Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/48I0z1uoleNpwIdSMB1ZHvxZJbs.roa
File: 48I0z1uoleNpwIdSMB1ZHvxZJbs.roa (raw, json)
Hash identifier: OcxKrSlVJWjhfrmkISMP5SwpAwxhnEVEAGMQ2YNf7yE=
Subject key identifier: E3:C2:34:CF:5B:A8:95:E3:69:C0:87:52:30:1D:59:1E:FC:59:25:BB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B15C02087C16E73303021BE40D821F8F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/48I0z1uoleNpwIdSMB1ZHvxZJbs.roa
Signing time: Mon 02 Sep 2024 06:11:22 +0000
ROA not before: Mon 02 Sep 2024 06:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 02 Sep 2024 07:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:5c:02:08:7c:16:e7:33:03:02:1b:e4:0d:82:1f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 2 06:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3c234cf5ba895e369c08752301d591efc5925bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:c3:f0:5a:fd:02:6b:f3:45:4b:6f:19:56:
96:65:eb:20:ca:40:27:0f:76:9d:91:df:7e:a7:6f:
21:58:ba:27:55:fa:9d:ed:b7:2d:84:f5:95:80:bb:
76:36:8d:65:ee:db:f6:aa:fe:d5:6c:fe:68:7b:7d:
24:56:f5:cd:72:7b:0a:55:a3:fd:fb:b9:d7:4d:4d:
ed:be:9d:41:3f:8c:7d:b6:53:d8:c4:cc:37:c6:e9:
75:5c:dc:48:3d:ac:50:92:61:24:0c:e4:86:a0:f5:
06:b5:84:85:c0:6e:75:a6:89:59:ba:a7:f4:4b:09:
90:b6:5a:3c:0b:e8:a5:7d:9e:6b:93:d6:f7:96:b2:
8d:23:d4:16:82:24:07:ca:27:35:90:77:a0:6b:61:
03:31:d0:74:d0:2c:9b:99:36:89:c3:eb:53:64:a3:
da:ae:27:76:01:86:ce:5e:5b:86:b1:a5:82:f1:c8:
d1:10:55:db:70:ac:94:68:9a:57:2d:f9:ca:86:6a:
ff:50:40:bf:52:36:34:20:2c:bf:d8:d8:00:4e:b6:
f0:c5:33:f2:62:82:89:1c:8b:e2:1a:c1:80:99:d7:
ca:67:16:df:c2:05:2d:3e:89:e9:e0:f3:ca:83:79:
ad:f2:eb:ee:28:91:14:ea:f7:5e:f8:c4:8b:65:28:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:34:CF:5B:A8:95:E3:69:C0:87:52:30:1D:59:1E:FC:59:25:BB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/48I0z1uoleNpwIdSMB1ZHvxZJbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
40:91:45:b5:60:20:b5:5f:92:e4:b0:11:3e:f7:9e:0a:ac:b1:
e1:a1:6b:83:23:54:fc:e2:b9:50:31:c0:20:21:4f:67:4a:a5:
9b:8d:11:ce:66:a6:2f:cb:fe:47:6d:be:8a:9d:c3:20:8d:f9:
ea:e1:ad:fa:73:87:60:b6:78:68:b3:37:4a:9d:07:f0:63:0f:
ba:9e:64:0f:a1:79:b9:80:55:b3:ad:b6:08:c0:50:ba:97:a9:
bb:23:0b:f2:c8:f6:ba:31:c0:15:11:bc:da:af:93:6b:65:f5:
2b:b3:1d:4c:8c:35:0d:89:08:e8:e7:52:35:cb:62:54:60:f6:
4d:23:38:d4:3e:b6:60:9d:22:06:41:35:ca:af:8f:5f:50:ca:
f3:22:b7:3a:2a:77:aa:c9:07:a2:75:50:c8:db:4d:65:df:e0:
13:9a:1b:88:f4:71:9b:a9:56:bf:eb:37:93:29:e5:d3:15:63:
80:59:46:d8:75:9e:6c:f2:d9:d9:85:36:09:1d:ce:b8:10:4c:
c0:b1:e5:9b:89:66:46:9b:b7:87:81:48:4c:a4:56:37:3d:b6:
e0:d0:2a:10:a1:8b:d9:0f:74:a7:64:14:8b:5b:47:b2:38:38:
c9:9e:03:5e:0e:56:59:12:49:82:7e:cd:17:c0:0a:db:06:f1:
52:0c:38:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:26 2025 by rpki-client