Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Da5ev8HfBwBCjS5gXJnMLnpUOVI.roa
File: Da5ev8HfBwBCjS5gXJnMLnpUOVI.roa (raw, json)
Hash identifier: XyliDRiuEzthjrwZU8ZmgG81ovihr70WRu2qlwTsVI8=
Subject key identifier: 0D:AE:5E:BF:C1:DF:07:00:42:8D:2E:60:5C:99:CC:2E:7A:54:39:52
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D5D838BFC29225470B34E7AE18528463
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Da5ev8HfBwBCjS5gXJnMLnpUOVI.roa
Signing time: Mon 09 Sep 2024 08:13:22 +0000
ROA not before: Mon 09 Sep 2024 08:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 09 Sep 2024 09:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d5:d8:38:bf:c2:92:25:47:0b:34:e7:ae:18:52:84:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 9 08:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dae5ebfc1df0700428d2e605c99cc2e7a543952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:05:02:22:94:ad:86:d3:6d:94:c8:07:d6:
36:61:62:21:0f:96:94:99:cf:cb:db:4d:08:1a:9f:
e2:ed:93:bc:5c:48:fa:69:c6:e9:6e:e6:f5:49:44:
1b:70:ac:af:2e:1e:2a:46:b4:13:c0:5c:aa:3d:a3:
6d:5b:84:51:f4:3a:2d:c1:de:28:fb:1c:af:40:a2:
6d:4a:65:a0:0d:49:1a:52:c4:68:60:35:dd:fe:b7:
b6:9b:b4:91:62:3e:52:ae:eb:6d:7a:b3:10:2e:ce:
ed:bd:03:8b:54:43:d8:a2:99:16:44:58:a2:3c:95:
2e:bb:66:32:e5:f9:6e:5c:7c:23:17:9b:c5:f4:99:
6f:19:cd:4c:fe:da:ee:cb:c7:f1:4e:71:e7:79:ec:
be:ee:9b:3d:33:68:6d:3b:d2:5d:c4:70:17:f5:96:
97:8c:2c:4e:b9:3d:a5:66:73:47:c6:bb:4f:ab:f4:
38:f8:98:34:5d:a8:a2:a7:2f:7b:8e:ff:20:a8:df:
d7:34:50:be:c0:52:ea:96:3d:37:6f:fb:4c:78:9b:
c3:05:de:e7:b7:d8:dc:59:02:50:6a:84:16:3d:39:
f2:f5:2c:0a:eb:cd:c6:f5:a8:e2:63:dc:ad:8a:ec:
62:6c:85:32:85:16:e9:75:74:89:56:f3:94:3f:44:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AE:5E:BF:C1:DF:07:00:42:8D:2E:60:5C:99:CC:2E:7A:54:39:52
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Da5ev8HfBwBCjS5gXJnMLnpUOVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
48:72:72:89:5e:fc:f0:dd:90:14:b7:f2:4e:a1:4d:ab:ed:f1:
d9:17:1c:3a:63:9e:7f:ce:03:a8:34:6f:44:ce:2b:87:33:e8:
2c:33:11:80:b7:73:0b:8e:82:bc:90:32:23:12:d2:67:d7:84:
d3:6d:55:b8:cb:4a:32:55:4e:73:56:f4:c0:d8:08:4f:7d:60:
9b:cf:de:74:63:67:58:45:29:a4:aa:ac:4d:94:9c:19:b1:92:
f0:c8:df:2d:55:e5:b5:ab:b1:11:fb:46:fb:81:04:aa:69:41:
ae:8e:69:85:8b:0f:37:de:0e:45:0b:8e:9b:7c:4b:0d:8c:0f:
de:b8:00:01:b7:31:24:2d:68:ff:c5:58:05:11:6d:b5:99:2d:
82:b1:13:29:ab:d4:db:0d:df:e7:1d:97:84:33:c2:8a:36:c1:
b3:44:c0:d2:da:45:d4:c9:3a:8d:41:1c:76:79:d0:56:cf:07:
ac:a0:1f:64:7d:da:5a:5d:08:58:69:0f:d6:8b:e1:bc:83:5c:
17:d6:bd:8c:d8:16:9a:0e:d9:d9:ff:d8:3d:55:57:15:e2:eb:
3d:cd:9f:82:bb:b1:21:73:32:9b:fd:a2:92:c6:84:20:b7:bd:
e2:0a:29:ea:cf:ec:19:1b:01:02:09:32:4f:99:98:5a:e3:93:
b7:cd:61:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 9 12:52:54 2024 by rpki-client on console-ams.rpki-client.org