Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JXaKxlqVvnUZ8sKhkRJnw9ETr5k.roa
File: JXaKxlqVvnUZ8sKhkRJnw9ETr5k.roa (raw, json)
Hash identifier: FzyI05z7EKJYT0merkja4Xz/BUOdGboMy1oM+ewh5/A=
Subject key identifier: 25:76:8A:C6:5A:95:BE:75:19:F2:C2:A1:91:12:67:C3:D1:13:AF:99
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191456F4195AF7412B36FCC9328498C8555
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JXaKxlqVvnUZ8sKhkRJnw9ETr5k.roa
Signing time: Mon 12 Aug 2024 07:13:24 +0000
ROA not before: Mon 12 Aug 2024 07:13:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 12 Aug 2024 08:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:6f:41:95:af:74:12:b3:6f:cc:93:28:49:8c:85:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 12 07:13:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25768ac65a95be7519f2c2a1911267c3d113af99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:1a:8d:7d:54:68:8b:48:06:86:1a:f9:f1:
45:87:70:5a:69:b6:e8:4b:db:da:5e:b0:c3:53:43:
39:2c:65:15:ec:7d:a0:ed:6c:98:58:9e:9a:04:36:
de:0c:34:f2:72:f8:60:99:5b:55:23:a8:75:f2:2b:
41:8b:19:c8:49:9f:62:21:c7:3d:6e:3e:68:ca:ea:
05:45:ae:65:cd:21:88:d7:60:be:e8:58:cf:ac:31:
0c:d6:f9:8a:07:06:19:50:18:a7:7c:d4:5c:4f:9c:
45:3f:e1:34:56:83:3e:17:cf:ba:75:d1:23:32:f5:
5f:fb:aa:8a:28:d1:e0:70:6c:20:48:51:ff:95:f8:
34:68:df:6b:75:da:17:25:87:82:ca:93:4a:66:68:
f5:b7:4d:f5:03:90:a8:18:89:a4:cc:fd:f4:0a:b5:
5d:20:19:cd:4a:d6:c5:45:7a:28:1b:3f:d2:a8:bc:
e8:2f:13:4d:19:91:23:29:7d:4f:a7:9b:04:5f:37:
b2:4d:e6:0a:ac:f9:56:e5:2b:78:cf:77:5c:6a:2f:
4e:d3:16:d4:20:12:fd:57:65:92:9d:bc:8c:61:95:
d8:ac:09:d7:e0:34:e5:d0:ec:cc:64:21:49:ec:db:
17:15:58:5c:b3:e8:69:79:72:79:ec:a8:08:08:43:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:76:8A:C6:5A:95:BE:75:19:F2:C2:A1:91:12:67:C3:D1:13:AF:99
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JXaKxlqVvnUZ8sKhkRJnw9ETr5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
45:69:c9:7c:ce:62:df:99:dc:01:a0:39:42:9d:61:0f:14:1d:
c5:8c:68:12:13:20:cb:99:84:f1:ce:42:3d:0a:3b:f9:5d:1c:
0e:e3:c3:52:6f:84:f4:cd:fd:f8:9b:0a:29:d4:89:76:7d:c6:
f3:7f:3e:0e:05:cf:a4:ce:25:63:3b:34:5e:03:0c:a0:65:42:
d9:bc:2f:90:6e:8f:4d:47:1e:f4:18:3e:8f:16:7a:1f:01:ed:
b6:8b:6d:b2:18:da:b9:3e:bb:c7:1f:a6:48:59:c5:0d:bf:49:
b9:23:05:39:6a:49:6d:98:e5:25:b5:ed:b1:76:76:9f:77:62:
71:ef:ae:c8:25:bc:6b:23:e8:a6:12:8a:1c:d5:56:c3:76:78:
ab:01:71:39:5e:36:38:e8:af:d4:3a:3a:34:d6:12:14:1b:60:
e3:f4:15:be:52:4e:f9:3d:55:1a:8e:5e:84:79:91:83:6a:e5:
e2:9d:8d:e0:ba:df:58:1b:d8:09:bc:0d:32:b5:be:44:f5:23:
69:9f:fe:b7:e6:76:a1:9e:d4:45:18:05:dc:61:c7:2a:e2:90:
f4:03:d3:d8:e3:a4:59:74:f4:17:b1:39:33:3b:dc:ca:fa:da:
a6:6e:fd:b8:3e:d6:62:1e:f6:9c:d3:2e:c5:d5:0b:70:1a:32:
88:c8:0d:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:53 2025 by rpki-client