Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E6ItyZsM1EE2AZkAjG1KjihqUIc.roa
File: E6ItyZsM1EE2AZkAjG1KjihqUIc.roa (raw, json)
Hash identifier: UTsWh2GiYDxWgStvSqM1omj8l9uAvxZUbgzW830l69M=
Subject key identifier: 13:A2:2D:C9:9B:0C:D4:41:36:01:99:00:8C:6D:4A:8E:28:6A:50:87
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191185D79479192E60EBE57B87793D76EB4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E6ItyZsM1EE2AZkAjG1KjihqUIc.roa
Signing time: Sat 03 Aug 2024 13:11:04 +0000
ROA not before: Sat 03 Aug 2024 13:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 03 Aug 2024 14:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:18:5d:79:47:91:92:e6:0e:be:57:b8:77:93:d7:6e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 3 13:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13a22dc99b0cd441360199008c6d4a8e286a5087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:b2:45:45:2a:df:ba:7e:d7:32:99:13:ee:
1b:f0:94:7c:b8:fc:90:91:43:d3:ac:a8:04:d0:2b:
26:04:d6:1c:f8:54:72:4c:e9:6f:c7:93:38:14:b8:
84:5b:ae:b8:14:f7:ce:1b:10:fa:e0:08:70:0d:ab:
bd:fa:46:f0:ec:63:4c:f4:15:a4:e8:7b:c7:75:52:
f9:22:2c:a2:0c:7d:57:a4:8b:c4:ab:10:14:62:33:
1f:e4:d3:ba:4f:76:23:c0:22:f8:36:5e:10:07:61:
63:45:3b:8a:46:c7:20:3f:0d:d0:f5:c8:c1:bf:ac:
ec:cd:50:6d:41:52:59:7f:9c:d2:5e:40:7e:0b:a3:
d9:11:2a:a3:08:0f:27:99:94:b4:e1:dc:6f:71:14:
c4:c5:c2:e5:c4:89:fe:15:93:b9:e2:3b:bd:78:20:
91:63:43:58:aa:96:eb:04:1f:b7:d9:7e:9f:d0:87:
1a:59:dd:ee:04:ba:39:90:dc:9d:15:89:1b:32:a9:
07:ea:ab:61:83:2e:ec:7a:ca:1d:d1:9b:c2:8f:cd:
2f:a6:55:bd:f4:c7:eb:05:a2:74:bf:70:e5:35:14:
65:6f:85:79:12:84:dc:3d:95:fe:0e:85:92:30:09:
28:b6:b0:22:62:c9:9f:3e:fe:cc:ae:13:3d:19:68:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A2:2D:C9:9B:0C:D4:41:36:01:99:00:8C:6D:4A:8E:28:6A:50:87
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E6ItyZsM1EE2AZkAjG1KjihqUIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
61:c9:2c:60:9e:24:a4:c5:eb:ef:a4:06:5a:a3:96:ea:81:e3:
36:af:ca:c9:f3:48:8c:98:02:4a:f9:69:9b:c2:9e:fd:37:9e:
62:1a:90:1d:a8:aa:2c:2b:88:3f:04:73:81:2d:40:25:7d:03:
a7:78:32:99:89:9a:32:a1:42:7f:8d:a5:e5:82:f0:ec:3c:07:
c4:0b:bb:93:79:ec:0f:f4:3d:91:fa:d5:51:3d:aa:df:13:a6:
25:52:b7:4a:38:3a:26:ed:00:84:2c:e2:de:80:98:e4:46:34:
15:cb:df:b9:08:d7:d9:04:eb:a3:ea:21:06:8e:3f:99:53:63:
14:5a:94:da:6e:38:95:17:1d:a7:bd:d1:31:9a:a4:bf:74:f7:
2a:e7:13:14:c8:bd:e1:07:cc:41:bb:fe:6e:bd:55:d5:6e:90:
40:b7:b1:c5:60:fd:31:47:2f:4d:11:ce:3b:fb:a0:4a:7d:95:
8e:d2:7e:77:9d:a7:54:03:e2:60:8c:7d:81:0e:dd:94:e8:99:
28:83:e1:f0:d5:cd:91:d8:58:6a:3a:67:57:ce:04:4e:40:71:
2a:26:5f:29:45:4c:1b:42:3b:d6:36:90:a5:42:9e:71:6a:3e:
31:2f:be:5c:3a:a8:b5:03:ef:5d:e3:c0:c1:be:c8:28:3b:b3:
e9:8f:69:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:31 2025 by rpki-client