Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-Bye3AP8-iuSTUrphQdpLuV8uKs.roa
File: 1-Bye3AP8-iuSTUrphQdpLuV8uKs.roa (raw, json)
Hash identifier: n5aTks0STXyu65G+oTd3Xu3alAX3A74j3tLsBT+Mi4Y=
Subject key identifier: F8:1C:9E:DC:03:FC:FA:2B:92:4D:4A:E9:85:07:69:2E:E5:7C:B8:AB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01919CFA7ED23D431E7639DF35CF4F0D7F91
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-Bye3AP8-iuSTUrphQdpLuV8uKs.roa
Signing time: Thu 29 Aug 2024 07:12:27 +0000
ROA not before: Thu 29 Aug 2024 07:12:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 Aug 2024 08:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9c:fa:7e:d2:3d:43:1e:76:39:df:35:cf:4f:0d:7f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 29 07:12:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f81c9edc03fcfa2b924d4ae98507692ee57cb8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:7f:81:74:67:37:bf:15:05:76:7e:73:80:
d6:15:20:a2:33:bb:55:88:5a:6d:21:11:cb:26:21:
72:29:cc:da:b3:9a:dd:16:4f:eb:ef:62:ff:81:07:
31:73:7d:ca:ae:88:b6:18:16:97:05:87:c4:60:85:
e2:81:71:ad:13:fe:fd:67:c1:06:63:14:9d:f9:f2:
75:8d:84:43:bb:78:9b:41:0f:18:54:25:82:58:e7:
8b:1f:96:3d:b0:58:bc:06:ac:72:66:00:5f:7c:9e:
ca:4c:81:28:40:fc:ee:38:01:9a:ed:3c:d6:ed:10:
aa:57:1d:44:78:73:0b:6b:92:3f:35:f9:68:01:43:
6d:67:d9:0d:24:7d:7e:31:4e:d3:29:1d:75:5d:38:
16:51:ca:60:a0:48:d8:81:30:02:1d:3c:8a:84:1b:
ce:76:21:83:13:08:a1:a8:7c:89:78:2c:c6:2d:2a:
35:b6:9c:9e:68:bf:a4:91:48:dc:ed:e2:30:42:bf:
a5:48:c5:f8:c9:2f:a6:ef:07:1b:95:b6:18:ab:19:
f4:ba:d2:cd:78:74:bb:5f:57:74:1a:b1:0b:be:9d:
58:ae:55:1c:1a:57:97:fa:cb:b5:22:77:4b:f2:0f:
26:81:df:54:35:46:f5:46:66:e3:a3:0a:2e:56:46:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1C:9E:DC:03:FC:FA:2B:92:4D:4A:E9:85:07:69:2E:E5:7C:B8:AB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-Bye3AP8-iuSTUrphQdpLuV8uKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
42:f8:de:99:0b:ee:f6:2c:6e:bf:cb:ab:d2:84:6f:95:d2:4d:
07:79:16:e0:28:26:25:87:f9:27:fb:60:b9:71:d1:12:a2:1b:
5d:42:3f:8e:b5:df:a7:f4:cb:23:39:29:8b:1a:21:30:22:d1:
d9:55:3b:24:1f:ab:35:5d:16:49:3f:52:05:d3:2b:08:9d:12:
da:8f:26:23:3b:ef:5e:01:13:99:43:1a:32:d4:f9:51:20:37:
dd:16:84:b8:6a:b2:d5:d6:6e:c4:a3:ed:f3:4d:ed:ea:ed:86:
66:f0:58:f5:20:74:8e:2f:7d:ee:a0:f0:28:a5:35:e4:bd:37:
7b:10:6a:30:0c:fb:c6:20:cb:1e:40:dd:7b:bf:03:5c:4a:9a:
d3:a4:de:87:5e:c3:27:b7:8c:56:e5:89:24:a2:1d:b2:65:e3:
ae:78:65:f7:d9:bf:81:64:e4:a3:11:5d:7c:c6:6d:fb:3e:c4:
63:53:54:1b:22:52:39:b2:b9:b0:30:1d:a5:ab:5a:dc:0c:f5:
6c:74:82:4f:1a:75:be:b5:f8:01:d2:24:c2:a1:6f:27:e3:33:
53:38:ee:ea:fd:e3:e0:71:db:c9:55:69:f0:33:ec:52:ad:c6:
eb:e4:54:1c:06:3a:89:18:e4:01:e4:a1:2f:43:04:f1:36:9c:
d9:95:17:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:14 2025 by rpki-client