Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LlZ6EKToSTOsrERQmIwzhgPqsOk.roa
File: LlZ6EKToSTOsrERQmIwzhgPqsOk.roa (raw, json)
Hash identifier: aIUy193DIIvgtHBR0Phpox1w+sSQYRFYUN/fvzIU+eo=
Subject key identifier: 2E:56:7A:10:A4:E8:49:33:AC:AC:44:50:98:8C:33:86:03:EA:B0:E9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01911FDF2AB0DBD5EC3BED7B74406C73C8D5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LlZ6EKToSTOsrERQmIwzhgPqsOk.roa
Signing time: Mon 05 Aug 2024 00:10:04 +0000
ROA not before: Mon 05 Aug 2024 00:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 05 Aug 2024 01:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1f:df:2a:b0:db:d5:ec:3b:ed:7b:74:40:6c:73:c8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 5 00:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e567a10a4e84933acac4450988c338603eab0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:14:86:70:51:30:fb:4f:fb:19:c0:db:0b:
92:be:9e:8a:a2:e1:e6:e2:63:85:92:f3:0f:b8:ca:
24:3f:f7:70:65:0a:18:52:a9:0e:c4:ec:9c:8c:cb:
90:5a:a3:d8:9a:81:4e:a3:59:92:98:06:8a:8b:57:
f7:b2:f7:ab:0f:bf:a5:4a:6d:2f:3f:5c:4e:3b:7f:
59:2e:f4:2a:da:60:b1:fd:9b:a8:1c:8a:ed:89:c6:
69:55:2f:14:49:3f:e1:17:5c:85:03:59:8f:9e:27:
10:12:03:e8:04:ec:21:e7:8d:c9:fa:2b:e9:86:2f:
fe:f6:2f:86:73:8d:a0:ef:91:48:50:70:e0:44:26:
50:cd:cf:5a:ad:72:fb:09:ee:29:f7:3a:79:7f:d7:
ae:e7:c4:22:db:c5:70:fa:d1:03:0e:06:36:20:16:
2d:67:77:86:d9:e2:a5:0e:15:15:7b:ba:78:3a:e2:
b3:a3:4c:22:12:af:63:62:10:fc:6d:5e:d9:90:03:
f9:2b:c8:1b:59:b2:fa:04:c1:42:14:52:c0:c9:9d:
f8:f3:fd:55:88:89:ca:3a:80:be:45:c3:d0:90:bf:
36:23:ad:4d:2d:79:8b:77:2f:e3:c2:f9:91:f7:fa:
56:a0:fe:cc:72:16:63:9b:9d:db:38:06:ec:b2:4e:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:56:7A:10:A4:E8:49:33:AC:AC:44:50:98:8C:33:86:03:EA:B0:E9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LlZ6EKToSTOsrERQmIwzhgPqsOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
30:9f:60:83:f6:92:07:a5:5d:76:27:6e:9d:dc:6c:fa:41:ab:
03:da:9d:4b:1e:2c:e9:79:63:9d:a4:09:bb:97:8b:8c:03:ab:
a6:f7:8f:a2:fb:c2:60:f9:2b:fc:4b:b5:a5:57:e6:7f:e7:76:
85:a0:86:c4:c7:36:e6:bb:74:be:fe:7e:8d:4b:ae:2a:c7:ab:
f8:fa:ff:8a:21:02:d1:00:66:8c:2e:d4:82:8c:ca:5a:2d:89:
fe:d5:85:83:08:ca:90:c8:67:1f:b6:cc:63:12:6c:d3:e2:f0:
7a:4f:32:67:39:2d:a8:cf:bb:9b:da:5d:59:88:25:d6:31:bb:
8a:00:ff:40:e1:26:16:59:99:76:a9:7d:6a:b5:6e:31:94:23:
6f:bd:6d:f1:1d:bc:f4:37:10:e4:9e:2c:06:aa:17:59:32:c7:
e6:43:1f:1a:db:56:5b:f1:99:41:1b:12:12:2a:05:89:b4:c0:
89:87:52:ba:25:d6:12:49:fa:59:18:c4:43:6e:04:0e:1c:ea:
29:7f:ff:18:0e:f9:8b:a8:1e:21:6e:ce:2f:51:dd:7c:9d:84:
01:49:f2:d4:4f:48:4e:ae:80:68:76:82:90:66:85:b2:04:02:
f5:8b:b0:3e:25:3f:48:0c:b5:f7:47:dc:c4:fb:d6:2c:21:66:
c1:6d:cc:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 5 03:21:47 2024 by rpki-client on console-fra.rpki-client.org