Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LxhL6kl_--s5-g-H-S4--2ZQ7Eo.roa
File: LxhL6kl_--s5-g-H-S4--2ZQ7Eo.roa (raw, json)
Hash identifier: 51N38kPbT0g2l2nRPk2T3PRNwVzdrx6IJDU9DHaPIMM=
Subject key identifier: 2F:18:4B:EA:49:7F:FB:EB:39:FA:0F:87:F9:2E:3E:FB:66:50:EC:4A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019137E8BC222107603F4EFC3C046183422E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LxhL6kl_--s5-g-H-S4--2ZQ7Eo.roa
Signing time: Fri 09 Aug 2024 16:11:24 +0000
ROA not before: Fri 09 Aug 2024 16:11:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 09 Aug 2024 17:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:37:e8:bc:22:21:07:60:3f:4e:fc:3c:04:61:83:42:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 9 16:11:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f184bea497ffbeb39fa0f87f92e3efb6650ec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:a6:ba:4c:7c:93:02:d8:a9:34:db:51:9f:
86:ec:5d:54:7c:10:ee:e6:e4:cb:4b:f1:57:25:05:
7d:48:d9:5f:23:01:19:93:29:e8:a1:f9:40:3e:c6:
2b:c4:ba:7c:3c:b5:9c:d4:6c:57:97:68:a2:8a:69:
c4:ed:09:99:57:e7:4a:84:a7:a0:2b:03:85:c3:92:
95:47:e2:c7:94:b2:5e:45:d4:28:94:14:02:b8:7e:
60:77:03:9a:e6:51:95:e6:4c:d5:b5:de:1d:07:86:
bf:39:31:a6:59:b3:01:c4:86:18:db:c7:d9:2c:d6:
2c:c5:cb:59:90:df:0a:14:f3:2b:33:6e:d2:85:71:
3e:14:2a:0c:8d:a5:44:9c:ea:42:6b:9b:17:f9:8b:
51:26:98:ea:34:01:e5:a1:00:8b:5a:26:3c:03:6c:
13:17:71:93:80:46:8c:8b:4d:8c:b4:f7:b3:32:1a:
d2:2f:d9:5e:b8:40:e1:9d:8d:b0:03:20:64:39:91:
99:72:72:56:f2:21:7d:15:eb:27:cb:fa:11:96:0a:
c9:4a:75:77:87:cf:41:2f:47:47:a5:59:fc:05:d7:
27:5f:20:bf:bf:6a:18:11:2a:bc:38:df:4f:a5:1a:
7a:3d:77:76:62:80:40:09:d4:02:47:09:e9:51:19:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:18:4B:EA:49:7F:FB:EB:39:FA:0F:87:F9:2E:3E:FB:66:50:EC:4A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LxhL6kl_--s5-g-H-S4--2ZQ7Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
46:37:81:8c:d5:c3:48:8e:1d:14:fb:49:31:21:42:cf:e5:e3:
84:ec:52:f3:21:76:92:5b:48:b2:b3:e0:b7:5e:d4:1a:f3:c5:
f1:b5:0b:ed:97:2e:de:82:1e:9d:5c:c2:71:64:7d:45:3f:2e:
65:e8:4b:85:ef:ef:e8:c1:18:6c:e3:43:ca:2f:fe:48:fd:14:
5a:ac:98:35:47:1f:22:9a:7b:4a:d2:16:0f:4a:8a:15:40:49:
e5:96:0c:9c:da:a6:56:65:76:95:b7:73:e5:27:a5:3b:db:bc:
21:6d:6a:be:eb:1d:b9:95:a0:41:0f:1f:3c:4f:1f:1c:39:a3:
08:79:a7:11:68:0b:28:8f:32:d5:24:cf:35:e0:b0:1e:3e:15:
27:32:c1:67:18:8e:71:94:18:b7:3a:80:8e:00:d9:57:7a:eb:
0a:a3:3b:97:8b:a7:2a:21:b8:01:74:5e:25:61:d8:ed:d8:49:
9a:58:f8:58:b3:fa:14:0a:74:e6:f2:5c:42:e2:04:4c:ac:29:
9b:df:04:b7:b3:f9:ee:29:4d:2d:15:b4:87:de:ef:82:03:56:
a1:97:e5:0a:85:d1:7c:f4:7d:a7:0a:4f:6e:7e:d4:41:83:54:
0d:3c:14:25:e2:f8:39:00:7e:e3:d1:84:af:fc:6e:a0:be:f6:
95:68:d1:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 9 20:09:18 2024 by rpki-client on console-ams.rpki-client.org