Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jcs0JhqxvpNaaYk5GXMfGQca_jM.roa
File: Jcs0JhqxvpNaaYk5GXMfGQca_jM.roa (raw, json)
Hash identifier: ryQ3pGyxMU3SEHX/1FWRBoLROIHD9HKLuKhwjbKOYuE=
Subject key identifier: 25:CB:34:26:1A:B1:BE:93:5A:69:89:39:19:73:1F:19:07:1A:FE:33
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D30D789A07671FFCFA1A62437750F69E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jcs0JhqxvpNaaYk5GXMfGQca_jM.roa
Signing time: Sun 08 Sep 2024 19:12:40 +0000
ROA not before: Sun 08 Sep 2024 19:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 08 Sep 2024 20:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d3:0d:78:9a:07:67:1f:fc:fa:1a:62:43:77:50:f6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 8 19:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25cb34261ab1be935a69893919731f19071afe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:43:f5:5d:4d:26:0e:94:dd:0e:c6:08:a1:
35:22:35:79:c6:41:06:a1:81:5c:0b:5d:5b:7d:36:
dc:69:6b:a2:4a:5a:22:25:1f:f6:c6:51:e0:de:62:
79:3c:3c:1c:76:aa:19:a6:1a:0a:4a:d6:d6:9c:36:
3c:f0:9b:de:cc:95:77:b9:2f:2d:a5:19:5e:c7:9d:
e4:1e:52:de:20:ea:17:47:02:62:4e:cb:fb:c3:ad:
96:7d:83:0e:6f:2e:da:18:e6:2f:70:1a:46:0e:7e:
76:ce:3d:b8:48:4d:1e:e0:bf:09:e4:78:b2:cd:0a:
46:31:a5:5d:a5:2a:16:b3:50:f7:0c:42:98:86:08:
c3:e6:44:cc:f3:2f:4c:a4:b8:4c:3a:ee:f2:30:70:
b3:99:0b:53:a0:91:cf:5c:22:e3:13:d1:76:89:b6:
00:d4:6c:68:e7:07:ff:85:b8:a4:cd:74:09:e8:cd:
dd:5e:4e:a0:00:2f:23:44:f6:c6:6a:bc:8b:47:97:
b9:e4:27:02:9e:a5:50:c0:79:47:4d:66:5f:91:9c:
73:37:f9:e1:02:fe:7e:ae:af:f4:60:de:e5:f0:b0:
a0:cd:ba:ff:62:3d:92:9f:b5:c7:5f:f0:33:ab:61:
07:67:b5:d0:8a:1f:b5:97:ac:b2:bf:3d:e2:6d:f4:
d7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:34:26:1A:B1:BE:93:5A:69:89:39:19:73:1F:19:07:1A:FE:33
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jcs0JhqxvpNaaYk5GXMfGQca_jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
69:6c:3f:f6:45:8f:16:4e:85:13:c5:50:c9:49:19:2d:54:d8:
3c:77:e0:b8:cd:ff:22:fd:84:45:d9:94:e0:b6:bd:a1:d0:01:
1b:24:f8:4d:8b:6c:39:d4:cf:cb:f2:f0:30:ab:e0:dc:57:af:
28:2b:eb:28:26:52:d4:b0:48:b4:64:0a:70:46:50:07:38:73:
3b:ef:aa:f0:19:06:49:d6:ce:b7:67:b2:7a:fc:31:80:b6:48:
80:5f:f9:f0:d6:fb:45:50:dc:c0:6d:ec:6c:c5:83:a0:43:eb:
08:b1:a7:fd:27:4f:ab:a5:5e:b9:79:3e:34:d6:40:e0:0a:58:
3d:a4:2e:96:36:f3:d3:28:e4:f0:2c:0a:34:bb:e3:58:57:c7:
4c:e9:a1:c7:af:e5:04:13:9e:f8:c1:bc:33:2b:ec:86:e1:78:
5e:ec:a2:d3:26:bc:4f:0f:6a:f5:c0:dc:2c:12:3a:3f:7a:51:
77:af:45:3d:1d:a0:f3:3d:cf:a4:d0:db:ae:d6:4c:9e:e1:16:
9b:2c:3e:55:3c:1f:02:b3:a8:1d:01:dd:51:67:a7:65:c2:dd:
fe:79:21:61:30:73:3a:03:13:f1:54:05:75:61:a6:3b:e1:de:
71:2a:bd:08:87:c0:1b:8b:1b:70:a9:3c:d3:8f:57:70:ba:87:
d7:29:5c:64
-----BEGIN CERTIFICATE-----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==
Generated at Sun Sep 8 21:38:11 2024 by rpki-client on console-fra.rpki-client.org