Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/B5afbbY6jddMA5Kc0hRNfmntbBg.roa
File: B5afbbY6jddMA5Kc0hRNfmntbBg.roa (raw, json)
Hash identifier: MzKiBZDebX0MboipWx2az1ywfmB55MH57XnVVEkPP14=
Subject key identifier: 07:96:9F:6D:B6:3A:8D:D7:4C:03:92:9C:D2:14:4D:7E:69:ED:6C:18
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01915997B390C82199753B87FB7FC10F1963
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/B5afbbY6jddMA5Kc0hRNfmntbBg.roa
Signing time: Fri 16 Aug 2024 05:09:59 +0000
ROA not before: Fri 16 Aug 2024 05:09:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 16 Aug 2024 06:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:59:97:b3:90:c8:21:99:75:3b:87:fb:7f:c1:0f:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 16 05:09:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07969f6db63a8dd74c03929cd2144d7e69ed6c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:54:a6:a7:00:04:4e:b1:7f:5d:6c:7a:19:
ec:2c:cb:9f:30:85:40:f6:c8:f3:b1:39:80:e8:06:
87:6a:f5:9f:84:e5:60:5d:bc:44:47:4d:c5:34:16:
12:e8:9c:af:8b:e1:8e:40:cc:82:87:a4:1c:e6:52:
06:d2:b7:66:24:20:2a:c2:a8:3b:be:63:0b:14:01:
db:13:1f:2b:c4:37:18:e1:86:b4:1b:dd:1a:51:0d:
10:7f:32:9c:99:c3:4b:51:5e:93:3d:be:6e:53:be:
39:2f:1e:50:df:a1:0f:81:4a:23:97:1c:0f:0a:e9:
30:a2:f7:00:7c:98:a4:fa:e0:8d:d5:c6:c6:71:cd:
37:e6:e3:f9:ab:e9:1d:e5:80:c3:a8:13:f2:a7:4d:
d2:e6:ee:1d:25:ea:c6:c7:6b:02:cc:ac:4d:2d:65:
23:25:47:b4:5d:ea:7d:d7:7e:32:48:76:7e:c9:27:
42:b0:17:2d:dc:e4:c9:f3:94:4b:2e:2c:6c:79:33:
1b:5e:a8:94:72:b9:35:b0:76:1c:eb:21:1a:6b:ee:
38:19:7d:0e:9f:6f:d2:91:e6:f6:3b:c7:8e:56:e6:
19:d2:ca:21:b3:37:b7:5d:0e:da:93:17:73:fc:ca:
9e:75:d7:80:0f:61:de:02:ab:13:49:f9:0d:b8:7e:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:96:9F:6D:B6:3A:8D:D7:4C:03:92:9C:D2:14:4D:7E:69:ED:6C:18
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/B5afbbY6jddMA5Kc0hRNfmntbBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
80:37:e3:3e:dd:92:47:49:2b:a5:c9:cd:a0:86:2d:e4:83:f4:
03:61:18:87:17:2c:cb:79:22:0c:3b:1b:f3:35:11:88:4f:58:
88:80:79:0d:5e:c1:d2:21:29:1d:12:72:ea:8e:42:a0:be:d3:
bb:40:e0:29:7d:ec:40:48:a5:2d:a7:57:7c:4c:c8:70:41:a2:
78:76:0e:d9:e7:d1:65:2e:ca:7c:65:4d:92:8e:e6:08:36:9e:
6c:4a:08:ab:e9:a8:18:a1:73:71:17:d1:af:a8:9b:c3:2b:0d:
77:fb:ba:6c:96:41:31:6b:18:e3:82:c0:6f:89:60:6b:db:92:
9e:d2:42:e6:d8:c2:3c:ff:6a:9c:f2:34:78:4c:22:31:de:48:
05:c2:6d:ab:60:6a:b9:4e:6b:18:c4:d2:24:d5:d7:a7:b2:a0:
00:9e:a6:56:46:39:02:7b:a2:44:cf:6d:fe:af:7e:5d:63:67:
b7:4b:a4:9e:e9:25:03:86:f8:a5:84:0a:60:32:5d:31:59:61:
9e:87:ca:4d:c0:f4:93:fe:20:81:0d:7e:da:19:62:7f:7d:53:
bc:2a:e3:b9:5e:12:13:1f:6d:e5:7c:0c:98:f2:bf:79:9e:08:
8c:94:98:6b:6d:dd:6b:87:31:c1:a6:32:ac:e4:86:50:b4:a3:
87:4d:7c:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:09 2025 by rpki-client