Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NHCctygnl-HUJG12mh-UEnRuvLE.roa
File: NHCctygnl-HUJG12mh-UEnRuvLE.roa (raw, json)
Hash identifier: Af8JWNEjVRmKi+2o65RGMOyF6mf2m8eUSv413L2IvtY=
Subject key identifier: 34:70:9C:B7:28:27:97:E1:D4:24:6D:76:9A:1F:94:12:74:6E:BC:B1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191328C0E57F0F05DA84DA61D37C299D46C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NHCctygnl-HUJG12mh-UEnRuvLE.roa
Signing time: Thu 08 Aug 2024 15:12:04 +0000
ROA not before: Thu 08 Aug 2024 15:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 08 Aug 2024 16:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:8c:0e:57:f0:f0:5d:a8:4d:a6:1d:37:c2:99:d4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 8 15:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34709cb7282797e1d4246d769a1f9412746ebcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:dd:ad:24:cc:c0:ab:75:20:1f:96:f3:3b:
f6:08:7f:29:3b:b6:05:b9:95:52:22:30:bc:02:a5:
20:34:2c:83:c2:3d:ca:ee:a2:1a:9e:5c:65:82:a1:
ac:02:55:77:a1:9c:52:e0:9e:f7:89:1c:f3:7f:e8:
c1:f1:e5:aa:a6:15:13:48:77:69:1f:b6:60:43:a5:
7c:7f:72:53:5e:eb:59:b5:86:c9:5d:c6:03:b6:14:
4c:88:d1:6f:b4:13:ca:5e:a3:bd:d4:d2:90:b5:f9:
7f:c4:28:1e:a9:60:39:42:9b:2c:03:d0:20:b0:f8:
97:2e:0c:ff:ce:a2:75:d4:b1:a1:47:0e:fe:50:a6:
7d:bf:cf:78:7f:a7:ea:90:f2:82:9c:b8:fc:d6:18:
d1:34:4c:8f:7a:9e:8b:5f:82:1f:b7:14:21:50:68:
64:a1:7d:07:36:2d:79:ef:73:93:b4:6c:e0:48:e4:
fe:07:56:7d:7d:0a:8b:8d:24:b8:99:7a:ad:0e:54:
1d:54:3c:9a:f9:69:1e:2a:f7:4d:02:47:b6:98:55:
d5:e8:10:7c:c5:6c:e1:c5:28:ba:5e:ea:41:8c:fa:
e9:5a:87:1a:e6:71:70:e8:a2:b2:a8:0f:6c:e8:a5:
ee:4a:4c:ca:b4:f6:8a:c7:c0:25:26:98:b7:ff:95:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:70:9C:B7:28:27:97:E1:D4:24:6D:76:9A:1F:94:12:74:6E:BC:B1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NHCctygnl-HUJG12mh-UEnRuvLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
56:be:fa:98:fe:f7:5b:0d:96:ba:94:7e:6c:56:84:67:ca:63:
0f:49:21:64:f2:21:65:f4:d5:45:53:b4:7b:be:2b:80:28:f2:
01:b6:d2:eb:c6:cc:ad:98:57:6c:df:fd:23:5a:57:ea:b9:e5:
25:95:68:3c:ce:fc:32:6f:0e:9c:ae:dc:12:f8:6e:5f:96:bf:
7b:2a:69:87:0c:5f:ee:b1:5b:59:d8:7d:af:06:89:54:58:a3:
0e:36:77:5f:63:13:ff:94:42:5b:d7:e2:25:2f:e8:89:f5:db:
78:4e:39:af:5b:c3:3b:a3:63:e9:70:61:67:61:b2:10:79:9a:
07:16:10:38:67:49:f6:33:40:9d:f8:16:dd:c8:f0:b7:bb:94:
7a:00:c5:9d:c4:34:ff:c7:ba:7d:af:8e:d4:c0:89:72:3c:44:
20:c7:1e:0c:70:e0:61:70:05:f9:5f:27:c9:37:f1:95:07:9c:
47:37:cb:49:1d:d2:75:c7:74:ed:ba:30:c7:3f:ee:2e:88:fc:
ec:88:53:29:08:64:ba:44:53:2c:d7:99:a4:59:7f:79:66:90:
29:99:8d:f6:66:c2:cb:f6:c5:a7:8a:3b:64:33:41:8f:63:26:
03:46:e7:35:58:e7:0d:71:97:bc:94:4d:71:85:fc:96:ce:c0:
2d:e5:8a:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:18 2025 by rpki-client