Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1z3iQnzsOKRFnE2CUuBn3k3-jik.roa
File: 1z3iQnzsOKRFnE2CUuBn3k3-jik.roa (raw, json)
Hash identifier: vkL10MxyGwlOstTC+UCDw3n6lL2oMEzRLG1Ne0Vjesg=
Subject key identifier: D7:3D:E2:42:7C:EC:38:A4:45:9C:4D:82:52:E0:67:DE:4D:FE:8E:29
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01919D9F36023EE41595909DC21D0AA8F65A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1z3iQnzsOKRFnE2CUuBn3k3-jik.roa
Signing time: Thu 29 Aug 2024 10:12:22 +0000
ROA not before: Thu 29 Aug 2024 10:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 Aug 2024 11:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:9f:36:02:3e:e4:15:95:90:9d:c2:1d:0a:a8:f6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 29 10:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d73de2427cec38a4459c4d8252e067de4dfe8e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:1a:74:36:7c:d3:1e:d8:d1:23:91:90:89:
50:2d:51:ab:d1:bd:a8:27:44:fc:2a:42:68:d9:75:
da:e7:8e:de:d3:ba:8d:9f:a8:32:91:f7:ea:cc:e4:
72:68:0a:90:a9:1e:2a:55:81:0f:c6:5e:d1:4c:a1:
e9:67:da:bb:e0:13:0c:ff:ff:fd:11:71:22:8c:16:
ca:ce:b1:f1:b7:2e:88:04:a5:d5:3f:66:36:39:72:
c7:9a:e2:64:47:30:b2:30:8a:9a:6b:43:24:68:47:
bc:55:5f:75:eb:5d:5c:97:f7:60:3d:3f:fc:6f:68:
36:6f:30:67:e6:5e:3f:e6:a7:44:dd:17:b9:81:a7:
4b:d5:6c:44:2e:51:7a:93:4e:b3:4d:c5:19:21:9f:
8b:30:8d:20:af:e0:e7:9e:29:b4:55:7b:8b:d7:e7:
24:e7:d9:04:e3:fb:47:83:80:c1:ce:bc:45:f9:0e:
6e:bb:93:df:46:ea:d3:45:cb:be:ca:7f:8b:c5:ec:
ab:7f:ca:25:16:83:02:5e:75:dc:0e:f5:39:fc:dd:
0a:c9:21:1e:30:e6:ec:43:aa:f8:f6:7f:b3:bd:64:
0d:8f:f5:82:97:02:4a:f0:68:53:cb:de:f6:c8:55:
9f:64:be:d9:8a:fa:31:41:6a:88:79:a4:85:d1:d5:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:E2:42:7C:EC:38:A4:45:9C:4D:82:52:E0:67:DE:4D:FE:8E:29
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1z3iQnzsOKRFnE2CUuBn3k3-jik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
93:21:22:e2:84:3d:46:5a:8b:20:f3:d3:b7:65:20:f4:cd:3b:
3e:34:51:24:33:d1:50:c9:ef:ef:23:48:58:b1:15:86:48:96:
f1:99:f7:8a:aa:1c:dc:a2:b4:a9:9d:8e:92:be:90:c0:ff:3e:
1c:43:c0:45:fc:bd:b2:fb:89:1f:28:c1:e2:e4:d0:d1:25:c6:
22:84:c1:58:28:be:06:79:94:bd:d7:f9:bf:56:87:a9:82:d3:
27:5a:a8:9a:ed:ff:df:14:55:21:b6:70:97:21:0b:ec:05:ac:
4e:49:5d:9d:0d:72:19:ec:30:b4:f4:9c:2d:d9:a4:c7:34:cc:
cc:40:2e:9b:83:44:04:20:a3:e3:c4:42:d3:17:63:cc:54:13:
99:7e:18:74:bd:ff:7b:38:62:77:75:87:65:5d:b9:ee:62:73:
90:ce:10:16:d2:68:29:2e:f6:8f:03:a1:ac:e5:22:37:17:78:
3b:5d:92:e3:ac:70:63:8b:3e:e0:d4:0c:2d:57:34:ee:35:28:
3c:7f:ff:a2:58:3d:a5:fb:93:83:0a:e3:6d:6c:d7:e6:35:05:
6d:74:3d:c1:98:56:4f:73:85:5e:bd:85:d9:dd:8d:1f:5a:ad:
e3:b5:a9:41:13:25:66:de:91:a5:c6:9e:7c:06:64:bd:27:3c:
fd:66:b0:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:14 2025 by rpki-client