Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6tp9sl35sewtFuh6aa6CrpZOFhU.roa
File: 6tp9sl35sewtFuh6aa6CrpZOFhU.roa (raw, json)
Hash identifier: U1jzhEv0EINH3xzwtcJRk5faUCnadr3G91E+RUPFWCI=
Subject key identifier: EA:DA:7D:B2:5D:F9:B1:EC:2D:16:E8:7A:69:AE:82:AE:96:4E:16:15
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191EB7C7977ACE799FC2568D5D7D8ECF72E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6tp9sl35sewtFuh6aa6CrpZOFhU.roa
Signing time: Fri 13 Sep 2024 13:04:48 +0000
ROA not before: Fri 13 Sep 2024 13:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:191:eb7c:342b/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 13 Sep 2024 13:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:7c:79:77:ac:e7:99:fc:25:68:d5:d7:d8:ec:f7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 13 13:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eada7db25df9b1ec2d16e87a69ae82ae964e1615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:0f:6c:32:b9:8d:59:e3:07:9f:68:d2:7b:
ce:dc:20:56:c2:12:c6:55:74:92:38:29:14:af:82:
cc:82:b5:ca:1d:df:50:1f:93:4d:c0:7e:07:55:b8:
e1:70:75:00:92:90:28:81:f6:07:35:a5:75:6c:7d:
07:9f:1e:39:a7:c2:a1:a2:47:0e:fb:4e:ca:08:a5:
c7:88:2a:94:15:96:60:96:e5:65:58:8a:93:c5:f5:
43:8c:09:e9:36:10:86:a1:a6:73:92:9f:2a:b4:5b:
99:2d:84:db:a6:7e:f2:c5:ae:15:42:01:a8:a6:d6:
06:2b:2b:ec:69:72:82:81:5a:c7:6c:a7:55:30:b3:
b9:3e:79:78:f8:07:9c:8a:d9:22:37:6d:6f:59:16:
67:bb:a5:1f:48:cc:d9:52:97:0b:5c:d5:dd:ce:f0:
13:6b:bf:65:fb:86:0e:42:15:f0:9f:48:bd:92:9b:
96:56:f7:53:f3:27:ef:ca:98:3b:e5:d6:58:35:8c:
aa:3b:d0:b4:08:b0:8a:72:d9:43:15:e5:9d:36:ac:
92:70:5c:5a:52:77:ca:0f:10:0b:fe:9c:b6:5f:6d:
e1:e5:c4:2c:35:58:56:77:4a:9d:55:ff:a2:a2:b8:
8a:b1:16:92:fe:e7:e5:9a:b8:97:64:9a:8b:fc:f8:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:7D:B2:5D:F9:B1:EC:2D:16:E8:7A:69:AE:82:AE:96:4E:16:15
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6tp9sl35sewtFuh6aa6CrpZOFhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:191:eb7c:342b/128
Signature Algorithm: sha256WithRSAEncryption
5f:eb:44:c9:b4:6e:da:59:0c:ad:9f:c0:da:4a:e0:06:d7:ab:
d6:f9:87:68:93:b1:0f:5c:75:05:78:87:2e:07:e0:70:2e:82:
cd:ee:44:d4:af:83:88:d5:f4:3c:54:2e:c3:0d:6d:a9:80:cc:
a5:c1:20:4e:20:dd:bd:24:76:96:cf:35:35:fd:e4:89:e3:44:
05:b0:80:90:3c:26:aa:90:71:c2:86:70:f9:01:96:ed:77:d5:
60:bd:cc:52:3d:2d:c9:b4:82:08:bc:fe:d6:e4:f0:cb:74:6e:
81:f4:23:23:ac:90:73:b4:d2:f4:b6:86:f7:9d:19:82:f9:b1:
1a:c6:3e:0d:66:3d:e6:81:ba:d8:ca:58:a5:d3:4f:b9:37:9e:
40:38:35:35:35:94:7b:ce:b5:b5:a9:3d:5a:2b:ae:d5:d1:0b:
d5:4c:a7:87:5f:22:3d:4c:88:35:a7:3c:8e:d8:60:2c:0d:ce:
51:0d:0b:90:2a:01:0b:ca:47:2d:9c:75:ee:96:b5:c5:92:b2:
8e:3e:87:2e:cb:02:05:7f:16:81:be:de:27:33:20:58:52:11:
90:ae:e5:e4:a8:25:d9:56:5c:b6:84:d1:32:bc:51:3a:66:14:
6a:04:2a:d1:b9:97:1c:d8:3b:c8:a1:f2:c0:fe:6b:18:f2:dc:
ef:26:8c:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:16 2025 by rpki-client