Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UtlDNAHRaQuoReyRHgzTjmVR8jY.roa
File: UtlDNAHRaQuoReyRHgzTjmVR8jY.roa (raw, json)
Hash identifier: DEZktqKClQ7w0+M2LLK3Hc/mZmwRyUE5Gh+51nyDYLk=
Subject key identifier: 52:D9:43:34:01:D1:69:0B:A8:45:EC:91:1E:0C:D3:8E:65:51:F2:36
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191CEC2D34A8EB8FC306F7765F3698A157A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UtlDNAHRaQuoReyRHgzTjmVR8jY.roa
Signing time: Sat 07 Sep 2024 23:12:40 +0000
ROA not before: Sat 07 Sep 2024 23:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 08 Sep 2024 00:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ce:c2:d3:4a:8e:b8:fc:30:6f:77:65:f3:69:8a:15:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 7 23:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52d9433401d1690ba845ec911e0cd38e6551f236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:03:db:3d:51:7e:dc:a5:2c:b6:ad:cd:7f:
b1:3d:90:34:db:30:50:31:98:91:1d:45:00:e7:4c:
3f:91:9f:98:7c:e4:48:c6:ac:76:c8:a6:81:06:03:
bc:a8:c6:7f:fc:f0:ea:25:6f:58:93:19:9f:cb:71:
18:55:33:3c:eb:a7:d8:ab:c2:a6:62:44:44:04:0e:
59:3f:dc:98:7c:10:2d:6c:86:f5:10:b1:02:19:5b:
aa:b3:dd:b3:fd:38:54:84:52:df:cd:5e:a8:bb:09:
eb:98:c0:5d:67:0e:ef:50:7f:c7:54:01:6d:d2:70:
4d:d3:e9:0e:34:c4:d5:7b:a0:e5:b8:8e:85:e6:fe:
b0:ea:78:9c:6f:eb:66:1d:e6:bc:e8:4c:ba:fe:55:
ca:0b:ef:61:b3:5f:ad:de:a7:98:e0:9d:3b:97:9f:
4c:e3:9b:f5:b1:30:cb:c9:da:22:d1:b6:2d:1e:67:
6e:85:89:e6:a2:90:d5:ba:61:18:70:f3:05:4f:f6:
90:0e:67:2a:3d:8a:82:9b:3a:d6:d1:4f:61:da:87:
4e:af:de:0c:7c:09:19:9a:f7:d7:3f:3f:ca:67:7c:
cb:a9:65:5b:4d:42:ad:16:85:30:24:e1:7a:b2:61:
2e:0f:97:af:2b:78:4e:a6:54:35:b1:1e:5d:6e:d8:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:43:34:01:D1:69:0B:A8:45:EC:91:1E:0C:D3:8E:65:51:F2:36
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UtlDNAHRaQuoReyRHgzTjmVR8jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
03:e5:f8:54:b4:3f:6c:b7:8b:de:cd:a1:bd:d4:46:74:3e:73:
77:b5:4d:62:17:a1:61:a6:33:ec:e7:5b:6e:96:4a:c9:d0:10:
5a:44:fc:d3:93:f3:b5:5f:f1:a0:b8:a6:79:1e:16:e1:04:87:
68:ec:35:35:34:13:d8:ce:ad:08:36:45:08:e1:a7:9b:d4:7a:
e3:31:ab:ae:b0:47:6d:01:25:b9:c9:41:07:ab:0a:0a:99:3a:
df:48:2b:ed:10:5c:f1:08:e8:fe:18:2b:2b:27:10:e7:04:08:
19:39:a8:c7:5e:ac:33:13:e9:4b:f0:72:fb:22:4a:03:3a:06:
72:92:db:12:c1:be:18:a9:8d:e5:7a:42:54:35:fc:2c:8a:90:
ff:42:9d:22:57:4b:30:17:80:6e:1f:a5:97:f5:db:c8:c4:af:
2f:30:5e:bc:ff:0a:94:08:11:3f:be:8b:24:b4:fe:c7:d5:39:
b0:fb:0e:06:45:6b:a8:b8:8d:5d:31:06:04:a2:44:d9:6f:41:
b7:c3:79:fb:30:5a:bf:93:6b:71:fc:ff:cf:a2:0d:23:dd:1c:
81:61:28:0c:c2:0a:2e:4d:de:1f:bd:9d:e6:ff:df:0f:ee:21:
29:63:36:20:bc:f5:eb:a1:ba:39:1e:40:78:d5:ec:74:23:49:
97:9f:78:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:39 2025 by rpki-client