Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/V_s8JlAeiqV3uYgJyIZjLWqT8OE.roa
File: V_s8JlAeiqV3uYgJyIZjLWqT8OE.roa (raw, json)
Hash identifier: 43o3LAJYIhWEuntJsH5wmfExOb7fcXZN/d4PhwwtPuc=
Subject key identifier: 57:FB:3C:26:50:1E:8A:A5:77:B9:88:09:C8:86:63:2D:6A:93:F0:E1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D4F9BE0701472233DA31BD043D741BED
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/V_s8JlAeiqV3uYgJyIZjLWqT8OE.roa
Signing time: Mon 09 Sep 2024 04:10:22 +0000
ROA not before: Mon 09 Sep 2024 04:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 09 Sep 2024 05:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d4:f9:be:07:01:47:22:33:da:31:bd:04:3d:74:1b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 9 04:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57fb3c26501e8aa577b98809c886632d6a93f0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:a4:66:6d:d7:45:44:60:43:42:80:90:ea:
74:52:3b:b2:fe:be:3b:fd:35:ae:73:e5:ad:49:71:
0b:4d:70:70:35:af:c2:fa:d9:95:79:13:06:98:ed:
49:63:2d:6b:06:36:ed:f5:95:bc:83:24:40:ed:f7:
80:79:26:e2:70:aa:56:f8:8d:66:34:77:bd:b0:1f:
de:e7:97:50:ec:9f:09:0d:4e:92:07:b8:9d:c1:f2:
5d:68:28:c9:10:67:67:11:05:d6:d9:9d:cc:fb:e2:
4a:e3:df:2b:90:3d:8f:e6:9a:9b:f8:20:bf:85:e1:
88:89:57:fa:2b:01:9d:6b:a2:3a:5d:e9:ac:d5:0d:
03:47:47:28:43:dd:ba:51:59:64:f5:f5:af:8c:90:
73:83:8d:1f:ae:20:f4:1c:9e:9e:db:0c:b0:7c:4d:
79:6b:7a:eb:66:fd:87:2e:cb:cf:51:d3:03:f4:13:
31:85:95:16:fe:ac:88:00:ca:42:b5:f6:41:e8:6a:
a8:39:84:c6:8b:f7:e7:09:f4:dc:3e:73:20:c1:ba:
65:49:8e:b4:91:ba:ce:7e:89:ff:17:84:36:33:02:
53:66:e1:48:11:9d:66:d1:ec:e2:64:5a:f0:3d:cb:
e4:77:c0:09:c3:3d:0f:ab:51:c6:b2:54:07:28:c9:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FB:3C:26:50:1E:8A:A5:77:B9:88:09:C8:86:63:2D:6A:93:F0:E1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/V_s8JlAeiqV3uYgJyIZjLWqT8OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
56:f1:e7:08:7f:f1:69:f7:c0:41:ca:21:57:3b:21:57:7b:c1:
43:23:05:40:12:3a:ef:a7:5f:04:07:51:5c:0a:34:a6:7e:81:
f7:dc:06:f7:e5:33:7d:2c:01:3e:61:bb:49:bc:17:cf:5b:bb:
48:51:94:7d:13:36:16:8b:38:a5:32:62:75:33:79:ac:f0:fa:
c8:6d:81:e5:44:9f:d1:5c:b0:3d:8a:00:49:c8:6b:df:35:c4:
c5:81:88:bd:e9:54:0f:22:0b:af:a3:f4:b0:2c:9b:bd:10:e1:
19:77:8f:5f:cc:83:38:64:fb:b5:0e:6c:bb:71:3d:bc:74:61:
c6:44:f9:a0:a0:48:a8:8b:74:b1:de:25:fd:19:b1:3a:1f:22:
64:b8:f3:3d:09:5b:1e:dc:5c:93:a5:c2:8d:0a:ec:37:2a:a5:
40:ba:3d:8a:b6:56:42:d4:cd:25:32:f8:92:ec:01:f3:90:47:
6f:95:96:cb:05:1a:98:a9:52:ff:c1:dd:8b:af:52:40:49:1e:
87:1d:21:f5:17:e4:02:7d:f9:14:4e:3a:81:c9:f3:18:c0:2c:
d2:84:74:47:34:bf:44:30:da:6c:56:39:6b:7e:c6:20:07:73:
1b:76:eb:52:b7:82:9d:16:d1:9e:f9:1c:93:c6:cc:9c:a4:29:
37:d3:56:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:45 2025 by rpki-client