Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Edm8jLm_1IRVEhzWX9JQ3jX1VwM.roa
File: Edm8jLm_1IRVEhzWX9JQ3jX1VwM.roa (raw, json)
Hash identifier: CZI1nQiSfqZ8kYjvWcMYz1wPcncOSdzwPegflByBMJA=
Subject key identifier: 11:D9:BC:8C:B9:BF:D4:84:55:12:1C:D6:5F:D2:50:DE:35:F5:57:03
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01912E0A7C0A5AF1B4ADAB1881A555AFDB18
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Edm8jLm_1IRVEhzWX9JQ3jX1VwM.roa
Signing time: Wed 07 Aug 2024 18:12:04 +0000
ROA not before: Wed 07 Aug 2024 18:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 07 Aug 2024 19:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2e:0a:7c:0a:5a:f1:b4:ad:ab:18:81:a5:55:af:db:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 7 18:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11d9bc8cb9bfd48455121cd65fd250de35f55703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:79:d8:86:67:59:14:4c:6c:50:05:13:c1:4a:
4c:69:a5:fb:d3:eb:a0:a7:0a:09:80:e9:5b:4d:6c:
f2:02:d1:37:dd:45:09:20:15:54:3f:24:e2:bf:93:
31:35:96:75:a4:1f:df:8e:30:26:25:36:3f:87:53:
5b:03:47:09:55:9d:c1:6f:9b:38:a3:5f:51:b9:97:
9c:e1:4e:16:48:99:70:7c:ef:8e:00:0b:f3:65:10:
3d:f3:0a:39:12:b7:52:91:e0:bb:d1:8c:fd:8e:55:
a9:f8:bd:24:86:dd:0b:7d:1d:6d:59:68:43:ab:ab:
80:ec:a1:5b:e1:a8:3e:5d:de:3f:e2:71:47:62:a0:
4a:56:39:a2:0b:9c:63:ee:6b:73:56:e9:fd:e9:e3:
66:4f:1c:40:b9:55:2b:17:59:3e:7e:d5:b5:2c:cc:
36:81:71:41:e9:8e:c0:55:9c:55:84:39:5a:fd:19:
23:85:b1:ad:c5:c6:61:f0:8a:b0:6f:ce:42:ab:f0:
87:f3:47:21:3a:9d:c9:e0:4b:28:d3:a1:d0:0d:16:
b9:85:d9:fb:e2:77:8a:ad:e1:9e:2a:6f:3f:24:5e:
75:e1:2c:68:df:b0:2a:8d:e1:35:ff:78:bf:45:79:
73:ab:3b:6a:70:8f:79:6f:2c:37:72:ef:9e:db:2b:
41:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D9:BC:8C:B9:BF:D4:84:55:12:1C:D6:5F:D2:50:DE:35:F5:57:03
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Edm8jLm_1IRVEhzWX9JQ3jX1VwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
87:a7:6a:05:85:b8:78:5f:55:2d:72:36:10:5c:f8:56:0d:9b:
b8:66:d5:82:ed:85:9d:ed:31:3c:ca:99:c3:e3:ec:77:32:7c:
e7:e2:b8:43:98:31:a7:6d:d7:08:89:e2:ea:53:b1:83:ac:9c:
1e:c1:c1:b9:1e:7c:bb:c8:fa:e3:07:c3:3f:09:4a:63:97:7b:
65:7d:01:f2:74:54:60:8a:62:35:60:eb:90:80:3d:88:aa:00:
d4:29:1c:c2:c1:51:03:b4:7b:c9:65:33:fd:c8:2f:ce:d2:65:
e4:1f:0c:b6:86:60:2c:c8:e7:d4:3b:27:be:45:ab:28:52:c9:
3e:f2:ea:e6:16:8c:81:30:2d:9a:d3:5b:bc:a8:e4:cd:02:f0:
6c:6e:b2:38:fe:c0:4a:f3:a6:fa:1e:30:85:01:c6:95:bd:e2:
c2:22:6b:31:d9:e2:15:8a:f3:81:43:cb:0d:92:b4:09:57:56:
8d:1d:c2:06:02:2f:7d:ef:29:82:a5:d2:8c:b7:ce:21:00:0d:
15:46:fc:17:2a:d1:89:c3:1e:98:47:c9:d0:49:6d:8f:40:cc:
4c:9f:6c:e9:4c:a6:2d:69:78:80:2c:be:1e:d9:97:18:ce:a1:
96:e4:d8:d9:5b:1f:12:29:14:72:fb:fa:38:0f:4f:6a:2d:6e:
05:31:60:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:52 2025 by rpki-client