Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AoQcVeVA-OYIZj0YyngD4ER0rGM.roa
File: AoQcVeVA-OYIZj0YyngD4ER0rGM.roa (raw, json)
Hash identifier: eSL8inFvwaALNa7qwvF/oKEt6tH7tZN4EoE29q/fIAs=
Subject key identifier: 02:84:1C:55:E5:40:F8:E6:08:66:3D:18:CA:78:03:E0:44:74:AC:63
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019143B7CCCA67D810E339BD3A8122090252
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AoQcVeVA-OYIZj0YyngD4ER0rGM.roa
Signing time: Sun 11 Aug 2024 23:13:24 +0000
ROA not before: Sun 11 Aug 2024 23:13:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 12 Aug 2024 00:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:43:b7:cc:ca:67:d8:10:e3:39:bd:3a:81:22:09:02:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 11 23:13:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02841c55e540f8e608663d18ca7803e04474ac63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:8d:4f:81:5c:fd:2f:64:84:ff:df:9b:13:
79:31:18:a2:a4:8d:a9:41:22:97:a1:ed:a7:ed:cd:
b2:ac:8e:b0:30:d4:02:2a:8e:3a:e3:aa:78:ad:f4:
ca:dc:22:99:12:26:0c:e6:80:85:f6:6b:3f:02:0d:
be:b7:f5:af:4f:42:df:23:f4:06:be:00:b7:ab:89:
00:0f:dd:2e:41:c1:63:62:20:5c:b0:af:9c:33:43:
c9:49:89:1d:d1:58:a2:07:c5:e4:f9:c5:f9:40:0f:
b9:0d:a9:03:bd:18:a3:c9:7a:eb:f8:4c:ff:5e:01:
1c:e8:c5:dd:52:07:e1:35:f3:6a:f3:b0:7f:85:a8:
22:80:50:64:74:a6:37:70:2f:ef:24:16:2d:37:e5:
f8:67:a9:26:72:87:73:2e:01:74:12:ee:18:c5:9d:
90:ed:d5:05:94:10:0f:a1:c8:69:27:30:68:64:a0:
14:3c:56:db:eb:35:45:7d:34:19:79:96:bb:24:cf:
96:d9:eb:41:30:b7:e0:40:66:1d:9c:f5:12:84:85:
ba:ea:40:55:b7:0e:e2:4f:f4:f4:23:dd:b1:a3:a1:
ee:46:94:6d:37:2a:14:cf:91:90:ee:34:9b:04:ec:
82:3a:ab:8b:36:b2:88:9b:e7:39:f6:24:02:7d:76:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:84:1C:55:E5:40:F8:E6:08:66:3D:18:CA:78:03:E0:44:74:AC:63
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AoQcVeVA-OYIZj0YyngD4ER0rGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
39:2d:07:69:a7:41:0d:f1:ea:68:1f:b0:51:83:c9:ce:a9:79:
6d:a4:c6:f8:2f:a0:07:4c:5c:c8:e9:8f:84:11:cb:3c:d4:96:
1e:8a:75:9b:51:0b:d2:da:47:ca:f5:91:2b:3f:5b:c9:13:4f:
ba:1e:9c:e5:4e:5a:72:48:73:26:6d:bf:ae:ed:b6:5b:31:5d:
f4:91:0e:43:14:f5:85:d9:93:03:1a:19:40:d9:a9:fb:93:5c:
8f:71:aa:75:aa:73:3c:55:42:b4:4f:6e:11:de:09:c1:fa:50:
3c:4b:6b:e8:55:e9:52:6c:23:63:ea:d8:d3:b6:ed:49:86:b1:
bc:a6:d2:fa:c2:7e:17:a1:11:34:21:e7:b7:57:2c:91:d1:5f:
42:9a:f8:f1:eb:0d:e5:12:52:0a:64:15:2d:f7:ec:38:da:c0:
1d:8b:b1:bf:8e:2b:be:0c:22:92:54:c9:58:3e:5f:9a:75:c3:
c8:c1:fd:ee:82:38:39:29:fc:3a:6f:c7:05:49:b4:0d:76:d0:
f1:be:be:43:f0:8a:27:61:a9:37:b5:a4:45:0d:ae:ce:68:f6:
e6:e2:c6:8a:f4:86:6a:69:25:0b:2b:e3:cb:71:59:b5:ea:ea:
e9:97:3b:78:d6:08:11:14:4b:c6:1e:41:d7:b1:c5:28:3e:29:
4f:5c:d6:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 12 02:40:07 2024 by rpki-client on console-fra.rpki-client.org