Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/89fn3pTv82LY00jsheyXPtEigJM.roa
File: 89fn3pTv82LY00jsheyXPtEigJM.roa (raw, json)
Hash identifier: Nsx3Xt2t2izUSFdQjFT5HgBaTBP/g8lJVL2tMp6QM5g=
Subject key identifier: F3:D7:E7:DE:94:EF:F3:62:D8:D3:48:EC:85:EC:97:3E:D1:22:80:93
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192D415E37E09FB1C8C56F784AE3F92FCB0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/89fn3pTv82LY00jsheyXPtEigJM.roa
Signing time: Mon 28 Oct 2024 17:04:17 +0000
ROA not before: Mon 28 Oct 2024 17:04:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:d415:d496/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 28 Oct 2024 17:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d4:15:e3:7e:09:fb:1c:8c:56:f7:84:ae:3f:92:fc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 28 17:04:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3d7e7de94eff362d8d348ec85ec973ed1228093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:dd:94:88:0d:41:b1:53:d6:a1:36:57:ab:
0f:ee:dc:84:c8:61:49:d6:9c:cb:e8:a9:ef:b1:63:
60:e2:43:72:ae:4a:3b:0f:80:18:80:ca:1b:00:b0:
c7:2a:1c:1e:fe:5b:32:fe:c6:a9:22:a5:51:df:7e:
1b:c3:c6:a9:64:23:a0:9d:67:94:b8:e4:4e:7f:d4:
9e:8d:0f:41:d2:91:3a:06:11:ea:fe:4e:32:c3:bf:
75:ff:43:09:79:25:c1:bc:14:8f:8c:e5:31:74:33:
17:7e:f0:65:21:8e:5a:3d:7b:61:cc:8c:c6:bb:f0:
08:d6:5b:94:da:6b:6f:dc:85:66:d4:93:72:b6:02:
b1:74:9a:3f:5e:f5:e9:b4:78:a1:89:bc:88:85:0e:
35:2b:d2:ad:80:eb:62:28:fa:87:50:d1:1e:01:8c:
23:ab:28:8a:d5:9b:95:27:23:98:72:f8:95:df:a5:
71:7c:42:0b:61:79:c8:6e:58:c5:71:67:21:ee:eb:
d6:3a:c5:c8:97:4f:12:d6:cd:fe:5c:a1:e6:68:9c:
d5:8b:fe:a1:d1:45:fc:82:e8:6c:86:47:8e:87:82:
be:49:e3:3c:70:92:f6:6e:57:d9:e9:25:e2:00:6a:
19:56:c9:f6:68:16:53:d4:ca:2a:60:40:0d:dd:f8:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D7:E7:DE:94:EF:F3:62:D8:D3:48:EC:85:EC:97:3E:D1:22:80:93
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/89fn3pTv82LY00jsheyXPtEigJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:d415:d496/128
Signature Algorithm: sha256WithRSAEncryption
5c:03:bf:be:ed:a4:14:ba:8b:56:4b:34:f9:82:15:da:9c:ac:
c1:9c:7d:92:bf:1e:c1:40:82:96:0d:be:4b:89:dc:5e:97:ee:
5a:08:0f:c8:78:a5:e5:1c:34:17:e5:8d:c7:49:9c:7b:52:5a:
cb:53:ba:3d:52:33:52:06:34:e7:58:1f:07:61:e3:e4:1f:33:
e8:5b:7b:59:6c:7b:2f:54:21:1e:30:7b:c4:a9:b7:f3:31:e9:
6d:c6:60:e2:f5:62:22:c8:e6:57:51:ce:60:0f:49:be:8a:ef:
09:06:80:97:4c:49:3f:00:b6:35:5c:67:ee:48:f4:a1:93:fe:
6f:8b:f2:48:9f:42:45:62:ac:2d:46:0b:3f:4a:9c:aa:df:df:
ee:73:f0:a9:b1:c8:e4:ad:55:14:ee:cb:00:72:be:0f:e3:50:
05:22:be:f7:fb:71:73:66:c4:1a:54:79:87:20:24:cd:d7:84:
45:9d:73:cd:c4:8c:8d:a4:52:f5:df:14:7f:c9:35:2a:45:9b:
6b:2f:23:09:c5:b5:29:ee:cb:33:c7:f5:3a:f7:ad:fc:0c:1a:
9f:0e:79:a2:c8:b7:d6:62:94:a4:fb:55:c8:0d:e0:ad:1a:22:
ed:0f:90:e9:a4:0f:9b:ef:f1:28:ee:c3:30:5d:a3:62:5f:07:
44:43:53:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:36 2025 by rpki-client