Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TB6r1PLgvOZYGSSwP7cb3Td6y34.roa
File: TB6r1PLgvOZYGSSwP7cb3Td6y34.roa (raw, json)
Hash identifier: TU7FWyW4HdSOIJVXwWH0LRQGhuegdI1bQ78EHzx4CAE=
Subject key identifier: 4C:1E:AB:D4:F2:E0:BC:E6:58:19:24:B0:3F:B7:1B:DD:37:7A:CB:7E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191407C2A1172E47EEC3BAE8849DCDF6AA6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TB6r1PLgvOZYGSSwP7cb3Td6y34.roa
Signing time: Sun 11 Aug 2024 08:09:24 +0000
ROA not before: Sun 11 Aug 2024 08:09:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 11 Aug 2024 09:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:40:7c:2a:11:72:e4:7e:ec:3b:ae:88:49:dc:df:6a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 11 08:09:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c1eabd4f2e0bce6581924b03fb71bdd377acb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8a:bd:6e:af:40:05:73:dd:77:97:84:b8:29:
10:f6:2f:3c:15:e0:10:57:ec:4f:9b:d1:5b:d4:c9:
4a:d8:8b:09:b8:56:08:64:67:99:56:18:c6:09:a7:
f4:8a:fd:df:7e:95:9c:6f:2f:82:45:08:dd:20:ce:
3a:49:62:87:71:e0:fb:eb:29:36:cb:72:fc:13:b9:
b8:bd:b9:d5:f4:7d:69:ca:55:a8:68:29:4b:91:ab:
5f:1f:ae:b4:5d:46:36:e9:bb:93:40:2b:20:98:ee:
68:4c:fa:d9:d3:e1:ff:42:82:ed:f8:bb:dd:50:a5:
9a:b1:e7:7d:ad:4b:0b:09:c4:09:83:a0:9d:42:95:
f4:c5:60:e5:89:c2:e8:00:91:95:f0:05:92:05:33:
04:34:60:85:5b:77:47:d6:4d:74:41:f4:44:0e:65:
ae:a8:42:b8:9f:d1:24:22:7f:3c:d4:b2:0f:47:64:
9a:1a:a6:24:cc:bb:95:fb:0d:1f:f7:3c:d7:9d:69:
13:16:26:57:aa:44:d9:53:d5:c0:7d:af:b4:3f:f3:
cc:8f:b7:2a:3d:f4:61:a2:95:4b:77:6c:06:06:2f:
fd:41:3c:ba:65:6b:ee:22:32:ef:fb:50:80:b9:79:
b2:16:82:11:0b:f9:c1:b5:19:59:43:86:4b:91:0d:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1E:AB:D4:F2:E0:BC:E6:58:19:24:B0:3F:B7:1B:DD:37:7A:CB:7E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TB6r1PLgvOZYGSSwP7cb3Td6y34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
96:bc:ab:a6:51:a3:41:89:b6:90:46:06:6b:6b:05:03:21:1e:
cb:bb:e8:b2:2f:44:98:b8:6b:6f:e2:1b:f1:1c:63:3e:f7:49:
88:7f:36:31:f9:b6:f1:15:3e:67:a2:bb:43:af:cf:b1:e6:9f:
21:d3:98:15:f7:2f:65:b8:24:cb:38:a1:d3:a0:35:84:1e:66:
bb:0d:36:f7:7a:8a:a0:76:4e:84:1d:f4:06:2c:42:d0:76:da:
a5:f5:4a:77:55:79:5c:71:bd:7d:cb:e0:34:74:b2:b1:3e:36:
c7:73:2c:8e:be:22:e0:92:8f:72:53:42:7b:9c:94:4a:54:3c:
93:fb:6c:5a:f5:cd:c7:47:8e:6a:53:88:61:f9:9b:cb:df:f0:
52:79:f5:1e:3c:65:ca:71:65:e8:19:2e:d6:1e:ce:de:36:88:
e7:e0:2f:f2:6e:72:a8:f2:d7:ca:b3:12:f8:d2:68:43:93:9d:
56:fb:35:a5:ea:cd:24:54:b8:93:2b:b3:5b:69:82:fa:9b:99:
61:a1:f4:cb:bd:7a:e9:17:a2:42:11:50:0a:73:83:70:a7:2a:
04:7f:ab:6c:90:97:57:f4:2e:84:52:45:13:00:d2:7b:e3:b6:
16:77:d0:0d:22:02:cf:99:1d:b7:05:7b:a2:7b:4f:4f:a0:50:
ef:4d:44:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 11 12:33:45 2024 by rpki-client on console-ams.rpki-client.org