Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G2CjRw3EnOjmjaJqW279ZyipjGI.roa
File: G2CjRw3EnOjmjaJqW279ZyipjGI.roa (raw, json)
Hash identifier: PasynEQLK2LKJm2LKuPBrGL4/q+1mR/F7Gn6gvN4fm4=
Subject key identifier: 1B:60:A3:47:0D:C4:9C:E8:E6:8D:A2:6A:5B:6E:FD:67:28:A9:8C:62
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C7E4EF1A400B41390CC0489166924C08
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G2CjRw3EnOjmjaJqW279ZyipjGI.roa
Signing time: Fri 06 Sep 2024 15:12:34 +0000
ROA not before: Fri 06 Sep 2024 15:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Sep 2024 16:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:e4:ef:1a:40:0b:41:39:0c:c0:48:91:66:92:4c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 6 15:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b60a3470dc49ce8e68da26a5b6efd6728a98c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ac:68:ac:9f:4b:00:34:28:03:72:5d:a7:1c:
c7:0d:14:dd:ad:4c:64:0b:3f:72:fd:2e:5f:81:93:
0e:a0:cb:76:f9:70:c6:e8:6f:95:ce:ea:da:f8:bd:
94:fb:32:11:d7:36:4b:eb:c2:f3:7d:eb:dc:db:cc:
2b:2c:00:bf:ca:09:01:37:25:e4:84:d2:38:d7:c6:
98:ca:f4:d5:cb:79:df:29:22:fe:fe:43:d8:b8:a0:
ff:3e:f9:fe:8b:46:aa:fc:aa:ad:05:6b:16:60:71:
28:f2:f9:8a:c8:65:6d:6f:d2:3b:dd:75:f1:f8:f2:
c9:39:ef:e6:2c:ce:99:c2:07:8f:82:80:15:ea:08:
2f:83:74:09:72:18:90:c6:2b:10:ee:4e:ae:f8:b8:
36:58:d3:61:64:f2:49:39:7e:7e:52:59:c0:f0:10:
94:ba:e5:05:bc:55:5a:2e:29:e0:97:12:1d:14:f6:
0b:4a:b6:01:0a:2a:0e:ab:c2:24:0d:6a:70:d4:6b:
44:73:70:07:29:41:19:13:00:eb:b0:1c:04:67:88:
d5:f5:68:72:06:9b:3b:af:49:3e:29:68:ad:a4:5f:
cb:aa:ad:2f:54:77:38:0e:22:50:57:9b:85:a1:31:
3f:31:08:ba:e0:e6:fa:48:07:58:e7:42:c2:26:28:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:60:A3:47:0D:C4:9C:E8:E6:8D:A2:6A:5B:6E:FD:67:28:A9:8C:62
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G2CjRw3EnOjmjaJqW279ZyipjGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
8e:82:df:c7:b4:e5:f4:83:80:e9:db:89:4a:8b:47:e8:fe:1e:
de:0b:a7:f5:11:65:ab:7a:23:94:ad:dc:c2:8a:09:58:5e:4e:
8e:bf:94:f2:74:af:34:df:39:a2:d3:c9:12:f0:8d:7e:4e:ef:
b6:e4:25:71:18:5b:2a:ea:04:29:e7:54:31:8a:b5:01:3b:90:
6d:74:45:9c:65:d9:80:a4:19:61:87:78:db:b2:99:19:29:a0:
6f:9d:93:7b:ef:99:fa:e3:91:15:77:60:01:f3:be:ed:5a:01:
a6:f7:2b:09:f9:dd:3e:93:3d:11:77:74:94:52:59:67:ca:4d:
cc:71:8b:22:24:24:28:cf:f0:36:f3:7a:5b:f1:13:ed:c5:99:
04:96:80:9d:eb:92:2d:79:a4:c7:2e:27:53:10:1e:ab:71:9c:
7a:29:8b:3d:eb:b5:7b:8c:ed:bd:61:da:bb:4f:d7:ca:4c:f8:
87:1b:4f:6c:f4:c9:c9:55:c2:87:21:5a:0a:89:52:a8:4c:81:
fd:37:06:6b:59:2a:59:7f:fc:a8:aa:5e:42:14:b0:e0:4b:00:
1a:e9:c4:c5:38:84:b9:80:b1:b0:72:53:9e:34:90:55:27:88:
a4:1d:b0:fd:df:2f:b1:04:1d:d0:70:da:4c:ca:b0:1c:5c:5f:
34:2c:82:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:46 2025 by rpki-client