Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/764FHYWz2U0eydYYai0WBtSKcoo.roa
File: 764FHYWz2U0eydYYai0WBtSKcoo.roa (raw, json)
Hash identifier: Zu9c/vftarM5lCIWLzPjCi4tme1aWYpC2+7SqLv9brk=
Subject key identifier: EF:AE:05:1D:85:B3:D9:4D:1E:C9:D6:18:6A:2D:16:06:D4:8A:72:8A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019100560AF4AE7F8E595FDC9D75F03E70A5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/764FHYWz2U0eydYYai0WBtSKcoo.roa
Signing time: Mon 29 Jul 2024 21:12:04 +0000
ROA not before: Mon 29 Jul 2024 21:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 29 Jul 2024 22:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:00:56:0a:f4:ae:7f:8e:59:5f:dc:9d:75:f0:3e:70:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 29 21:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efae051d85b3d94d1ec9d6186a2d1606d48a728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:73:a1:d6:ac:0f:68:ed:05:4b:8e:1b:1e:1b:
aa:b6:91:35:eb:13:62:8f:ec:8f:1e:9e:b2:aa:43:
23:6f:c6:09:ea:18:35:b6:5f:d7:d2:d0:86:78:87:
62:6e:5d:d5:f0:48:8f:14:c2:75:b4:9d:09:68:20:
09:d8:d5:e9:0b:75:0d:ba:e1:1a:31:a9:df:90:31:
b6:59:f5:80:c5:08:8e:4f:25:a5:7b:47:f2:69:80:
51:75:5e:ef:f9:eb:1f:40:28:39:31:1a:bd:e1:47:
b5:8e:c8:bd:28:b6:9d:de:5b:1c:03:69:81:ee:b6:
06:77:a3:ae:22:1b:af:4b:b1:c2:b8:f4:a9:c3:38:
d1:d9:03:2d:4d:40:cc:b5:64:45:48:f5:32:14:f9:
2c:28:ab:1b:1c:b7:e0:ea:30:7c:e5:39:dc:6f:90:
f6:ad:63:6f:d1:b7:21:ad:97:c6:06:7c:46:63:ca:
bb:bd:57:61:0e:77:b4:66:40:e0:b9:0b:8d:19:76:
c6:c2:e1:5f:a5:d0:31:fd:4f:60:92:5b:9a:ed:22:
78:6b:28:d2:b5:c1:1e:70:00:c1:de:cd:49:68:53:
98:fc:95:85:e2:4d:4a:0d:40:18:c4:9f:79:30:19:
46:4c:ac:ee:a1:95:75:65:dd:a1:d4:e0:c5:c8:48:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AE:05:1D:85:B3:D9:4D:1E:C9:D6:18:6A:2D:16:06:D4:8A:72:8A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/764FHYWz2U0eydYYai0WBtSKcoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
27:67:ab:f0:91:ee:c6:9b:16:84:21:84:16:a5:8d:1a:a8:f2:
66:21:b4:6d:a7:8e:b2:98:0e:b3:6c:d5:66:e9:4a:36:31:19:
41:c3:63:23:e3:7e:d1:1b:13:34:8f:7d:19:13:80:69:4c:2c:
6d:43:c0:46:37:11:1e:91:60:e0:86:15:3c:fe:94:5d:e2:e6:
85:8d:5e:b4:c7:37:fc:d8:10:9e:29:95:93:f3:20:40:1f:3e:
22:19:1e:70:c3:93:b9:32:54:a7:a4:29:95:de:60:61:2b:3a:
95:21:3f:ba:5c:b1:f2:9c:af:36:80:7c:16:61:e3:d9:54:87:
55:af:6f:40:a9:53:45:b1:59:68:95:b2:6b:2f:ba:f5:11:b5:
d3:f9:12:6a:ff:ef:1e:1c:67:c0:c0:c7:ea:d3:88:57:4b:f3:
74:51:61:c2:09:fe:93:bd:92:72:3c:39:06:49:37:6f:86:9d:
c3:d6:ab:6c:71:fb:73:e9:d9:51:5d:58:c7:46:59:1c:04:9e:
fb:56:39:58:c6:35:76:1c:24:32:76:e5:8d:b6:16:e7:58:0c:
d4:ed:a2:58:4e:61:61:f6:b4:fe:74:73:83:bc:db:c8:2c:00:
ec:9d:6a:92:5c:1b:84:36:9e:9f:c0:ad:6f:28:73:d8:64:48:
46:bd:bc:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:51 2025 by rpki-client