Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9v0WHcW811moyf0eyzrR3IS9FQM.roa
File: 9v0WHcW811moyf0eyzrR3IS9FQM.roa (raw, json)
Hash identifier: yCltAEncFVidmsP60DjlPs/Zeh1Bee26RtMCEaZLx0g=
Subject key identifier: F6:FD:16:1D:C5:BC:D7:59:A8:C9:FD:1E:CB:3A:D1:DC:84:BD:15:03
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D0B006EA8E841652AED324981E730E65
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9v0WHcW811moyf0eyzrR3IS9FQM.roa
Signing time: Sun 08 Sep 2024 08:11:22 +0000
ROA not before: Sun 08 Sep 2024 08:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 08 Sep 2024 09:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d0:b0:06:ea:8e:84:16:52:ae:d3:24:98:1e:73:0e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 8 08:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6fd161dc5bcd759a8c9fd1ecb3ad1dc84bd1503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:87:01:9f:e0:33:52:21:1a:3c:57:7d:36:
bd:43:af:ba:05:d5:6a:64:85:65:2f:27:ec:17:85:
1c:84:f8:45:6e:03:7e:b7:06:92:ea:b9:bc:90:91:
5d:46:8c:52:c8:1a:7d:88:0d:17:4c:44:24:a3:d7:
7b:f3:38:4c:f9:87:87:b5:6f:f3:ca:7e:f9:2c:fe:
84:e7:d9:db:9a:34:90:58:16:07:a2:7b:ad:36:74:
94:e9:db:d5:e1:9e:ef:7d:07:dd:d1:6b:5e:32:f7:
5d:af:be:6d:29:0e:3d:b1:06:ef:cf:dd:c6:4a:e3:
33:d1:a2:52:a0:99:9b:dd:a3:64:e4:5f:4f:38:91:
31:97:af:a2:77:db:4d:af:02:47:24:e7:c2:3f:c8:
eb:07:53:3c:2d:5f:a8:b3:1c:0b:f8:74:50:da:e8:
87:9d:61:1e:cf:e5:66:c7:ea:9f:91:55:6d:63:2c:
dd:1e:84:43:34:76:d2:ce:90:9d:10:54:64:c4:f3:
67:d2:c8:63:48:92:cc:2f:f1:45:2e:c1:d6:71:18:
32:01:aa:ea:4c:90:8a:95:62:3a:c9:fa:94:ec:79:
a4:ce:db:0e:0c:fb:11:86:91:76:3f:10:43:93:9a:
e5:b2:d9:6f:94:bf:61:3a:4e:aa:c3:b6:42:f4:19:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FD:16:1D:C5:BC:D7:59:A8:C9:FD:1E:CB:3A:D1:DC:84:BD:15:03
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9v0WHcW811moyf0eyzrR3IS9FQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
72:e5:11:dc:66:89:86:46:70:48:eb:ff:19:99:02:8f:50:ed:
b5:2a:fc:31:32:bf:f3:86:56:53:88:c3:e3:59:4c:72:31:da:
00:54:b2:17:9d:fd:cf:4c:7e:44:f7:b6:fe:04:e3:85:62:fb:
16:1e:ed:98:5c:de:d1:80:ea:6c:33:ce:0e:b4:67:1e:4b:76:
77:a4:d1:6f:b4:4b:23:97:0f:a5:48:f2:17:f7:b6:35:c1:ab:
6a:3f:c4:72:83:fc:6f:21:f2:0d:5b:4d:fe:34:e8:f1:16:fa:
68:9a:78:ec:20:27:a8:a9:2d:83:07:f8:07:4b:d4:4f:38:eb:
87:92:a8:ca:9b:e9:db:46:84:f2:83:06:0d:f7:04:4a:91:c7:
72:fc:6d:89:f7:5a:b7:8b:da:6b:07:3a:49:24:c9:59:cc:19:
a7:6e:9a:bc:35:a1:3d:4b:93:5a:71:cc:ae:c0:6f:73:2f:fa:
68:4f:71:ea:fb:35:88:f7:f2:44:d3:0b:c0:22:aa:b6:5e:04:
47:e1:f2:55:a2:f1:9b:34:47:95:5b:9a:f4:e3:e2:eb:b8:05:
e2:54:83:20:7d:94:46:4e:a3:bd:6e:92:3d:f0:d4:d5:c1:7f:
14:43:6d:61:59:a6:6a:67:5f:0c:41:c8:3e:68:af:10:7c:03:
c5:4b:ab:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:02 2025 by rpki-client