Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PTetxMUKxGnjd169XjqEZ0yW04A.roa
File: PTetxMUKxGnjd169XjqEZ0yW04A.roa (raw, json)
Hash identifier: +/TysqSXR9tpT5IfRXxha5YU0ymJG6QWmiXlJHYSnQc=
Subject key identifier: 3D:37:AD:C4:C5:0A:C4:69:E3:77:5E:BD:5E:3A:84:67:4C:96:D3:80
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C5BFB8D4C8644EBE7F2A90943D739D4B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PTetxMUKxGnjd169XjqEZ0yW04A.roa
Signing time: Fri 06 Sep 2024 05:12:41 +0000
ROA not before: Fri 06 Sep 2024 05:12:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Sep 2024 06:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c5:bf:b8:d4:c8:64:4e:be:7f:2a:90:94:3d:73:9d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 6 05:12:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d37adc4c50ac469e3775ebd5e3a84674c96d380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:cb:bb:ad:53:c6:8c:d1:a0:3d:bb:b0:d1:
0c:af:4b:0a:f2:32:2a:9e:81:13:87:fc:44:3e:d4:
9a:4c:03:d9:02:dc:e6:0e:7e:6f:0a:75:7c:51:d1:
63:e5:71:8f:55:eb:a7:e4:b3:a6:5d:14:d0:4d:ca:
cb:82:0e:c5:7a:0f:85:36:7e:46:a2:35:10:76:fd:
4f:00:36:6c:a9:19:c5:50:ba:0e:a2:18:23:89:bf:
0b:93:63:a0:53:e5:77:c2:7b:0c:95:00:1a:3d:54:
bf:f6:bc:fe:92:88:f5:9c:fe:74:6d:5f:0d:ba:b2:
6e:aa:84:61:4b:47:42:9f:58:07:72:b3:36:4c:99:
02:0c:37:c8:02:97:7b:8f:73:d2:18:fc:7b:f9:1d:
98:94:9d:6f:7c:7b:bc:3e:cc:fc:e4:85:cd:03:b2:
df:fe:2d:59:43:ab:f0:59:e3:21:73:c1:df:6a:a5:
e1:a4:ad:1a:47:4d:e8:e7:cc:3e:99:81:ca:29:06:
9b:2c:d3:89:cc:69:d5:c6:12:06:9c:7b:1c:41:14:
0b:97:df:a0:fb:85:6d:cf:c1:f3:82:32:6b:13:75:
69:2a:34:96:18:a1:40:a8:15:99:7a:db:79:70:f7:
c7:9c:d4:f5:1a:f9:cb:be:52:8c:ec:5c:95:99:94:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:AD:C4:C5:0A:C4:69:E3:77:5E:BD:5E:3A:84:67:4C:96:D3:80
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PTetxMUKxGnjd169XjqEZ0yW04A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
88:e2:58:38:7f:cc:ca:be:7d:d6:8c:0f:bc:c1:98:b6:b0:b8:
5f:aa:28:37:38:bc:ba:2a:52:71:2d:08:83:32:51:27:d4:c0:
ac:ae:56:a2:3a:a5:0b:fe:3b:06:79:5a:75:b2:1b:e5:a0:48:
c1:f8:52:cd:50:5f:69:ca:9c:5b:8e:00:05:6d:a2:d8:46:8f:
fc:d2:a5:a6:98:2a:9d:7b:83:7b:36:08:b8:09:57:25:b8:1e:
1c:dd:10:30:19:45:1b:9f:4c:f6:48:27:21:bc:dc:6c:6b:a8:
ab:62:5b:45:06:3d:53:69:48:8d:52:79:86:55:1e:ec:9d:ef:
9e:8b:fa:2a:1c:cd:df:b8:19:ec:72:df:ac:e3:10:90:d5:c5:
7e:3a:93:a0:17:93:3d:bb:ee:9d:93:db:15:59:bb:29:40:29:
f6:c9:45:61:8c:4b:cf:e6:12:88:a0:86:49:b4:14:e7:71:c8:
37:d8:67:6c:87:72:c5:17:c9:a8:56:09:ad:14:b9:b9:cb:6c:
87:36:8f:67:ae:70:71:91:c4:54:ce:78:16:b4:f3:6f:00:b5:
48:a9:29:0e:59:b2:dc:00:ea:df:fc:41:08:af:cd:61:ea:78:
7f:3b:ce:a3:e5:a2:17:f7:e8:4c:71:0f:7e:9e:64:af:5c:8b:
9e:77:75:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:26 2025 by rpki-client