Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TIzkuyW9z-Fbs1qM-VxGrMzxdGo.roa
File: TIzkuyW9z-Fbs1qM-VxGrMzxdGo.roa (raw, json)
Hash identifier: gDVdrJWj8RhwkYc2TQ9PwcgP8TrxIai8SAI/6BfjhHE=
Subject key identifier: 4C:8C:E4:BB:25:BD:CF:E1:5B:B3:5A:8C:F9:5C:46:AC:CC:F1:74:6A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191BB051422FBFB442E5D1340061C5E6D5C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TIzkuyW9z-Fbs1qM-VxGrMzxdGo.roa
Signing time: Wed 04 Sep 2024 03:12:37 +0000
ROA not before: Wed 04 Sep 2024 03:12:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 04 Sep 2024 04:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:05:14:22:fb:fb:44:2e:5d:13:40:06:1c:5e:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 4 03:12:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c8ce4bb25bdcfe15bb35a8cf95c46acccf1746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:96:a8:b4:4d:3f:a0:4e:56:3f:1e:56:f3:
0a:10:ee:ab:b4:a1:0d:8c:1d:50:d1:93:d1:d8:bf:
85:b9:36:20:1a:68:f3:e3:56:55:65:ba:80:0a:b8:
41:87:b3:d5:71:5d:23:4c:03:14:46:c9:45:71:06:
12:30:f2:ac:aa:84:36:ce:8f:40:2f:9e:d0:b9:83:
b7:c5:49:04:ba:0b:c4:98:28:c0:9a:1c:29:4b:4c:
50:e6:0d:08:3a:de:0d:14:09:e6:6c:7e:03:e8:32:
90:68:2f:4c:20:75:07:ce:44:86:2c:f3:e4:88:d7:
5f:35:72:68:36:cd:c1:ad:4d:bd:ca:8a:06:ae:39:
7e:4a:78:ee:96:eb:e4:69:ec:cc:45:a3:8d:fd:8e:
9c:12:be:c3:22:ef:fc:78:9c:16:89:2f:35:db:56:
02:52:a7:16:51:d6:39:e5:73:7e:9e:b7:e8:70:50:
e0:df:b3:ef:37:08:9d:3d:f5:ad:9f:fa:84:b8:9f:
5b:6b:bd:d1:25:ca:62:d7:a6:b0:69:d2:38:67:06:
74:43:34:19:22:fc:66:f4:a4:3b:5e:2b:67:1c:e7:
1e:bb:6b:40:36:f0:ec:c1:8e:3a:76:3e:38:36:20:
20:f7:0c:26:ee:0d:29:3b:9a:8f:f7:88:79:e8:66:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8C:E4:BB:25:BD:CF:E1:5B:B3:5A:8C:F9:5C:46:AC:CC:F1:74:6A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TIzkuyW9z-Fbs1qM-VxGrMzxdGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
50:ce:dc:a7:95:09:89:29:1f:c6:bd:cc:3d:76:d3:8f:29:d3:
ec:1a:4f:d8:e0:34:c5:c8:17:85:7a:5d:99:0e:d0:cc:04:14:
0d:f6:e7:68:68:03:9b:8e:ab:bb:6e:d3:b9:87:b4:cf:8e:99:
91:e3:72:9f:28:ed:e5:85:36:45:b1:a6:80:e5:f0:b3:93:f4:
d1:27:f5:d6:64:9d:46:79:68:07:a5:0a:80:a9:31:6a:64:00:
1b:42:40:ca:41:c4:88:6f:74:d1:45:ec:7a:b7:da:3e:0a:1c:
10:be:8f:ab:1f:74:40:25:2f:b9:7e:4c:1f:b4:f6:23:3a:ff:
55:a2:28:5f:4a:d8:90:b2:fd:a6:65:f4:ee:d5:6e:c0:0d:99:
52:64:0b:05:ce:69:3a:e1:61:57:90:27:a2:e5:6e:6c:b5:5b:
7f:34:aa:14:2e:e0:e2:8f:10:2a:8f:50:41:44:0f:4f:b4:da:
90:6c:ce:ea:e7:54:fa:7d:17:95:a9:a9:f6:86:12:1c:10:86:
86:e4:34:00:2d:9c:ee:73:86:12:c0:56:2f:bf:fd:22:0d:15:
28:79:1e:05:51:ff:78:ed:48:b9:68:dd:54:11:4e:1e:0c:d2:
59:2f:35:50:db:71:cf:2b:34:c0:a0:17:f8:27:94:45:7f:1d:
4c:28:de:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 4 06:04:20 2024 by rpki-client on console-fra.rpki-client.org