Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3VuwdMry8Fz3oBKMRxuyWQsaikY.roa
File: 3VuwdMry8Fz3oBKMRxuyWQsaikY.roa (raw, json)
Hash identifier: CZEUUozO7bBLKlgP/iBYPIUFmO4Kix0mPWEpq1azctM=
Subject key identifier: DD:5B:B0:74:CA:F2:F0:5C:F7:A0:12:8C:47:1B:B2:59:0B:1A:8A:46
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019173FE796F2F701481D446EF8C1255FE62
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3VuwdMry8Fz3oBKMRxuyWQsaikY.roa
Signing time: Wed 21 Aug 2024 08:12:22 +0000
ROA not before: Wed 21 Aug 2024 08:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 Aug 2024 09:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:fe:79:6f:2f:70:14:81:d4:46:ef:8c:12:55:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 21 08:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd5bb074caf2f05cf7a0128c471bb2590b1a8a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:c5:ab:e2:0a:cc:f3:d1:f3:f9:3a:67:b0:
47:f6:66:94:96:f4:ad:10:e8:01:00:cb:16:ec:08:
d9:41:6d:ce:f0:98:93:d5:57:b1:04:0b:67:f5:7f:
1b:5e:a1:47:71:21:81:35:0a:c4:62:4f:1a:bb:06:
4e:da:62:bf:63:51:43:cf:db:01:cc:98:6c:29:3a:
db:cf:f6:3a:0c:80:fc:f8:2a:f1:5f:da:0e:3d:fa:
47:0c:78:a5:59:48:21:7d:17:ec:8b:fd:96:4a:3c:
48:8e:1a:4b:65:29:7e:b4:49:56:73:9d:66:d2:46:
f2:7e:91:b3:ae:5c:58:01:04:fb:89:88:42:be:84:
c9:aa:2c:7d:c8:09:aa:07:3b:81:9a:c7:93:93:d0:
72:b4:83:9e:82:27:5d:ca:0d:91:54:3f:36:cf:3b:
c3:86:e6:39:e4:0a:61:6f:68:cb:64:68:31:49:19:
f8:c3:39:b7:88:86:53:75:13:0d:37:7e:ba:5f:65:
aa:e0:f1:96:af:88:fe:dd:87:cc:85:87:00:d1:1a:
fc:b6:9b:2b:b4:96:ed:64:25:12:96:0a:34:48:67:
6f:f5:b2:20:91:9d:75:2a:fa:fb:64:b5:15:9c:a5:
ef:7a:7c:f7:c6:ee:1e:f8:64:13:a6:d2:20:e1:c4:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:B0:74:CA:F2:F0:5C:F7:A0:12:8C:47:1B:B2:59:0B:1A:8A:46
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3VuwdMry8Fz3oBKMRxuyWQsaikY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
0b:96:d9:d5:dd:20:ee:1e:be:bc:9a:2c:56:46:45:12:cb:39:
bc:1e:56:49:37:04:00:10:35:f5:71:cc:36:8e:5d:96:61:28:
1e:ea:1b:32:af:05:19:0c:7d:4a:de:a8:3d:41:5b:0d:ef:e8:
e1:cb:8f:5e:b9:74:6d:16:c6:d0:fa:73:b2:55:ad:6d:98:f9:
51:fe:6f:3e:b3:72:9a:26:fc:38:04:76:d9:45:dc:a8:b6:32:
f4:82:8f:86:92:a3:13:1f:c9:bc:63:73:23:ed:bb:4d:b6:4c:
31:50:77:05:3c:c9:f7:67:b6:15:be:ba:bb:9b:da:a1:58:8e:
7e:ba:c2:21:97:a5:2e:0c:ec:28:37:ab:5c:be:a0:77:71:57:
75:36:f0:83:cd:ae:7e:30:92:a9:3d:20:d8:7e:a1:72:1e:3c:
4f:09:1c:f9:f6:7d:94:96:3e:e6:71:aa:e1:b0:f2:76:f8:52:
92:b8:c1:a3:a2:ca:7c:69:9b:c9:6e:4c:33:ee:78:92:e8:fa:
13:75:a8:2c:02:f9:c1:f4:e1:26:af:a9:88:b1:6a:57:53:85:
a5:5b:2f:b2:34:78:ef:62:ee:ee:0e:43:16:d8:15:2e:92:fc:
1e:ad:e9:8b:95:bb:a5:5e:93:41:ff:98:7c:83:0a:bf:72:14:
05:b9:7b:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:40 2025 by rpki-client