Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Pza8_QUcklBxba4-DMTpxT9ncUA.roa
File: Pza8_QUcklBxba4-DMTpxT9ncUA.roa (raw, json)
Hash identifier: 6uaNOwZNA4kNisdaZEkM2aRLn1HO3lUnzIWoIndstac=
Subject key identifier: 3F:36:BC:FD:05:1C:92:50:71:6D:AE:3E:0C:C4:E9:C5:3F:67:71:40
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01911B279622612693D571FB42C7A2B23155
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Pza8_QUcklBxba4-DMTpxT9ncUA.roa
Signing time: Sun 04 Aug 2024 02:11:04 +0000
ROA not before: Sun 04 Aug 2024 02:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 04 Aug 2024 03:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1b:27:96:22:61:26:93:d5:71:fb:42:c7:a2:b2:31:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 4 02:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f36bcfd051c9250716dae3e0cc4e9c53f677140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:5a:3a:39:ed:5c:12:6d:3f:c2:5a:31:4b:
84:00:ef:5e:0f:b1:5b:88:00:63:41:ca:39:40:89:
b0:0a:24:de:81:7e:bf:ee:e4:f2:b7:1d:80:42:5a:
ed:1c:35:22:f0:ec:65:86:86:44:9f:8d:e8:28:92:
0a:6f:d7:d3:c8:65:44:e6:2d:48:d6:88:6f:6e:25:
5b:00:a8:e8:86:5c:03:34:2d:9a:fd:76:f6:22:43:
77:e3:97:fa:17:f1:2d:4e:5b:10:d1:bb:5e:42:7d:
e6:d5:17:c2:b6:9a:cf:71:1a:3a:ab:66:23:98:78:
32:d5:da:b0:ad:fb:be:d3:2d:72:ec:3b:86:a3:42:
75:f6:2d:bb:6c:67:00:5d:07:f7:c7:cc:ee:ec:f0:
98:ea:2d:88:c0:d2:ca:7d:8c:f6:35:26:5e:67:ce:
6e:2a:b4:97:7e:ca:01:ac:be:40:bc:9a:56:7d:9a:
1f:95:01:a8:4e:a3:5f:25:ee:06:9b:b2:f6:c8:26:
2f:09:a8:fd:6b:84:01:f8:c0:c9:4a:de:e8:8e:31:
1c:bb:4e:58:34:64:51:a2:eb:6c:5b:22:82:4b:ca:
cb:d3:21:d1:3a:71:3e:29:f7:0b:74:b5:2b:57:d5:
92:41:de:9a:db:19:99:81:23:f8:9b:77:6c:30:4f:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:36:BC:FD:05:1C:92:50:71:6D:AE:3E:0C:C4:E9:C5:3F:67:71:40
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Pza8_QUcklBxba4-DMTpxT9ncUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
91:ca:af:65:1e:bf:6e:06:bb:9c:3c:ad:1c:18:84:f2:85:b4:
29:0f:33:7f:50:97:a3:d2:02:42:5c:bb:5b:87:47:c9:b6:82:
b7:20:a6:db:d8:d1:81:aa:30:b3:83:8c:1c:ed:e3:9f:a3:27:
f3:33:dc:40:1e:e2:ed:9c:99:b2:dc:12:c1:59:98:d0:20:e1:
bf:e8:6f:e2:25:39:68:86:26:82:1e:35:7c:47:17:3f:95:cf:
da:16:6a:cf:36:01:50:8f:6d:91:1e:eb:9d:e5:c0:84:ef:57:
0c:77:eb:a5:3f:a8:be:7b:b3:11:36:7d:5a:d7:9b:99:ae:2f:
b6:e8:bf:05:13:ff:3d:91:a3:74:a1:2d:e4:9f:91:4d:00:61:
e6:67:3d:d6:23:af:aa:e1:c0:27:8c:64:d3:dc:ee:3c:02:1b:
e1:a6:af:00:6e:9a:a2:15:fe:d9:a6:0d:65:9f:62:cd:0e:60:
2f:96:cf:62:e3:67:8c:96:e5:e0:d6:ca:55:6d:93:bd:91:c8:
89:0e:fc:f7:d2:54:6d:7e:57:b9:6a:91:a3:0b:b6:c9:e3:20:
52:fb:99:55:d1:b2:d7:6b:1c:f2:27:38:3a:5c:db:b9:1a:e0:
c2:81:91:3f:1b:d4:33:5e:34:c0:31:45:1b:61:29:75:95:be:
fa:45:4c:74
-----BEGIN CERTIFICATE-----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==
Generated at Sun Aug 4 05:18:50 2024 by rpki-client on console-fra.rpki-client.org