Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VBT5NlMf7KFD48SAPtWdng45kok.roa
File: VBT5NlMf7KFD48SAPtWdng45kok.roa (raw, json)
Hash identifier: PSQ6EUyhrBDdnMO+gv4HDGfRTxB5imjVSCMLG0uztPw=
Subject key identifier: 54:14:F9:36:53:1F:EC:A1:43:E3:C4:80:3E:D5:9D:9E:0E:39:92:89
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192AFD2703F402C4912F742B2CF075F4342
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VBT5NlMf7KFD48SAPtWdng45kok.roa
Signing time: Mon 21 Oct 2024 16:04:17 +0000
ROA not before: Mon 21 Oct 2024 16:04:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:afd2:5f80/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 21 Oct 2024 16:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:d2:70:3f:40:2c:49:12:f7:42:b2:cf:07:5f:43:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 21 16:04:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5414f936531feca143e3c4803ed59d9e0e399289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a7:73:3e:f1:43:f5:d8:a2:e5:be:f3:77:b6:
b5:1e:03:90:a6:25:7c:96:34:13:51:31:26:48:72:
76:fb:c6:e5:e5:09:d7:b0:80:6b:93:0c:28:0b:76:
68:54:39:60:d3:e5:15:fd:3e:41:fd:17:da:d8:93:
75:d9:21:20:dc:39:54:b8:71:72:9f:69:15:f3:45:
9e:8a:84:0d:ac:6b:e7:23:1f:f1:86:08:d0:7e:0d:
df:4e:db:fa:60:61:2a:50:31:bb:61:a9:cf:ce:4f:
a1:9d:e4:1b:22:7a:6b:44:98:7a:4a:38:d6:f9:c9:
47:1e:3d:8c:7e:bb:ae:6e:5b:31:0a:69:ca:d9:5b:
33:74:b9:60:58:61:68:5b:0a:04:69:fc:59:18:66:
e1:af:ac:db:a0:3b:5b:c8:d0:50:7b:95:10:7f:0a:
ae:80:d6:0b:7a:34:27:5b:29:c6:24:a6:2b:1d:26:
f8:be:34:98:55:6b:d4:6a:0e:e7:b4:95:b7:60:1e:
97:13:89:f8:0f:30:2c:5e:93:d3:02:43:80:93:50:
da:f7:9d:75:dd:0c:30:51:30:ea:1a:96:e7:e1:a6:
fa:b1:51:45:79:55:da:6a:08:87:2d:d2:c0:b9:04:
84:8a:43:28:5b:d7:a7:4b:c2:9f:e8:9c:b4:a0:9a:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:14:F9:36:53:1F:EC:A1:43:E3:C4:80:3E:D5:9D:9E:0E:39:92:89
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VBT5NlMf7KFD48SAPtWdng45kok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:afd2:5f80/128
Signature Algorithm: sha256WithRSAEncryption
89:94:37:e5:40:cb:ae:aa:f6:a5:ca:53:4f:7a:fc:1c:51:17:
f7:93:5f:a5:84:cf:2c:25:3c:b4:d3:84:fb:da:68:80:41:14:
3e:3b:c8:7f:34:ad:5c:28:57:bd:d2:8c:19:31:29:7c:24:68:
62:73:4d:9c:a5:a4:d6:cb:62:8c:bf:a8:d9:43:b1:2a:d3:09:
fb:61:42:41:ce:0e:75:68:d3:a6:0e:c2:85:91:21:ff:3f:21:
45:39:d2:3b:a8:3a:7a:a7:8e:e7:24:bf:00:86:92:7b:8b:65:
68:d3:17:ad:a3:86:e9:b0:c9:3d:10:f2:40:a6:b0:2f:96:92:
2f:de:3e:ce:1a:27:51:77:66:26:8b:ec:05:05:15:17:02:11:
ab:19:58:91:33:9e:b3:97:c3:d0:39:53:d1:b3:0f:66:fe:f8:
7e:ac:d2:6f:26:3a:ac:50:a3:e9:27:a6:ef:cf:38:0c:07:f8:
9a:c9:21:06:af:7c:d8:b6:cd:ec:7a:54:63:1a:43:37:90:3c:
ae:dc:b0:22:0e:f3:de:af:4c:69:4b:db:69:e3:37:83:6f:b7:
54:29:ef:b9:b7:4f:3f:e4:f5:40:8d:27:e5:c3:8f:ab:aa:77:
3e:b0:0b:22:b9:35:40:6e:3f:6b:13:1c:16:e4:49:28:de:50:
64:21:55:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 21 19:13:57 2024 by rpki-client on console-fra.rpki-client.org