11:66:ac:7e:e8:b2:c7:2f:15:
91:79:23:48:5d:9e:ca:2c:c7:db:d6:b7:92:90:65:86:2e:22:
a8:53:95:08:9f:8b:aa:32:2d:0f:f3:43:44:49:83:7f:14:3e:
92:a7:b6:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:01 2025 by rpki-client