Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6sM5oqtsKd3YUVz9nGmf0wzrK_I.roa
File: 6sM5oqtsKd3YUVz9nGmf0wzrK_I.roa (raw, json)
Hash identifier: l3gshnfZuyb52ILDUKUTqn+N3jLQwRHxcMXpNEgH0Fw=
Subject key identifier: EA:C3:39:A2:AB:6C:29:DD:D8:51:5C:FD:9C:69:9F:D3:0C:EB:2B:F2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C02B316ABF64CD19604C2010037E14EA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6sM5oqtsKd3YUVz9nGmf0wzrK_I.roa
Signing time: Thu 05 Sep 2024 03:12:21 +0000
ROA not before: Thu 05 Sep 2024 03:12:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Sep 2024 04:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:2b:31:6a:bf:64:cd:19:60:4c:20:10:03:7e:14:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 5 03:12:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eac339a2ab6c29ddd8515cfd9c699fd30ceb2bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:c6:c1:d1:b1:38:7a:5a:8e:f3:0b:24:0e:
85:38:38:4c:26:5a:ea:b8:bb:6f:30:1a:d1:fa:47:
84:0d:7e:49:58:78:a7:fb:52:10:e9:3a:37:e0:a3:
08:43:bb:fa:0a:96:95:9f:83:df:e6:22:5a:72:ef:
8e:97:8b:ee:ef:29:44:6f:8f:9e:42:74:a8:0a:cc:
6c:96:6c:3e:ae:da:57:1e:4c:06:51:88:77:fa:a7:
8f:ca:64:fe:d5:04:4a:d2:df:76:29:82:f8:5f:06:
aa:fd:ae:3e:91:d4:55:92:40:c4:75:20:d5:bb:73:
3e:f3:55:d1:4d:ae:3d:f1:1a:8c:31:c1:37:ab:d3:
6e:7f:c2:13:ab:e7:a9:0d:43:e9:4b:ce:bb:e1:ec:
fa:0a:8d:23:7d:59:b2:99:fe:c7:72:47:28:63:21:
61:c5:33:86:aa:11:6d:84:8f:3e:72:54:85:5b:3c:
59:19:ad:94:0b:3d:89:74:6d:73:8d:07:70:f0:67:
42:7e:b3:48:04:b3:0c:b4:04:32:8e:1f:6a:62:35:
15:0c:6f:a0:31:0b:7c:46:77:52:48:c4:21:40:3b:
46:94:af:34:df:f2:a3:94:1a:f1:8a:f6:9d:e5:60:
2a:a9:d1:ba:09:43:11:87:da:67:10:81:a8:c6:db:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C3:39:A2:AB:6C:29:DD:D8:51:5C:FD:9C:69:9F:D3:0C:EB:2B:F2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6sM5oqtsKd3YUVz9nGmf0wzrK_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
2b:99:07:ca:f7:45:95:e4:56:aa:2d:5a:77:8f:f2:8b:f4:d9:
56:61:06:f7:ea:0f:7a:62:9b:32:00:3e:41:6e:45:fd:fd:7a:
af:ad:08:88:55:da:c7:bc:f1:0d:39:97:98:61:5e:db:bd:3f:
35:60:82:c8:68:34:17:b7:48:e2:e4:07:88:f7:3a:9b:9b:9d:
32:d9:80:d1:ab:c2:05:cb:2e:9f:00:db:3b:b5:0e:54:5d:2b:
db:3f:06:a7:84:73:5b:ee:79:47:a7:35:39:e4:24:27:33:d2:
84:43:66:de:50:15:ee:2d:5b:58:46:1b:63:76:f3:d1:76:0b:
33:d2:85:13:27:99:44:37:53:f8:7b:c7:a6:ee:d2:d1:2b:88:
ed:f3:73:c6:ac:aa:e7:07:59:10:90:2c:fa:a2:d2:38:5d:cb:
87:08:f7:b5:5c:3d:4a:35:fb:a7:51:2c:e0:5f:6c:d2:12:ad:
ad:2b:b2:73:b1:95:e8:4f:5d:11:9e:1e:eb:f2:80:06:25:d4:
f6:fd:66:b6:12:47:b0:03:4a:23:40:bc:30:e2:e5:d8:6a:8a:
d8:51:58:37:b2:e8:91:07:ed:3b:71:bc:e2:b7:f6:0a:47:e3:
09:ba:fd:d3:d4:4b:ac:e5:f1:c3:76:8e:41:28:ca:d6:d2:48:
86:24:9a:15
-----BEGIN CERTIFICATE-----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==
Generated at Thu Sep 5 06:11:40 2024 by rpki-client on console-ams.rpki-client.org