Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-wAX6xo-wbL6aJSVR2lzD7_WvtY.roa
File: 1-wAX6xo-wbL6aJSVR2lzD7_WvtY.roa (raw, json)
Hash identifier: GhslXWFs2D1TUzQyS0zl9oBAXjzOHks0jZkQLTJhv20=
Subject key identifier: FB:00:17:EB:1A:3E:C1:B2:FA:68:94:95:47:69:73:0F:BF:D6:BE:D6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C587952BF5F5544478FD6A83BCA1BEDE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-wAX6xo-wbL6aJSVR2lzD7_WvtY.roa
Signing time: Fri 06 Sep 2024 04:11:22 +0000
ROA not before: Fri 06 Sep 2024 04:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Sep 2024 05:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c5:87:95:2b:f5:f5:54:44:78:fd:6a:83:bc:a1:be:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 6 04:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb0017eb1a3ec1b2fa6894954769730fbfd6bed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:5f:05:65:2f:b5:04:b2:bb:14:b4:31:61:
43:8b:9a:8c:95:f5:8e:8c:fb:2c:b4:5f:bc:57:a6:
ec:56:e4:f4:39:65:8e:f3:1a:23:27:d5:8a:80:7f:
a8:9a:50:02:5e:d6:74:de:c1:43:3d:74:04:b6:1d:
6a:1c:5c:c7:58:66:b2:76:dc:36:78:62:f9:3e:e8:
0f:a4:85:66:b6:69:84:a5:2b:7f:d3:dc:d0:7d:b8:
2c:4d:01:e2:38:d7:3a:29:64:64:b7:89:dd:4f:a8:
1f:4e:a2:e1:e2:79:75:a6:b0:15:30:68:cd:00:d6:
5f:8f:d8:bd:b4:7c:f5:36:9b:bf:39:ea:3f:94:9f:
46:71:c8:14:cb:28:15:77:c2:ab:40:7e:8a:4a:12:
2e:a1:4a:15:62:13:54:b3:0e:17:51:51:90:7a:7f:
41:6b:a0:c5:f1:f9:70:17:02:33:f4:ab:69:48:6e:
b3:16:48:58:9e:55:be:f7:b0:4a:6b:0f:6b:64:a9:
78:c7:1a:4c:94:20:ab:94:e3:be:bd:6a:7c:8a:36:
ae:6a:13:2a:70:96:15:91:e5:25:6a:d1:72:48:1e:
ce:73:db:74:8d:03:c1:db:32:3c:f6:3a:ed:85:57:
d1:e5:ad:fa:38:89:8b:ba:1d:8d:87:76:7b:b5:da:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:00:17:EB:1A:3E:C1:B2:FA:68:94:95:47:69:73:0F:BF:D6:BE:D6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-wAX6xo-wbL6aJSVR2lzD7_WvtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
2c:9c:3f:10:11:3c:3d:5e:12:58:44:87:6c:04:d9:37:0f:e8:
53:88:d0:ac:2a:5c:e6:73:55:50:0b:9f:15:38:87:b7:13:2f:
33:ff:4a:5c:10:4f:7d:ca:08:33:57:7a:72:a1:c1:71:ae:8d:
d1:09:0c:db:3c:52:4d:41:81:09:5b:1d:46:48:06:e6:89:1d:
6c:75:89:6d:c1:ff:8b:f6:f3:af:fa:21:2b:a5:cb:24:03:c1:
26:97:87:bd:dd:f6:bc:0c:7f:49:5f:24:16:9b:73:12:5a:95:
95:07:51:b3:f7:18:ce:88:95:58:f5:78:b5:85:d5:35:25:de:
c0:4e:0a:3b:9a:d7:a3:65:ae:a5:2c:1b:e8:26:db:9f:98:dd:
88:60:76:a8:5e:b1:94:23:18:af:79:ca:90:57:9b:c4:33:60:
a8:40:4d:41:d3:1f:22:12:87:d5:bc:70:86:f9:dd:dc:9b:fa:
e6:bf:ac:af:59:a3:59:16:64:20:66:b4:67:98:2a:c0:02:53:
a2:34:b5:bd:f6:c6:f2:8b:3c:07:13:35:e9:3c:2a:d0:dd:86:
cf:06:80:40:1e:58:25:08:6b:a5:50:88:f4:90:b2:00:11:b1:
b8:00:d9:b9:74:f1:8a:ba:8b:f4:55:3b:cb:07:61:bb:06:2e:
17:4d:b5:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:18:14 2025 by rpki-client