Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FPJLiTP5tyMtbDobYZ5LR48M_xo.roa
File: FPJLiTP5tyMtbDobYZ5LR48M_xo.roa (raw, json)
Hash identifier: bDuFeFcykDPNspBO6vDiRtaTteu7eW+sjqOkCAVrucs=
Subject key identifier: 14:F2:4B:89:33:F9:B7:23:2D:6C:3A:1B:61:9E:4B:47:8F:0C:FF:1A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019188FE72E40C6489BF2C4F04D5786DA833
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FPJLiTP5tyMtbDobYZ5LR48M_xo.roa
Signing time: Sun 25 Aug 2024 10:04:22 +0000
ROA not before: Sun 25 Aug 2024 10:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:88fe:4abe/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 Aug 2024 10:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:88:fe:72:e4:0c:64:89:bf:2c:4f:04:d5:78:6d:a8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 25 10:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14f24b8933f9b7232d6c3a1b619e4b478f0cff1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:df:62:19:e9:0e:aa:f7:3a:5e:35:ef:19:
eb:47:91:03:0e:e1:3f:63:9c:65:99:43:52:17:f8:
cd:26:70:b1:a5:88:83:b9:03:0d:a0:e5:bd:1c:65:
55:dc:ff:ef:9b:5e:79:01:4b:db:71:37:7f:1e:a1:
0f:a8:1d:dc:73:89:31:fc:9b:a9:b9:83:d7:17:f0:
d3:0b:1f:8d:7e:4f:b0:82:57:3b:f3:aa:08:ca:ee:
39:0f:88:7a:7f:dc:33:a9:e1:2d:89:19:09:0a:62:
44:72:5c:79:83:e9:aa:8f:82:d4:25:3f:38:da:5f:
09:15:34:bf:38:ad:64:6e:b9:05:61:6f:69:17:05:
67:4b:2e:f1:0f:95:68:9b:7a:ea:aa:f7:63:50:79:
9c:8c:7b:c3:57:2d:18:1a:1a:8a:82:9d:7b:9c:95:
ad:0e:1a:5c:c8:e7:ce:6a:58:f1:fb:d5:98:3b:b9:
e0:37:cf:7e:8b:ee:ca:05:67:cd:92:da:a8:3b:07:
57:9c:2f:83:f2:95:31:63:35:90:21:8c:a1:f5:c6:
ed:71:2a:4b:d3:10:60:30:43:64:ba:ec:47:be:ac:
b3:9a:77:08:df:65:fa:a8:31:d4:b7:18:8f:e9:19:
13:7a:1e:e2:87:d2:8f:8c:cb:dc:7b:c9:c6:71:f3:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F2:4B:89:33:F9:B7:23:2D:6C:3A:1B:61:9E:4B:47:8F:0C:FF:1A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FPJLiTP5tyMtbDobYZ5LR48M_xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:88fe:4abe/128
Signature Algorithm: sha256WithRSAEncryption
69:e3:a5:62:51:12:fa:a7:6d:bf:54:b2:a4:3e:24:77:46:8b:
9f:f2:92:95:de:cb:af:28:dd:ce:45:3f:b2:45:64:74:6e:5f:
57:29:28:3b:a2:f1:06:15:87:74:6a:7d:67:10:a4:4a:be:63:
da:83:01:6e:ef:72:4c:06:23:21:65:b0:96:56:42:09:cf:0a:
76:d4:55:ba:e9:78:8e:53:4c:47:7f:ce:39:b0:ab:2c:34:b4:
19:92:7f:07:97:15:0a:b9:a7:74:68:a3:51:3d:f3:a4:cc:42:
1d:07:40:7c:ff:34:0f:86:50:c3:4b:15:51:9b:67:78:8f:67:
70:3d:40:f7:45:87:2d:ab:99:fb:26:78:86:9c:9d:9c:28:ad:
a7:a2:1e:48:ee:92:d9:b3:6d:03:87:5b:f7:75:12:53:5c:17:
65:f8:bd:b5:f9:b1:69:4b:23:2b:f6:aa:25:ba:48:3c:ed:ff:
ff:00:2a:86:6f:d2:24:d8:3e:7b:62:4d:5e:28:0c:b2:b6:c7:
3b:83:c7:f6:37:2d:56:51:46:76:06:54:81:bd:32:cc:b6:75:
e6:47:2e:b4:69:45:ec:69:52:be:f0:59:27:58:73:40:c4:87:
c8:59:14:b0:2f:99:24:00:7d:de:d0:3c:dc:8d:8f:f6:8d:fe:
0d:82:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:26 2025 by rpki-client