Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LTqsNwZAO4Rj4UxS0xHE4YN8eUc.roa
File: LTqsNwZAO4Rj4UxS0xHE4YN8eUc.roa (raw, json)
Hash identifier: uLYET+BNaYLRKwGil9oo0kyByb/EzFH4XLobDl4OIyI=
Subject key identifier: 2D:3A:AC:37:06:40:3B:84:63:E1:4C:52:D3:11:C4:E1:83:7C:79:47
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B1C8F5F46931FB8F284D3B6BC0F69A83
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LTqsNwZAO4Rj4UxS0xHE4YN8eUc.roa
Signing time: Mon 02 Sep 2024 08:10:22 +0000
ROA not before: Mon 02 Sep 2024 08:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 02 Sep 2024 09:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:c8:f5:f4:69:31:fb:8f:28:4d:3b:6b:c0:f6:9a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 2 08:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d3aac3706403b8463e14c52d311c4e1837c7947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:de:8c:f5:6c:f7:75:88:af:bd:7c:20:38:
a8:c6:25:2c:a5:d3:57:95:38:28:7e:18:6d:31:b8:
de:5e:9c:f9:02:4c:90:d6:ea:e4:a0:80:0a:86:73:
b7:ca:81:ac:b5:0e:25:06:b9:73:5d:22:a8:67:8d:
d9:19:06:74:c8:a8:ae:e3:2f:cb:38:38:13:af:fb:
14:e0:ec:3e:78:7e:84:da:3f:c9:51:42:a5:77:dd:
9f:a0:16:1c:6f:2e:ea:e2:5e:c5:f4:b3:6d:f6:27:
41:60:e5:d5:ef:79:b7:6c:6f:7b:2c:61:de:08:8c:
e3:bc:35:45:d0:5a:9d:f8:5e:66:5f:35:eb:80:13:
a9:3d:c6:5c:cd:9f:41:2e:a9:a1:5e:b8:98:e4:49:
08:1a:00:2b:fc:c0:dc:49:41:3a:c0:e6:68:86:12:
ef:d7:ca:92:e5:73:d6:e3:5b:5c:cf:d5:6c:a2:55:
ce:ad:f9:ca:64:f0:2e:81:27:4c:93:db:ce:76:4e:
85:18:20:6a:d7:33:3d:2c:11:a8:0b:7e:7d:41:80:
f8:0c:53:d4:b6:2f:09:ce:dd:8b:cb:33:46:21:ad:
71:47:db:42:f7:c5:ff:25:ef:10:e8:fd:22:97:a5:
d5:1b:9e:5b:75:68:6b:dd:6c:0b:a1:60:fb:ce:8c:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:AC:37:06:40:3B:84:63:E1:4C:52:D3:11:C4:E1:83:7C:79:47
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LTqsNwZAO4Rj4UxS0xHE4YN8eUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
19:e7:82:60:e7:4d:5a:3c:2f:1b:f6:e7:48:69:6c:88:07:fd:
1f:4a:59:b1:f3:79:f3:72:d1:4c:20:23:a8:7a:6f:a5:10:08:
84:21:f4:4a:6b:84:56:aa:79:1a:70:b4:a0:8e:c0:02:68:48:
57:99:9c:e2:ea:71:8e:a6:35:3a:51:52:73:8b:3f:7a:d4:55:
9f:71:67:50:78:e7:b3:79:b4:0a:42:40:ee:aa:f9:38:c6:92:
a8:59:88:8a:ae:b8:22:4d:4b:82:35:f0:a8:dd:0d:1d:11:91:
f5:ac:3f:a1:a5:6f:f5:f9:b3:96:b9:15:d3:11:ae:e2:d3:ae:
95:88:45:34:d6:d7:4a:e0:71:c6:8b:8b:17:18:69:6f:2a:ac:
97:f3:55:0f:78:11:1c:ff:d8:dd:76:24:a2:0b:8a:f4:ad:e8:
11:3c:2d:19:fe:74:9f:ce:48:5c:cc:ce:66:5a:89:16:53:fe:
e5:9b:94:22:72:1b:e1:30:a1:c3:72:ab:83:07:97:b4:92:0d:
83:8d:6d:40:57:94:db:a9:49:35:41:99:3c:3a:d1:e6:5f:11:
98:54:55:94:6b:75:49:17:a6:72:4c:3d:99:73:ff:ef:5c:02:
03:86:f3:ec:41:b2:cf:33:0d:bd:c8:88:11:68:b0:da:b6:3d:
51:38:9c:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:24 2025 by rpki-client