Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SU6OyO3DTe6oEmgpL7luNxsLDGc.roa
File: SU6OyO3DTe6oEmgpL7luNxsLDGc.roa (raw, json)
Hash identifier: SmKInMhZBV1vQMuOYS6lLgGLXvdOqLZGwweZwXvImXc=
Subject key identifier: 49:4E:8E:C8:ED:C3:4D:EE:A8:12:68:29:2F:B9:6E:37:1B:0B:0C:67
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01912798B488F45A23125894FF721B0D5201
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SU6OyO3DTe6oEmgpL7luNxsLDGc.roa
Signing time: Tue 06 Aug 2024 12:10:04 +0000
ROA not before: Tue 06 Aug 2024 12:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 06 Aug 2024 13:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:98:b4:88:f4:5a:23:12:58:94:ff:72:1b:0d:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 6 12:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=494e8ec8edc34deea81268292fb96e371b0b0c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:10:b5:0f:86:35:59:a2:9d:de:41:35:19:
56:a1:2a:07:ee:89:9b:5f:cc:60:1f:c8:ba:64:ca:
e1:83:d2:62:06:65:72:54:bc:fa:47:65:d1:cf:b6:
04:b0:0f:35:08:d4:95:89:28:80:03:db:e4:6c:60:
f9:ac:a2:80:d7:1f:3b:ef:2a:59:ab:be:77:69:fd:
5d:5f:6d:a0:42:dd:26:d4:35:12:fe:c8:b0:16:ca:
a2:3d:4f:6b:93:fe:2a:10:1e:27:83:71:f0:f6:b5:
7f:ef:5a:c7:e4:4e:8b:20:08:13:02:b3:c0:07:f0:
73:8a:99:bb:f8:0d:c1:fa:0e:04:de:65:67:68:61:
0b:9b:d0:3a:43:1b:ae:5d:0f:6a:17:72:b9:9c:a6:
ca:27:72:37:dd:76:30:c3:69:da:76:dc:b0:e5:31:
b8:0a:9a:30:69:ed:22:31:1d:99:96:5d:fc:9a:23:
82:9d:f2:1a:09:ae:2e:ce:76:fb:bf:8f:83:6d:6c:
e6:1e:7b:7d:90:64:17:bf:bb:e0:48:12:04:d2:cd:
a9:b7:27:5d:ce:75:3d:42:96:fb:dc:0f:85:63:92:
17:a9:d2:b5:f9:c9:6d:b3:18:8f:dc:01:77:c5:33:
39:e9:e8:99:e3:59:aa:28:06:fb:bf:0a:73:f3:f6:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4E:8E:C8:ED:C3:4D:EE:A8:12:68:29:2F:B9:6E:37:1B:0B:0C:67
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SU6OyO3DTe6oEmgpL7luNxsLDGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
60:c7:73:7d:04:bb:32:cd:59:a6:d5:b6:40:a6:b6:d3:80:46:
49:9a:00:f1:7f:3a:92:50:f5:52:04:15:b5:a9:8e:27:c2:8c:
54:a4:32:44:ba:39:cf:3c:ca:0e:bc:1f:8a:b9:97:d4:f1:41:
20:d9:ff:39:d3:5d:6b:db:78:ff:6c:0a:96:cc:97:b8:f1:43:
26:6f:14:26:66:e0:8c:e1:42:7d:e2:66:5e:4a:24:51:85:39:
83:e1:39:48:00:78:af:b5:a8:06:6a:11:80:a1:19:14:2f:7d:
69:43:02:65:13:6a:d3:4e:3d:f4:6f:77:1a:8f:23:c5:92:e8:
19:fe:c8:e7:0a:58:65:b5:18:64:28:83:fc:47:db:0f:bc:ef:
cc:98:42:e9:2e:9c:1f:d8:64:fd:16:88:b0:76:d3:23:75:2a:
a0:f4:45:56:dc:5b:72:99:44:4f:16:57:85:ad:69:73:b3:9c:
ed:12:12:01:bd:12:95:f1:71:48:f3:04:87:0e:25:1f:d6:c2:
b9:7a:72:88:8d:06:84:e1:18:f4:c3:8a:db:14:8f:d2:ce:8a:
53:f0:c1:75:31:3f:c8:6a:49:72:16:d5:7d:9b:26:fa:8d:ea:
2b:8e:ce:39:cf:cd:4c:a3:1c:4e:81:d0:4c:6f:96:5d:04:ac:
a2:c5:41:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:12:44 2025 by rpki-client