Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R2ffaBNjYeFmBAgqpWMhQsbmJfA.roa
File: R2ffaBNjYeFmBAgqpWMhQsbmJfA.roa (raw, json)
Hash identifier: nE2xM22Nn9Kgd2hPSUfkXLeOMFP5vPor506OLpUA+js=
Subject key identifier: 47:67:DF:68:13:63:61:E1:66:04:08:2A:A5:63:21:42:C6:E6:25:F0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913FA32EFDE7162241F77D5E9D030FDFD1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R2ffaBNjYeFmBAgqpWMhQsbmJfA.roa
Signing time: Sun 11 Aug 2024 04:12:24 +0000
ROA not before: Sun 11 Aug 2024 04:12:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 11 Aug 2024 05:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3f:a3:2e:fd:e7:16:22:41:f7:7d:5e:9d:03:0f:df:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 11 04:12:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4767df68136361e16604082aa5632142c6e625f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:f1:ac:bd:5a:99:53:f4:92:18:c2:ca:f4:
5b:13:da:88:ff:25:41:74:e2:dd:4c:f9:c3:ad:72:
3e:fd:4c:95:c5:03:73:10:74:bf:4f:28:fe:23:c8:
2f:f0:29:57:f5:45:62:ac:ba:d5:2e:4b:cc:9d:9b:
15:a8:c3:86:52:84:37:59:11:4f:4c:8c:0f:18:61:
8f:9c:4f:b3:6c:bc:c5:d2:c3:8e:9d:07:d0:2c:94:
6d:d1:ed:66:0f:01:35:50:11:b8:7d:62:a2:d3:e1:
93:c0:3a:5d:57:71:5b:3a:da:ae:5e:00:80:2b:f0:
4e:f1:1c:75:35:9a:b5:90:b0:b2:f4:36:56:15:8b:
9d:d0:4b:d8:60:d9:ff:c3:37:8d:65:91:37:c0:bc:
df:97:ee:ac:5b:21:16:1d:ab:98:ed:8d:b7:1a:70:
84:83:b0:2a:3d:05:83:4c:46:8e:9e:7c:53:45:2e:
b0:4d:21:d6:98:e5:06:92:d7:51:89:38:b1:af:8c:
a5:e2:60:04:28:db:31:03:cf:3f:03:99:3b:6f:3f:
45:8a:d4:68:57:69:e7:31:81:23:29:1c:dd:f7:0e:
40:ae:39:5b:f3:af:1d:bb:91:4c:55:31:7f:a5:4e:
b0:4f:11:03:65:80:e5:ae:f1:b6:32:e7:2b:66:b4:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:DF:68:13:63:61:E1:66:04:08:2A:A5:63:21:42:C6:E6:25:F0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R2ffaBNjYeFmBAgqpWMhQsbmJfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
6c:9d:58:1c:45:70:71:e0:7a:4b:24:7d:f8:b0:a3:4c:e9:34:
ef:ef:78:ae:1d:21:74:cc:bc:31:a5:ce:c8:a9:3f:57:5b:1e:
dc:25:d1:20:a8:e4:9e:46:e7:03:67:93:39:9d:e7:df:e6:28:
02:60:1f:07:5d:62:84:4b:15:8e:79:f4:a9:de:cf:6f:53:13:
86:37:47:4b:df:38:40:0c:7c:6a:6f:15:ff:55:fc:98:19:b9:
78:8e:c3:27:b1:8c:ba:13:38:b4:35:56:65:59:91:fc:6d:a4:
f0:ab:11:6e:d3:72:4f:e6:4a:0c:bb:05:04:d6:cf:1a:4a:a3:
0f:34:21:e0:42:4a:6c:34:85:2f:66:65:2f:04:da:da:b0:e6:
45:94:ac:64:be:b8:52:53:f4:0b:4c:90:23:bb:33:e1:bb:e7:
c2:7e:3a:d2:b2:cd:da:dd:30:25:81:a2:40:0e:14:0f:68:ce:
bd:73:5e:f9:8a:f8:71:5a:b9:44:90:b0:d6:2c:cd:ee:21:61:
d0:40:92:0a:b1:bd:c0:83:4a:66:76:4d:ae:0e:68:b2:88:a0:
af:54:c1:e6:34:37:7c:7b:dc:ae:f9:8d:78:3e:39:36:a1:ab:
1f:ab:fc:2c:18:06:6e:3b:0d:06:26:0a:4a:fb:66:60:2c:91:
d3:fb:42:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 11 07:07:41 2024 by rpki-client on console-fra.rpki-client.org