Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OFPcMzRbd9vJ5t9XqJzgmgZLFxk.roa
File: OFPcMzRbd9vJ5t9XqJzgmgZLFxk.roa (raw, json)
Hash identifier: pt17wDv2uCBhc+S1woCIkgwdKKsL09a4wgfKJX/aAD4=
Subject key identifier: 38:53:DC:33:34:5B:77:DB:C9:E6:DF:57:A8:9C:E0:9A:06:4B:17:19
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D3441F3420D9908072D08DAA9368750F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OFPcMzRbd9vJ5t9XqJzgmgZLFxk.roa
Signing time: Sun 08 Sep 2024 20:12:22 +0000
ROA not before: Sun 08 Sep 2024 20:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 08 Sep 2024 21:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d3:44:1f:34:20:d9:90:80:72:d0:8d:aa:93:68:75:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 8 20:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3853dc33345b77dbc9e6df57a89ce09a064b1719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:57:d7:5a:ec:fc:33:fc:02:a2:71:6b:ce:
4f:cc:4f:46:65:1c:b3:8c:3f:44:cb:26:62:27:4b:
ec:14:fa:23:c9:e7:b8:74:a8:b8:55:17:7c:66:0f:
9e:0c:63:8b:9f:ea:44:f1:f0:22:65:a3:16:29:3c:
72:3f:d9:29:e3:e2:46:56:c8:82:05:51:5c:06:d8:
e3:00:63:d2:25:aa:58:46:48:5d:f8:ad:11:d6:5a:
97:b3:59:a2:a4:63:86:16:f9:6b:4d:6d:82:35:f5:
99:3a:09:55:ea:71:dc:1f:9c:a0:30:9a:66:ab:e0:
86:66:cc:4c:34:78:26:bc:5f:80:07:ce:ab:1d:7d:
bb:de:29:81:7b:b4:6d:9d:25:79:c0:69:5c:97:84:
2b:70:61:29:32:05:88:8f:e1:63:e8:0e:77:21:fd:
b3:60:86:71:41:e3:47:ad:47:91:3e:d9:88:30:fb:
96:71:2e:85:0c:1a:37:54:28:6f:29:0f:9b:5a:31:
d3:b0:e7:be:f6:d6:e6:d1:54:d0:09:ff:03:33:f7:
37:a4:dc:f9:a9:89:9e:c8:04:2a:81:43:54:7c:c3:
a8:a5:8a:f3:f3:eb:4f:cc:d2:05:71:3f:d3:33:27:
fe:d7:5f:b6:97:45:08:c6:21:92:6e:45:41:2c:59:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:53:DC:33:34:5B:77:DB:C9:E6:DF:57:A8:9C:E0:9A:06:4B:17:19
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OFPcMzRbd9vJ5t9XqJzgmgZLFxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
34:86:69:f1:c4:c5:c7:9a:dd:c4:89:d4:63:ba:04:a7:f6:af:
e0:e1:74:f8:55:9e:3e:8a:6c:b4:51:be:6c:0f:ea:be:35:99:
96:3c:3a:e6:7f:26:c8:db:54:97:4d:66:3b:7f:fb:e3:c2:9a:
90:99:66:bc:db:b3:f8:55:38:b8:c1:63:1f:df:fb:08:b2:89:
0b:94:b2:fb:0d:b9:c4:2f:88:8c:8f:8d:2c:e9:90:07:e0:a6:
c4:ea:c2:8c:22:b6:5c:22:80:fa:b3:71:e2:72:b2:15:0d:f0:
77:bd:13:58:19:ea:3e:ec:ad:e5:c6:9f:99:37:d4:39:57:97:
3d:c2:81:68:47:37:4a:0e:45:c8:b9:8c:11:d0:e7:09:0b:45:
95:62:ba:7d:4d:1e:fe:cf:32:43:9e:9c:81:59:53:1a:f6:42:
04:1c:f9:94:ca:55:56:cb:87:16:d8:aa:03:dc:77:72:49:2c:
c9:30:43:eb:3d:2b:c2:eb:52:6b:26:67:29:ac:bd:10:7b:54:
08:de:61:23:52:df:67:93:fd:6b:19:22:9d:c0:d1:7d:99:20:
9f:1b:8a:a1:ef:67:43:f6:bf:9e:17:e4:55:54:2d:c3:15:80:
06:c0:5b:04:15:2a:1b:cc:3a:88:1a:ae:6c:7d:4a:51:6a:c3:
ef:73:f7:28
-----BEGIN CERTIFICATE-----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==
Generated at Sun Sep 8 22:38:41 2024 by rpki-client on console-fra.rpki-client.org