Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2gCM3ZBEevTekfxawj6AwkJiy7I.roa
File: 2gCM3ZBEevTekfxawj6AwkJiy7I.roa (raw, json)
Hash identifier: IuP+utBM382EiIGSqbyhPUQCqX0YkuKxte8RU/LlktM=
Subject key identifier: DA:00:8C:DD:90:44:7A:F4:DE:91:FC:5A:C2:3E:80:C2:42:62:CB:B2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01910D6BF549BA707BC6094C5304DECE0FBE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2gCM3ZBEevTekfxawj6AwkJiy7I.roa
Signing time: Thu 01 Aug 2024 10:11:04 +0000
ROA not before: Thu 01 Aug 2024 10:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 01 Aug 2024 11:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:6b:f5:49:ba:70:7b:c6:09:4c:53:04:de:ce:0f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 1 10:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da008cdd90447af4de91fc5ac23e80c24262cbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:44:6c:71:82:0d:d3:ff:c0:9f:d9:4f:04:
17:75:62:1a:9e:b7:a8:69:bc:36:fa:58:87:65:5d:
f5:ed:b7:c9:07:6a:9a:67:81:0f:53:2c:ec:d7:d0:
41:ab:74:bf:17:3f:ba:6f:f7:63:6c:b6:00:7a:4f:
d2:c6:e7:6e:3e:ac:86:7c:87:83:a2:db:65:04:5b:
b2:c2:d7:8d:48:ef:af:06:ae:db:9b:d7:46:c3:f3:
f0:06:a4:d4:c2:6c:92:42:19:f5:30:49:d6:ee:d9:
8f:c2:8e:d4:c9:76:ab:1a:f6:43:78:27:67:63:37:
d9:f9:69:92:04:73:58:99:42:a2:cc:9b:c8:b4:1e:
e2:fc:2d:4b:38:53:b1:d2:b8:67:48:26:24:7d:80:
36:50:f6:de:7b:1d:31:a0:fa:6e:ed:66:b7:b5:50:
3d:c4:6a:a5:e1:8a:70:41:5a:2b:b0:b2:a7:c7:ee:
c8:1c:d9:30:46:a1:82:fe:c5:02:59:3b:5f:c7:de:
e1:40:a6:96:9a:fe:36:5d:52:49:56:b7:fe:b7:0a:
07:5d:40:b7:5d:96:a6:74:2f:14:5f:c3:9e:7f:68:
90:ae:b0:24:3a:d4:5e:f0:5a:79:b1:fc:aa:21:0a:
79:46:49:5e:2d:aa:77:d2:48:94:d7:d6:24:c1:60:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:00:8C:DD:90:44:7A:F4:DE:91:FC:5A:C2:3E:80:C2:42:62:CB:B2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2gCM3ZBEevTekfxawj6AwkJiy7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
8e:88:2d:8d:14:97:8d:42:cb:1f:c6:c7:cd:d8:7a:91:15:81:
24:9c:d5:e2:55:73:09:32:82:5a:cf:78:33:3d:8e:6c:5e:13:
b3:11:5d:4e:71:d8:83:8c:0b:c5:4b:ad:b9:70:05:74:06:9c:
1f:a4:44:85:53:83:21:cf:cb:99:08:f9:a8:aa:1d:7d:54:fb:
29:70:cc:dd:f8:23:d9:e2:08:99:97:74:04:3f:cb:df:01:6b:
95:5d:de:e6:9c:23:8c:20:da:15:01:9a:74:f6:1c:2d:d2:d1:
ad:47:38:79:91:e2:b0:4d:a2:6c:c7:d4:73:87:a1:fb:6e:be:
97:16:b0:9a:85:06:dc:40:77:94:cc:4f:cc:07:a6:f7:ee:a7:
f3:ef:f8:d7:a9:48:41:4a:d2:0c:dc:aa:53:98:ad:7b:07:02:
92:f9:00:1c:67:8b:35:02:9b:35:49:99:57:24:87:ee:ce:4a:
3d:2c:0b:24:99:b3:a3:68:d6:dd:d8:b3:e1:49:66:f9:77:a4:
5a:fc:bd:ba:f8:2d:8c:85:ce:7b:e0:9f:f3:fb:a6:b4:57:aa:
e2:ac:96:ee:13:8d:c8:b9:4f:94:f7:88:4a:47:ec:e6:ff:de:
11:44:a9:e6:1c:1f:26:47:66:49:d0:66:dd:57:41:92:27:5e:
8d:b6:48:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:45 2025 by rpki-client