Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8FsBghjPp9HjCr6odMjYBGyBvQ0.roa
File: 8FsBghjPp9HjCr6odMjYBGyBvQ0.roa (raw, json)
Hash identifier: 2QsIbBH41wL93dSqxZGRKWWYRhU20z9GzBs5JZzWUmw=
Subject key identifier: F0:5B:01:82:18:CF:A7:D1:E3:0A:BE:A8:74:C8:D8:04:6C:81:BD:0D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192BD2033498C6B52A16A2F6A43E42CDD18
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8FsBghjPp9HjCr6odMjYBGyBvQ0.roa
Signing time: Thu 24 Oct 2024 06:04:17 +0000
ROA not before: Thu 24 Oct 2024 06:04:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:bd20:2af6/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 24 Oct 2024 06:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:20:33:49:8c:6b:52:a1:6a:2f:6a:43:e4:2c:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 24 06:04:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f05b018218cfa7d1e30abea874c8d8046c81bd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:a6:30:1d:bb:0d:35:14:39:e1:12:f6:8b:
83:b6:e3:bd:f3:19:87:c6:27:2b:ca:45:a9:f2:7e:
ba:24:d4:18:9a:e7:a7:e6:e7:b7:96:68:29:63:5d:
a0:b0:33:69:3a:e4:a0:d5:ae:75:26:fe:99:c0:93:
70:f9:5f:b6:85:ec:a5:45:1a:d9:82:39:f6:f9:ce:
8d:61:d7:70:b1:ca:ab:db:66:be:1d:22:8e:c1:4e:
31:fb:9c:b3:86:3d:fb:f4:ef:e9:8d:2b:d0:47:c6:
5c:ab:43:cb:27:f0:16:5b:22:3e:fe:fd:62:f3:84:
81:fe:a4:0e:7a:24:4c:1a:cd:d4:e6:92:91:46:fe:
89:81:03:72:ec:48:68:b1:75:f0:fc:fa:18:d0:d7:
e1:18:15:80:27:9d:fc:f7:80:c4:74:f5:80:11:3e:
79:28:4d:7a:84:3f:27:ca:55:13:43:16:f7:2f:08:
3a:d8:bc:b6:96:34:f1:9e:14:7b:16:a1:40:8b:5e:
4b:39:eb:f9:1c:63:0d:3a:47:0b:29:28:ca:65:c1:
2b:b7:40:c9:76:e9:72:5a:3f:d2:75:82:ab:21:a6:
c1:de:d1:b2:a8:d1:39:8c:fe:77:9b:b4:06:69:95:
f9:cd:af:3d:e3:5d:85:45:d1:3b:78:87:0d:49:32:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:01:82:18:CF:A7:D1:E3:0A:BE:A8:74:C8:D8:04:6C:81:BD:0D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8FsBghjPp9HjCr6odMjYBGyBvQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:bd20:2af6/128
Signature Algorithm: sha256WithRSAEncryption
21:70:95:0d:de:c6:bf:bc:13:f1:93:38:ef:c0:3b:0b:9f:d8:
37:ba:b2:d0:ea:17:71:7a:0c:12:92:98:73:03:f1:23:cc:49:
56:24:20:69:c9:e8:b7:86:59:d2:f5:07:d8:90:bf:92:10:9c:
45:69:a3:f1:6f:de:22:ea:b5:0d:b2:e8:ee:7f:29:0f:0c:71:
0c:a6:da:83:c6:31:8d:c8:df:14:d0:69:50:b4:9c:d8:22:d1:
8b:a7:df:08:64:3c:3e:87:3d:0a:f7:47:90:d6:43:54:ee:88:
3d:2b:92:eb:80:c0:ff:99:0c:ca:ae:a6:16:98:a6:9d:07:ba:
e9:ef:c2:1f:1d:4d:01:bd:42:61:e8:be:32:5b:42:6e:6e:02:
31:f9:a9:85:6c:b3:60:44:5a:71:e3:0c:61:31:95:ea:27:f9:
4a:18:7f:6c:65:32:ae:08:86:c2:ed:6d:54:6c:9b:60:fb:35:
52:45:46:d7:da:f5:55:35:ca:4c:85:b0:cb:06:1e:e4:cf:75:
a5:b5:37:5b:c1:fc:38:34:1d:43:2e:c4:0f:f1:c3:e2:3f:d4:
0a:0b:30:d4:75:da:1a:9e:9c:87:0e:25:5c:45:69:c8:7d:f6:
86:f6:0e:98:93:20:94:56:18:5f:f3:93:fa:32:b5:d5:d4:92:
15:6b:95:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:47 2025 by rpki-client