Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4pBBh92jFomUWWSNIpuZuRB9dk4.roa
File: 4pBBh92jFomUWWSNIpuZuRB9dk4.roa (raw, json)
Hash identifier: AEDta8trMMHVeRCn2WHZO1/mDyOxYvE2QuK5ik02ERA=
Subject key identifier: E2:90:41:87:DD:A3:16:89:94:59:64:8D:22:9B:99:B9:10:7D:76:4E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B538C667E1095BB449FCAB4235554917
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4pBBh92jFomUWWSNIpuZuRB9dk4.roa
Signing time: Tue 03 Sep 2024 00:11:22 +0000
ROA not before: Tue 03 Sep 2024 00:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 03 Sep 2024 01:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b5:38:c6:67:e1:09:5b:b4:49:fc:ab:42:35:55:49:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 3 00:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2904187dda316899459648d229b99b9107d764e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:6f:7a:00:09:89:1d:e6:fb:5e:e4:8b:be:
b9:c0:44:94:82:20:61:f6:43:a8:53:d1:fc:1e:83:
2b:5b:f9:a2:bb:2b:d7:72:02:aa:cd:88:13:78:19:
aa:7d:68:b5:14:0b:f8:a6:60:e7:2e:8a:d5:81:09:
3d:2f:0c:65:a5:1d:48:f7:db:c4:00:66:d5:65:9d:
9b:fc:08:f6:d3:55:66:61:37:76:6f:c1:45:e9:e9:
5b:0e:54:6c:68:92:71:16:12:04:fa:90:2f:ce:d3:
ba:b5:a4:41:3b:9d:ba:6e:6b:61:68:c1:66:ba:54:
5f:34:9d:f8:28:bd:2a:ec:65:ad:44:e5:b0:bd:10:
0c:91:fc:26:77:e2:7b:87:b6:f0:19:49:e8:39:34:
1c:d5:95:d3:76:7b:a1:22:e1:13:a3:ac:e5:62:aa:
e3:c2:9d:61:e9:0b:0a:c5:66:72:d4:8c:e1:9b:9a:
44:61:d8:37:00:20:2d:04:36:ab:89:4f:1c:c4:ca:
28:ba:d4:78:6d:1d:80:ef:a4:48:20:3b:c6:f3:c2:
62:d2:03:36:d1:b1:1b:30:29:aa:46:ed:5f:1e:e0:
b0:12:95:8a:6f:de:e7:01:e5:ac:4e:0b:d7:d1:da:
98:fa:95:33:31:88:15:6b:a8:1a:3d:14:a2:6c:75:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:41:87:DD:A3:16:89:94:59:64:8D:22:9B:99:B9:10:7D:76:4E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4pBBh92jFomUWWSNIpuZuRB9dk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
52:a0:25:70:da:49:82:ef:45:43:ed:10:f0:43:03:45:b3:5a:
eb:66:61:3e:e5:b2:54:51:38:b9:81:d2:cc:a1:90:96:3a:ac:
ae:73:c3:11:d5:22:2e:fa:10:70:81:ae:c3:19:a9:a9:4c:df:
c9:fa:ae:68:e2:79:d2:41:51:54:27:0f:06:3d:47:b4:03:74:
83:16:23:c1:32:25:b7:0f:fa:5e:49:10:d6:ca:89:69:b3:18:
78:20:f3:fb:25:ed:48:f6:c0:de:86:f1:6c:30:f0:d1:dc:bf:
19:c1:bd:98:ed:cd:a3:be:1b:68:50:c4:f9:ce:62:7b:79:ea:
2e:0d:7b:e5:82:1b:f0:36:93:4b:e0:6f:e7:ab:c5:79:e7:9a:
cc:ee:0f:74:b2:86:ee:41:a3:78:95:22:42:c6:4e:30:aa:d2:
74:8b:fc:30:85:dc:21:39:e3:2f:86:af:29:a6:cd:a9:8f:ad:
e0:5f:c3:50:3c:49:d1:0b:98:f7:77:1e:ba:87:e7:81:be:ad:
6f:9e:38:27:0f:23:38:39:8d:e9:1c:f2:af:d5:25:b3:ac:99:
90:f1:b6:f9:2e:b3:fc:ae:70:73:88:cd:fa:d8:80:ce:22:e3:
23:af:97:13:0b:81:0c:f5:b7:ea:8f:4c:17:6b:5c:b8:c3:7f:
68:9c:39:6a
-----BEGIN CERTIFICATE-----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==
Generated at Tue Sep 3 03:39:32 2024 by rpki-client on console-fra.rpki-client.org