Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7sxo0dviVv5y9xGdYEEOVeBMy64.roa
File: 7sxo0dviVv5y9xGdYEEOVeBMy64.roa (raw, json)
Hash identifier: lI604Vih450VIWEXEnerEXCjprHgEh5y2PQzYWvD5HI=
Subject key identifier: EE:CC:68:D1:DB:E2:56:FE:72:F7:11:9D:60:41:0E:55:E0:4C:CB:AE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918C3DC9E581104461DD8161C7B0A5D951
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7sxo0dviVv5y9xGdYEEOVeBMy64.roa
Signing time: Mon 26 Aug 2024 01:12:25 +0000
ROA not before: Mon 26 Aug 2024 01:12:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 Aug 2024 02:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8c:3d:c9:e5:81:10:44:61:dd:81:61:c7:b0:a5:d9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 26 01:12:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eecc68d1dbe256fe72f7119d60410e55e04ccbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:be:d3:27:4b:3e:c8:ec:e4:42:0c:79:07:
ea:95:a6:a8:d0:3c:e8:83:db:86:07:59:b2:8a:48:
48:18:cc:f4:fd:30:6f:c8:62:8f:2f:55:f3:79:da:
ac:9a:3a:de:67:21:e7:1f:6b:9f:b6:02:b7:64:ba:
99:15:7e:bf:1b:a1:63:f3:3a:b8:0b:99:e2:79:22:
09:89:8b:88:9c:b0:43:16:4b:2a:3c:77:8c:3c:22:
5f:ac:28:54:5b:b4:f9:f8:ac:43:e8:07:cc:2b:bb:
de:eb:11:cb:9c:13:9a:8f:f3:4d:83:67:f3:04:49:
9b:0e:95:0c:5f:67:5f:50:11:75:d5:4b:d7:11:49:
b2:ef:df:5a:73:bd:11:6c:05:d6:53:22:ed:0e:41:
9a:c1:5e:5b:91:2c:ec:a3:48:10:89:8e:e5:7b:70:
a1:1d:fd:35:bb:48:33:e2:ab:87:c0:5d:28:15:0c:
c4:d7:6d:38:c5:6e:f5:3a:ea:14:14:6e:b1:77:a7:
31:aa:60:8d:14:af:6f:81:0b:7e:12:60:79:cf:69:
95:46:0f:aa:98:35:4d:05:76:c4:87:4b:98:bb:ed:
09:e8:44:7f:01:e2:54:d7:95:3e:61:dc:1d:29:a6:
71:31:fa:a4:c6:4b:b2:90:5f:c9:9d:5b:d4:e9:33:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CC:68:D1:DB:E2:56:FE:72:F7:11:9D:60:41:0E:55:E0:4C:CB:AE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7sxo0dviVv5y9xGdYEEOVeBMy64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
73:5f:d6:9e:09:da:5c:fd:f8:fc:cc:77:52:93:b7:42:e8:86:
6d:29:03:82:02:71:9e:dc:6d:54:02:f6:d7:95:1e:70:67:ad:
2e:e5:99:1f:f8:b9:b6:aa:b0:f3:92:29:b8:c2:e3:10:c8:9c:
f3:43:fc:af:76:c6:ef:72:63:1a:33:22:2c:e4:d7:e0:f5:8f:
c1:89:55:c1:e9:a6:ad:52:ba:44:c9:09:bc:10:90:a7:9f:c9:
79:b6:be:17:0f:bf:d1:ad:4c:68:2c:e6:92:97:23:19:b8:ad:
90:37:4f:15:01:8c:04:09:f5:e7:5c:58:f4:3e:6b:e9:57:15:
81:89:45:81:12:f5:8a:0d:55:76:82:52:f1:62:a4:ec:da:ae:
73:8e:2b:89:ee:dc:23:e0:f2:1d:60:e5:b0:4a:76:1c:d2:4c:
c3:0b:e2:ef:b4:ed:49:47:20:c4:82:79:2c:dc:fd:82:dd:3a:
24:97:71:6b:e9:a1:a8:66:c0:ff:2b:24:00:b9:13:e6:c3:7e:
7a:49:3d:88:e9:74:f9:4d:b3:1e:b3:07:39:4d:b2:2a:66:b7:
8f:47:2f:e3:6e:76:0c:ff:72:65:21:48:18:f1:0f:f5:80:3e:
02:29:b7:31:fe:e4:86:05:5c:a5:bd:bb:1e:a5:54:66:7a:56:
60:ec:79:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:58 2025 by rpki-client