Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GhzTYde8gZrXK5jKM2SLIlqsV-o.roa
File: GhzTYde8gZrXK5jKM2SLIlqsV-o.roa (raw, json)
Hash identifier: Pt2r3dZ1Uc+huHBQQ/jnz07HK34327o5pW0qIFaJC/w=
Subject key identifier: 1A:1C:D3:61:D7:BC:81:9A:D7:2B:98:CA:33:64:8B:22:5A:AC:57:EA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913A7EA7646590326BC671E0040D388DE7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GhzTYde8gZrXK5jKM2SLIlqsV-o.roa
Signing time: Sat 10 Aug 2024 04:14:24 +0000
ROA not before: Sat 10 Aug 2024 04:14:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 10 Aug 2024 05:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3a:7e:a7:64:65:90:32:6b:c6:71:e0:04:0d:38:8d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 10 04:14:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a1cd361d7bc819ad72b98ca33648b225aac57ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:87:09:fe:2e:ce:e5:35:c5:45:91:9f:6e:
b9:7b:d4:6a:34:ed:f2:31:5d:48:05:05:7d:ef:bd:
4f:f0:58:cb:f7:cb:d3:a7:17:64:73:6a:eb:d2:86:
79:3a:1e:db:45:5e:c8:33:0b:e2:5e:1f:62:23:6a:
42:d1:57:5e:3c:c9:eb:ad:32:c2:2c:88:a7:ac:a1:
17:ab:3d:ee:dd:c0:a5:7d:fe:cf:1d:b7:6b:06:61:
36:7c:83:a5:08:36:f6:83:56:71:10:9f:ff:be:98:
16:b3:40:1f:0b:16:e0:24:64:29:9b:85:3d:e1:9d:
2d:7f:91:1e:88:72:10:25:e6:80:bd:59:37:da:76:
55:49:de:97:7e:64:a8:c6:c4:a3:2b:b2:e3:b6:92:
d9:4f:2e:20:bf:b9:b9:cc:95:e6:7d:7b:35:d1:b6:
75:98:89:b3:9d:62:50:06:19:49:9a:11:e0:b0:96:
b7:07:09:6e:3a:98:7c:23:dd:e7:af:b2:8c:a3:57:
a6:76:cb:6f:44:8f:0a:4d:ec:73:2f:db:e7:e5:0e:
83:35:72:74:e8:76:f9:bc:d0:91:b1:4c:0e:89:7a:
d2:60:b6:e8:67:91:6c:c4:4c:54:e0:0c:fc:84:9c:
9e:d7:fb:a0:1a:a4:14:d0:ce:bf:c0:f4:d0:38:16:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1C:D3:61:D7:BC:81:9A:D7:2B:98:CA:33:64:8B:22:5A:AC:57:EA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GhzTYde8gZrXK5jKM2SLIlqsV-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
69:54:7b:04:8f:88:d8:bd:db:fd:7a:d5:85:d1:44:60:5f:08:
dc:e5:c7:a5:c2:f6:72:11:b1:22:16:63:65:47:fd:2c:d4:35:
eb:9b:6c:7c:fd:4e:b8:2c:3e:2e:33:c9:2d:35:b1:c8:2a:f9:
8f:de:85:60:b4:7b:36:bb:c7:0f:fe:59:5d:3a:17:b5:61:47:
91:53:fe:54:f3:ca:55:a2:5d:32:3e:8d:8f:de:9d:a1:81:4e:
46:05:af:1e:17:fc:f2:9a:2d:8e:43:b1:f6:6b:6d:fc:12:86:
c0:1d:8e:be:74:81:02:5a:52:c5:3c:c8:8f:af:c9:c6:ae:6a:
fb:24:45:2b:36:a5:d2:b7:30:ac:e5:67:52:fc:d8:37:ca:4b:
d6:f5:f3:72:7b:8d:11:3d:19:7d:65:a1:e5:4d:62:98:c3:c5:
18:b7:42:70:f5:26:f0:10:42:e5:fd:56:35:54:20:42:10:04:
58:5f:3f:d0:b2:b6:27:3e:88:68:c1:36:02:ab:6e:96:47:2e:
51:e9:07:e4:8d:06:f2:5f:40:f8:23:6e:2e:94:ee:c6:40:00:
ff:a4:42:9f:00:9b:5f:4d:49:bb:fe:df:0c:3c:14:b3:97:69:
e8:9e:26:f2:58:2a:d5:66:81:88:bb:27:9b:f4:c4:ca:70:87:
50:a1:bd:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:43 2025 by rpki-client