Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6uT1hm9MCrTga-bS4fJF9zjXwRw.roa
File: 6uT1hm9MCrTga-bS4fJF9zjXwRw.roa (raw, json)
Hash identifier: etmQcM6bFEGubza+ffgw+uligh/0oxn9JSIYXN7/SrM=
Subject key identifier: EA:E4:F5:86:6F:4C:0A:B4:E0:6B:E6:D2:E1:F2:45:F7:38:D7:C1:1C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01923A05739968A6EE3FDB18F66DDE42E69A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6uT1hm9MCrTga-bS4fJF9zjXwRw.roa
Signing time: Sat 28 Sep 2024 19:04:48 +0000
ROA not before: Sat 28 Sep 2024 19:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:3a05:630/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Sep 2024 19:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:05:73:99:68:a6:ee:3f:db:18:f6:6d:de:42:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 28 19:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eae4f5866f4c0ab4e06be6d2e1f245f738d7c11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:c4:3f:41:ba:86:27:e0:c9:c9:81:fb:26:
68:68:e6:64:90:4c:f5:15:7c:94:f9:6e:66:b5:77:
4e:83:26:e4:ee:52:c1:84:22:44:f6:f5:8f:4b:ef:
99:d3:95:fe:eb:fa:45:ac:ae:31:2a:04:6e:4e:15:
32:8d:27:2c:99:8d:7b:13:c6:9b:d9:d4:16:1a:00:
93:2e:ea:1e:e1:97:38:d6:a4:bc:10:31:2c:93:f8:
58:44:b9:6e:92:73:63:81:1a:b9:cf:b7:d1:e7:90:
ec:33:82:68:8a:4f:03:0f:ae:0d:2b:b8:9e:24:fe:
a0:99:de:26:03:a3:d4:85:cc:e9:18:75:93:96:d2:
8c:11:16:ba:a7:d0:4d:09:13:60:c6:28:fc:ef:0b:
f4:f8:4e:7b:86:4e:26:bd:64:5e:f2:45:3f:88:2b:
19:09:03:9b:9b:3f:62:b8:26:4f:4b:69:79:e0:5a:
1c:2a:e1:4a:61:81:3e:4c:42:a8:e3:26:3f:3f:ba:
a9:2e:14:5e:d9:07:00:13:a0:a0:c8:5e:23:1a:9e:
a0:51:c4:c3:5d:d7:12:7c:84:54:4b:90:dd:e6:16:
d5:71:f1:b3:67:58:8f:f9:1c:0b:13:9e:05:57:83:
86:e1:c4:0b:1d:a0:7a:60:f3:9d:fe:87:47:8d:14:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E4:F5:86:6F:4C:0A:B4:E0:6B:E6:D2:E1:F2:45:F7:38:D7:C1:1C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6uT1hm9MCrTga-bS4fJF9zjXwRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:3a05:630/128
Signature Algorithm: sha256WithRSAEncryption
91:76:57:76:96:97:b1:08:c8:ef:8a:b3:fb:81:af:b6:8d:c1:
9a:fa:ff:ba:df:98:db:15:c7:ce:42:8d:48:11:b7:47:00:1a:
9c:4d:45:ca:45:ca:65:3f:71:61:64:52:07:7f:09:60:3f:94:
94:d2:3c:51:3f:cb:d2:c0:0e:6d:8e:05:ce:c3:30:3d:48:f9:
00:a4:bd:81:b9:d3:d0:2f:54:7c:b1:1e:d1:49:e8:03:19:ea:
ec:c8:0c:68:c0:f8:b5:8e:45:44:b6:d2:e8:7d:be:2a:3f:1c:
df:da:d6:15:08:30:9b:c2:04:9f:66:b8:ab:e1:c6:08:3e:fb:
84:74:58:33:02:c5:2d:ea:bb:cb:ee:fa:4a:66:d1:ec:e6:38:
5e:af:7e:fa:7a:d3:1e:71:d9:be:40:21:b3:39:f7:86:6a:3e:
c3:d0:4d:6c:31:bc:03:ca:32:2c:ad:4c:01:a2:d8:df:e3:91:
16:cd:af:eb:a6:07:5a:dc:32:8b:48:2d:a5:81:9b:5e:4a:97:
0b:34:a4:5e:d0:ab:a5:58:74:1b:de:e4:e0:b4:e7:9a:24:b3:
12:4c:82:00:5d:69:d7:c1:9c:9e:24:5e:91:91:76:6f:89:a8:
fa:13:73:ae:c3:e9:af:7b:e2:04:8a:f5:73:9b:20:c2:66:7d:
06:1a:4a:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:45 2025 by rpki-client