Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E5peDaBq6rGcdTbIjkEQUYCrbbs.roa
File: E5peDaBq6rGcdTbIjkEQUYCrbbs.roa (raw, json)
Hash identifier: CWOefiyXbFWs5z7K2s5jSIqqd4xesl4VkbPR32XSoQc=
Subject key identifier: 13:9A:5E:0D:A0:6A:EA:B1:9C:75:36:C8:8E:41:10:51:80:AB:6D:BB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01917B812996E9DC4144844667910B75C554
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E5peDaBq6rGcdTbIjkEQUYCrbbs.roa
Signing time: Thu 22 Aug 2024 19:12:27 +0000
ROA not before: Thu 22 Aug 2024 19:12:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 Aug 2024 20:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7b:81:29:96:e9:dc:41:44:84:46:67:91:0b:75:c5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 22 19:12:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=139a5e0da06aeab19c7536c88e41105180ab6dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:1f:dd:fe:5f:19:03:49:2a:8c:19:a7:e9:
56:83:e7:da:62:3d:9e:6f:2a:5a:53:04:15:c2:87:
a2:62:7f:82:8e:0f:21:eb:ce:8c:1b:8a:d5:3a:93:
59:8f:f5:23:6e:89:62:a2:c4:12:38:92:64:ac:b0:
41:b7:98:23:03:95:82:02:f4:7c:17:0f:07:8d:8a:
fe:cd:07:fe:20:ad:cf:4e:8a:2a:55:b4:f6:23:d8:
e7:52:6e:34:4a:23:d6:10:4d:a6:9e:01:cc:31:35:
4b:d6:47:8d:8b:be:a3:20:65:2a:d2:03:bd:b6:34:
67:c5:9e:46:25:d5:21:67:17:98:3f:bc:0e:b2:9c:
91:b7:63:a5:41:4c:97:f1:0b:21:94:48:3e:a1:ca:
2d:18:47:dc:24:ad:ef:e3:52:28:2b:80:3b:22:e8:
12:19:bb:69:69:e6:ba:7a:8b:0a:40:f2:8f:0a:78:
fc:5b:8a:42:5e:66:10:52:b2:a2:f9:3c:4c:18:1e:
3c:3a:34:25:55:ee:7d:af:16:6a:54:df:63:78:86:
3b:bb:bb:be:81:c6:b5:98:1d:e8:89:e5:eb:19:90:
64:a7:ec:f6:a0:15:0b:b2:d1:d9:2c:4b:70:36:25:
89:e7:5d:58:04:74:dc:07:3a:e2:9d:1f:33:ce:69:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9A:5E:0D:A0:6A:EA:B1:9C:75:36:C8:8E:41:10:51:80:AB:6D:BB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E5peDaBq6rGcdTbIjkEQUYCrbbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
87:9f:3f:ef:73:99:ba:ba:c9:9b:06:b1:a9:ee:e9:a3:ca:7b:
7d:e4:13:2a:a8:37:28:18:d5:50:e3:ec:5a:b7:f5:fd:cd:36:
e7:60:d0:11:b6:d7:09:8a:70:25:7c:6b:0a:15:57:0c:cd:0f:
6c:f8:d6:1f:69:b4:68:ca:07:29:de:d7:3f:2b:b3:b6:22:81:
30:17:a0:f4:20:3c:17:2a:c0:35:a4:48:ee:8c:44:24:bb:25:
7d:a6:b1:bf:0a:e8:af:e9:3d:d1:49:d9:6c:3b:51:f7:ed:68:
ba:05:36:95:0c:66:b7:df:e7:b5:f6:ca:21:09:fd:11:5a:1a:
28:5f:07:b7:0c:7b:92:27:63:9e:7e:94:ff:a2:19:99:50:f2:
7e:55:2e:ce:25:d5:7e:e1:2d:d6:db:4a:72:3d:44:a1:23:75:
86:08:f7:11:13:d9:24:11:51:90:13:f8:ab:2e:e7:59:6e:74:
a9:d1:cd:86:05:96:26:82:24:cf:74:b9:cc:7b:eb:02:e8:9e:
e9:2e:a8:b6:27:11:20:d8:b5:50:a2:ca:d0:8f:da:02:01:3c:
28:12:7f:1f:02:0c:3f:f2:03:05:f2:0a:bf:fc:0c:28:d1:41:
dc:50:70:5c:26:44:dc:a2:6d:8d:3e:b8:d4:77:c2:e7:0f:a1:
be:b1:00:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:09 2025 by rpki-client