Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F1ByPd2Bia3LtMLmBPMFLIvtMaY.roa
File: F1ByPd2Bia3LtMLmBPMFLIvtMaY.roa (raw, json)
Hash identifier: CT+U88axLy9Hw+3/z+DODYOCU9MiS5yKwIlTznlrMyQ=
Subject key identifier: 17:50:72:3D:DD:81:89:AD:CB:B4:C2:E6:04:F3:05:2C:8B:ED:31:A6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019185CE1D473968EA541E0095D87D6E4A4C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F1ByPd2Bia3LtMLmBPMFLIvtMaY.roa
Signing time: Sat 24 Aug 2024 19:12:43 +0000
ROA not before: Sat 24 Aug 2024 19:12:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 24 Aug 2024 20:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:85:ce:1d:47:39:68:ea:54:1e:00:95:d8:7d:6e:4a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 24 19:12:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1750723ddd8189adcbb4c2e604f3052c8bed31a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:2e:c4:da:20:41:e9:c2:ee:d5:4c:94:09:
d0:a9:8e:71:59:8d:3c:8d:d0:1d:6a:18:ff:a4:fe:
94:93:63:85:bb:52:c2:60:c1:a1:f2:17:91:e9:0a:
dc:29:67:49:cc:ba:6a:85:34:4e:cf:99:67:03:56:
01:9b:73:7f:68:44:52:8a:f9:cf:c5:b7:a7:90:b8:
0d:ef:9f:e8:c5:71:3a:96:63:4b:56:d4:cd:11:74:
2d:16:f5:65:75:a3:8d:72:bb:ce:c0:17:31:65:75:
31:c9:c7:c3:86:42:aa:cb:d9:6f:f2:98:44:23:6b:
f4:18:f0:66:57:fc:d0:bf:4e:9e:28:dd:d8:70:9c:
73:92:34:71:4c:99:73:6e:10:aa:b2:b3:24:fc:0b:
6b:03:73:35:b8:64:d2:64:e4:ed:b8:80:70:8b:b8:
4f:e2:b2:5f:bb:1b:55:5b:d0:f7:88:f8:22:fc:aa:
93:f4:d9:ba:c2:a7:cf:87:9b:f5:d6:c8:0e:95:98:
5e:90:7b:79:20:26:2e:ba:b4:fe:98:dc:fd:e7:73:
cc:45:e0:34:b9:76:84:e9:11:7e:30:51:9e:55:71:
2b:7c:f6:a9:54:74:8c:7c:d6:42:ff:7e:e3:fc:68:
11:24:b2:d6:a7:39:5a:a5:07:28:15:14:88:0c:92:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:50:72:3D:DD:81:89:AD:CB:B4:C2:E6:04:F3:05:2C:8B:ED:31:A6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F1ByPd2Bia3LtMLmBPMFLIvtMaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
76:9d:0e:b5:20:f6:a7:f5:20:56:77:c1:8a:62:d2:ec:bb:5b:
9f:ff:7b:8f:81:ca:91:e2:89:49:63:4c:79:1f:e9:b5:8c:03:
04:f3:9f:d0:1a:e3:fe:69:e8:f7:39:73:66:f9:f1:a8:e6:7b:
a6:62:11:7c:cc:25:fb:fd:b2:a8:40:46:b7:b9:bf:4d:55:e0:
ba:25:56:32:ed:2c:17:9a:2a:16:1d:e8:20:ca:d8:36:c8:91:
3e:01:d6:41:04:74:73:00:92:14:9d:0f:10:2f:4c:f2:ef:08:
5f:96:07:06:5d:36:ef:ee:c4:31:db:7d:d8:1b:9e:a8:c7:f6:
30:d9:9d:76:85:b9:5b:23:7e:44:7a:41:2a:dd:5c:7d:aa:23:
73:b7:2d:b2:25:3b:f1:19:21:39:8c:b9:76:24:5e:20:cd:3c:
b0:aa:df:c3:42:74:0e:12:d3:50:b5:4c:df:87:d1:ce:e0:35:
fb:91:1a:6a:31:c2:16:38:01:fa:c8:02:5a:08:64:6c:30:d4:
d0:f9:29:d6:5d:30:fd:07:15:0f:4d:b4:37:08:06:a1:b8:7b:
20:c3:4f:69:1f:b1:b6:08:c6:9c:7f:cd:c5:fc:41:01:59:76:
35:e4:49:32:09:10:79:06:f5:2c:61:97:c5:83:e9:f2:b3:1f:
e3:44:71:7e
-----BEGIN CERTIFICATE-----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==
Generated at Sat Aug 24 21:28:55 2024 by rpki-client on console-fra.rpki-client.org