Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rzfz2Lq2cWqi6sNCLq6UPQi4dUo.roa
File: Rzfz2Lq2cWqi6sNCLq6UPQi4dUo.roa (raw, json)
Hash identifier: IJKjMrKrs31vZ0Ita2PM6gvc9llkasuG+gK1hv3EOvQ=
Subject key identifier: 47:37:F3:D8:BA:B6:71:6A:A2:EA:C3:42:2E:AE:94:3D:08:B8:75:4A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191DEDAD3F19CE3B40784389ABC7247EC9E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rzfz2Lq2cWqi6sNCLq6UPQi4dUo.roa
Signing time: Wed 11 Sep 2024 02:12:48 +0000
ROA not before: Wed 11 Sep 2024 02:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128
2001:67c:64:ffff:0:191:d82c:371b/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 11 Sep 2024 03:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:de:da:d3:f1:9c:e3:b4:07:84:38:9a:bc:72:47:ec:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 11 02:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4737f3d8bab6716aa2eac3422eae943d08b8754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:da:7a:05:9d:e9:d3:52:48:54:d4:8f:a2:
9f:3b:39:f5:e4:fd:b8:cf:90:2d:0f:d3:70:35:25:
07:83:71:f5:3b:52:7b:aa:a7:83:f0:f0:fd:15:fc:
aa:5f:5d:a6:cf:9b:91:81:6e:d7:5f:5b:d9:5a:b4:
fc:d8:b6:5b:65:e4:db:ac:97:ba:0c:4b:e9:2a:25:
e4:77:08:bc:c3:4c:6f:f0:ed:26:01:4d:be:1b:3c:
29:f5:2e:e1:82:fe:22:3a:4f:09:c0:4b:14:a6:03:
fc:1f:e2:7c:74:30:82:9b:fe:3e:d9:b3:07:2d:da:
0c:62:1a:13:6e:79:6e:3e:f2:a3:91:37:27:cf:86:
34:1f:f7:6a:a4:67:d8:32:99:99:e3:14:cf:30:41:
0a:4c:f9:8f:ff:08:c4:68:29:e1:9f:66:0f:b8:4a:
4e:e1:38:c6:9b:f0:a6:eb:a4:cd:da:b6:37:ba:05:
07:bf:8c:b8:19:38:fc:c1:fb:98:cf:9f:bb:e0:31:
cb:83:2c:df:cc:91:c6:c8:e3:1c:6b:fa:a6:fe:f4:
8a:1c:20:6d:60:20:fd:ac:8e:10:90:dd:e3:a1:a1:
bc:17:98:1f:78:50:ad:06:a3:cf:86:92:55:cb:ad:
95:18:0b:43:2c:5b:0b:a3:93:e0:ea:4f:97:e0:64:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:37:F3:D8:BA:B6:71:6A:A2:EA:C3:42:2E:AE:94:3D:08:B8:75:4A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rzfz2Lq2cWqi6sNCLq6UPQi4dUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:d606:d79c/128
2001:67c:64:ffff:0:191:d82c:371b/128
Signature Algorithm: sha256WithRSAEncryption
90:0f:29:2b:0a:72:95:6f:12:da:41:38:ea:45:2f:4e:9d:0e:
4f:cf:a2:58:b6:10:9d:3f:64:5b:49:81:2f:5f:6c:4e:73:a0:
18:34:37:1d:cb:67:da:fc:b9:22:42:b6:81:2b:ab:e9:6c:6c:
c6:a8:5f:31:69:60:6a:10:cc:05:64:f1:63:d7:94:e2:04:af:
68:85:23:a6:c1:ff:e9:a2:40:90:20:bc:d2:40:48:0d:3f:b5:
59:69:0c:0d:7f:eb:ec:cb:34:19:07:6e:39:2d:ba:6e:0c:12:
6b:05:68:21:2c:a9:d4:c7:90:e4:cd:46:99:97:87:dd:3c:a6:
3f:57:4d:6b:c0:fc:2e:95:82:9f:0e:22:01:c6:b7:34:7c:59:
ba:94:9a:a2:f9:e4:ee:61:c0:1b:fb:2d:de:53:16:c3:fb:6b:
c8:19:3b:3b:66:26:c4:e4:e6:78:3b:6d:94:c8:53:3d:bb:ed:
08:fb:2d:d3:f2:08:66:cd:a2:cc:6e:67:89:71:a9:60:00:98:
43:d5:60:78:99:05:89:c2:8c:59:69:a9:f2:a0:1a:19:a3:97:
fa:72:89:d5:c2:2c:3a:0d:78:25:f2:28:59:40:52:34:31:a1:
80:b6:8c:eb:9e:1f:9c:b9:55:2f:ed:7a:78:a0:c7:15:cd:91:
66:d3:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:41 2025 by rpki-client