Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9ZmVOFXsA4Yl89z9a6nIt9NHiXw.roa
File: 9ZmVOFXsA4Yl89z9a6nIt9NHiXw.roa (raw, json)
Hash identifier: zdFtkqBqc8UckbEdCclGtbu/QLgKHIclAJfT4OGKWHo=
Subject key identifier: F5:99:95:38:55:EC:03:86:25:F3:DC:FD:6B:A9:C8:B7:D3:47:89:7C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01914E024DF2FEF8C8C8426C1A8BDF2CA30C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9ZmVOFXsA4Yl89z9a6nIt9NHiXw.roa
Signing time: Tue 13 Aug 2024 23:10:59 +0000
ROA not before: Tue 13 Aug 2024 23:10:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 14 Aug 2024 03:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4e:02:4d:f2:fe:f8:c8:c8:42:6c:1a:8b:df:2c:a3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 13 23:10:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f599953855ec038625f3dcfd6ba9c8b7d347897c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:b6:57:73:35:90:fa:da:40:73:1b:d5:ec:
ce:6c:f6:eb:e6:f8:d5:67:9b:8d:1a:df:66:ce:b4:
35:a4:b9:8e:6c:16:1d:cc:39:dd:5a:71:5c:8d:d9:
ff:16:02:ec:74:1b:22:93:a3:a6:7c:14:49:50:0e:
85:52:ad:cf:ff:ac:d3:b6:78:6e:e4:41:cd:e0:da:
7b:50:91:2b:4f:7e:48:bd:13:dd:b9:66:47:fc:6d:
77:9e:f1:39:b2:4e:ca:b6:d4:fe:59:b4:4a:68:0f:
31:ac:f2:2e:07:42:4e:76:b0:a8:73:62:61:58:90:
92:b5:9a:c6:16:8d:e2:d9:bd:b4:23:dd:6c:23:0a:
43:62:b8:ce:9c:fc:1b:52:2d:cc:c7:6f:59:e7:64:
54:d4:31:af:b7:21:72:e5:10:a1:60:f6:ba:8b:ab:
36:86:dd:52:34:75:9b:45:65:e0:7b:78:6a:f5:4a:
18:7f:dc:66:05:75:63:0e:10:12:0e:42:79:c6:30:
ce:24:cb:6d:9d:97:2e:ba:bc:0c:62:d3:88:ea:ab:
c1:ae:7c:c7:2a:80:13:0f:76:10:86:84:d0:a4:85:
e1:3d:1b:1c:0e:69:e5:ab:29:1f:f6:a6:04:f3:03:
64:e6:05:be:5e:a5:c3:72:25:e0:5f:b6:94:8e:aa:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:95:38:55:EC:03:86:25:F3:DC:FD:6B:A9:C8:B7:D3:47:89:7C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9ZmVOFXsA4Yl89z9a6nIt9NHiXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
10:7c:60:4a:91:f1:73:7d:57:d4:6a:85:f8:1d:46:fc:88:6e:
09:89:17:73:32:d4:29:f9:aa:b9:ba:ce:93:1f:c4:11:8c:08:
fe:8d:dc:cf:67:b7:21:dc:43:49:57:a5:30:b3:ef:d1:ce:ed:
ff:2f:dd:ae:77:c7:f9:2c:0a:7a:74:80:23:12:fd:7b:fd:c5:
dd:79:c6:f6:b9:f2:25:a5:b4:24:4f:6b:08:c1:78:84:1c:86:
33:5c:87:c6:b5:15:e9:16:0d:4d:a1:9d:94:2f:5a:54:92:d9:
94:75:77:ee:7c:ea:b3:14:fb:98:f7:16:60:49:10:19:7f:a8:
65:65:e3:0d:31:b1:a1:50:e7:d7:6d:eb:92:ac:26:9a:da:d5:
a8:91:ab:ca:8b:b1:19:3c:b9:d7:dd:d3:4d:0f:f0:61:62:08:
eb:88:70:fc:72:d6:f2:f1:43:7d:74:80:58:7e:cd:87:8e:f4:
22:8c:de:ee:33:b1:d7:16:58:b3:05:06:9f:6e:24:7e:8a:0f:
d9:a0:1e:13:21:31:5d:6d:8a:3c:e2:82:0b:3c:50:35:d1:25:
63:cf:95:e8:c7:85:a6:7f:53:a9:a8:a0:5e:cc:da:3d:32:7b:
17:fc:e2:6a:07:83:41:eb:f0:8a:15:06:aa:20:e2:30:d2:e2:
9f:2f:da:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:58 2025 by rpki-client