Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EQtrAhnuYUCYu2yfPXouEiuEf8s.roa
File: EQtrAhnuYUCYu2yfPXouEiuEf8s.roa (raw, json)
Hash identifier: 2FKj5Q/2kVQO/lQO7+SpW7//+/j/YgSx/M3YqOwGqnI=
Subject key identifier: 11:0B:6B:02:19:EE:61:40:98:BB:6C:9F:3D:7A:2E:12:2B:84:7F:CB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C13C0869F24E18D77EEF3472606227FF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EQtrAhnuYUCYu2yfPXouEiuEf8s.roa
Signing time: Thu 05 Sep 2024 08:10:22 +0000
ROA not before: Thu 05 Sep 2024 08:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Sep 2024 09:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:3c:08:69:f2:4e:18:d7:7e:ef:34:72:60:62:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 5 08:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=110b6b0219ee614098bb6c9f3d7a2e122b847fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:a1:16:7f:be:4b:24:7c:51:e0:dd:bc:8f:
17:9a:82:60:d3:c0:12:9c:05:17:90:b7:df:c4:9b:
c1:25:16:90:7e:fb:aa:a4:0d:f4:8d:51:f5:c3:e3:
69:34:ee:b6:52:b8:58:d5:01:b7:d9:4c:8f:30:46:
2d:32:d4:6f:77:27:59:31:78:bf:90:dd:aa:31:07:
d8:dc:dc:aa:ac:40:e8:44:ed:c1:bf:f4:8f:e3:b2:
ec:35:06:d7:14:b0:eb:a0:43:37:0e:74:e1:48:45:
5e:85:8c:98:db:77:94:51:a0:30:84:1c:c3:9a:a5:
a4:db:14:08:e9:24:a8:6f:ef:1f:23:f5:e3:6f:b5:
61:fe:2d:b5:8d:90:b3:25:c0:d3:36:aa:4f:63:ae:
96:4f:cb:e2:f6:fc:d1:f1:1c:36:43:dd:fa:98:f8:
54:31:43:cf:d2:b2:30:54:f9:6c:09:d8:c9:ed:3b:
5d:5c:b4:80:0a:53:03:17:ed:70:9e:ed:02:3b:3b:
11:71:d7:07:87:b5:03:bc:3c:e9:15:94:09:64:f3:
43:77:d9:4e:2f:81:b2:76:0f:8e:ee:b9:2f:38:0a:
3c:4c:50:0a:d2:68:45:6f:f9:0b:5f:c5:37:22:b8:
ab:9f:89:6a:70:1d:54:77:7e:94:90:f7:8e:9c:97:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0B:6B:02:19:EE:61:40:98:BB:6C:9F:3D:7A:2E:12:2B:84:7F:CB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EQtrAhnuYUCYu2yfPXouEiuEf8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
8c:82:b3:66:8e:ab:b9:49:99:f6:5c:33:13:71:a4:ec:e2:a8:
14:c5:42:7b:5d:7d:1a:bb:e8:5a:1f:d2:1d:42:f0:7f:28:8b:
ec:e7:5f:df:4d:02:4b:62:2b:f6:46:99:a6:b1:b4:0f:00:95:
a9:79:57:5a:7c:db:ec:c7:85:ae:0e:29:87:2e:59:a4:9a:8b:
e3:62:14:95:91:0a:6a:15:5f:4f:04:a8:a5:3d:09:e5:17:3d:
3d:85:c9:f1:59:46:fa:1f:d4:55:e3:e3:54:50:ea:de:e9:9e:
70:a3:b8:06:5a:a4:95:a0:51:f5:c1:84:08:ca:e9:2f:b3:d2:
16:d3:8f:92:8d:ec:ed:70:8c:84:21:dd:d9:5c:6e:3c:36:0f:
f0:63:90:3a:5e:8d:9c:ee:6f:78:a1:1b:57:56:0e:0c:23:9b:
03:01:79:0d:07:75:7a:a7:3b:6e:8c:17:5b:bc:cf:6d:91:f0:
90:eb:a1:45:ff:ec:a8:2c:11:99:dd:b3:e4:b8:ac:3c:03:0a:
cd:a6:34:1c:fb:58:f5:ea:79:2e:07:20:84:98:30:8f:fc:ea:
0b:ac:13:7a:00:b6:f7:28:f3:dc:d4:7f:02:38:93:34:e8:74:
4d:9c:97:8c:55:c5:4b:f0:c8:35:03:99:de:3f:6a:b3:09:65:
a2:de:ec:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:15 2025 by rpki-client