Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RQEZgFUE8tiuyoQ4gJ_Vf6SVmsE.roa
File: RQEZgFUE8tiuyoQ4gJ_Vf6SVmsE.roa (raw, json)
Hash identifier: D1MemAdTja1CYZcnC1Pfi4CST2TWzXsPwP3s+2Hry3w=
Subject key identifier: 45:01:19:80:55:04:F2:D8:AE:CA:84:38:80:9F:D5:7F:A4:95:9A:C1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019168656AF774B7DF318C0443E0D7E6883E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RQEZgFUE8tiuyoQ4gJ_Vf6SVmsE.roa
Signing time: Mon 19 Aug 2024 02:09:22 +0000
ROA not before: Mon 19 Aug 2024 02:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 19 Aug 2024 03:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:68:65:6a:f7:74:b7:df:31:8c:04:43:e0:d7:e6:88:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 19 02:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=450119805504f2d8aeca8438809fd57fa4959ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:52:4a:d5:14:b3:41:8b:83:ce:29:36:13:
a4:2e:60:7b:b3:ad:b6:52:89:ea:fd:1a:48:b6:a5:
eb:63:20:42:30:ec:8e:d7:ac:c1:c4:48:58:6b:75:
d0:2f:2d:9c:fb:a2:1e:f4:bd:ba:83:20:c0:8a:16:
cc:18:f9:2d:3a:3d:8b:be:00:7c:3a:a2:2f:0d:0e:
35:f2:c3:59:e4:89:95:d6:51:56:b1:b2:f8:08:ec:
1e:50:c6:e9:ce:39:36:7d:45:ab:31:af:f1:c3:ac:
ef:22:d1:da:aa:e5:1b:09:e3:0b:be:d5:14:4a:e1:
e2:8c:9d:bf:8c:fd:d5:7b:b1:0e:ae:7c:3a:a8:39:
1c:68:d1:84:04:fc:46:66:17:22:db:79:3b:8f:cb:
ba:71:ad:73:da:6e:e4:de:8b:cd:a7:fa:cd:0e:d0:
e1:20:fc:b8:3b:77:84:a5:64:35:2c:e8:31:1e:28:
cc:52:c2:70:f2:c5:94:1e:8f:13:b2:8f:0d:ad:85:
63:ea:72:68:0b:58:49:44:5e:59:c4:22:86:67:84:
7c:93:2a:55:cd:2e:00:5f:66:68:aa:06:36:1d:bc:
14:9b:0d:87:a2:af:4d:34:68:93:84:d4:97:39:fa:
9d:98:03:ef:d1:35:93:29:39:85:ac:9f:f0:2b:2f:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:01:19:80:55:04:F2:D8:AE:CA:84:38:80:9F:D5:7F:A4:95:9A:C1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RQEZgFUE8tiuyoQ4gJ_Vf6SVmsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
83:49:42:9e:7b:68:87:26:bb:c6:01:5b:c1:d3:60:c8:a7:f7:
e6:fc:54:4d:65:f8:f4:b0:5a:cc:a6:2e:b1:da:1c:a7:1a:5a:
d5:ed:eb:b2:0f:39:8a:9d:9e:33:0c:2e:cd:d6:49:71:70:b9:
12:f8:a7:86:60:6f:9f:76:98:e9:f8:5d:8e:46:29:e1:4a:1b:
74:2c:86:8b:cb:a0:98:5d:96:ed:56:9e:92:23:5e:a5:c4:92:
89:7a:6b:d3:8e:e1:19:8d:7a:62:17:89:f4:ae:fa:26:23:57:
e5:9a:6d:b3:67:f5:61:4e:b8:39:31:6a:3d:82:08:a4:b8:46:
24:db:20:c8:90:1a:32:12:5c:63:45:a1:69:07:19:41:51:52:
f4:20:8f:5b:14:ca:f7:6c:87:c8:26:4a:a2:dc:fb:e7:56:a5:
f4:2e:4c:71:b7:da:1d:19:f9:eb:14:8a:40:ce:ce:ab:b6:fe:
ca:af:f7:c2:23:0c:b6:4e:b2:31:c8:6b:3c:97:e3:0d:81:3a:
ff:64:11:11:83:ce:1e:47:92:6b:88:b5:9f:dc:ff:9c:2b:5b:
fa:97:ea:ce:dc:fb:71:4d:8f:0e:1e:22:e5:52:dc:82:a2:68:
22:b5:09:57:97:d5:94:18:f8:cd:e8:6a:08:49:8d:0c:04:1e:
80:de:2a:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 19 07:21:24 2024 by rpki-client on console-ams.rpki-client.org