Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xic4Zs2OazPO8GHpDURnB9ekk2s.roa
File: Xic4Zs2OazPO8GHpDURnB9ekk2s.roa (raw, json)
Hash identifier: 4d2uBSEkpSUsojrva6vnv9ni6lsL+OKnIZ3YGEtOe6g=
Subject key identifier: 5E:27:38:66:CD:8E:6B:33:CE:F0:61:E9:0D:44:67:07:D7:A4:93:6B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D9B38DB6BE4038D67E8BC91B021169E9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xic4Zs2OazPO8GHpDURnB9ekk2s.roa
Signing time: Tue 10 Sep 2024 02:11:48 +0000
ROA not before: Tue 10 Sep 2024 02:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128
2001:67c:64:ffff:0:191:d82c:371b/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 10 Sep 2024 03:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d9:b3:8d:b6:be:40:38:d6:7e:8b:c9:1b:02:11:69:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 10 02:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e273866cd8e6b33cef061e90d446707d7a4936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:85:e5:d1:e2:7e:3d:20:32:35:99:6e:69:
0a:9d:32:c3:0d:fc:ba:30:6a:b8:95:92:7a:96:35:
01:48:08:35:b1:13:0e:36:6b:f6:1a:e2:6e:9b:e3:
75:e6:ec:aa:69:5e:73:35:35:90:7c:8a:ee:38:10:
d6:87:e5:97:07:da:97:7c:1d:6d:e8:28:03:38:2b:
8b:62:51:11:c0:48:32:60:20:74:11:70:87:2e:a8:
38:42:95:ea:28:95:f8:80:7b:93:10:f2:68:7c:6d:
d2:e5:98:24:4d:ee:03:b2:8d:dd:17:73:02:4b:19:
f6:fe:21:9f:99:15:f3:b9:d0:2d:ed:11:84:1f:fb:
44:0d:1c:61:6e:07:80:46:3e:35:35:27:1f:18:9f:
70:71:e3:08:d7:bf:d7:a9:78:f0:37:52:29:83:72:
fc:e8:c7:38:a9:12:d2:e7:aa:a5:7d:fb:dd:a1:4d:
a8:15:26:3c:71:00:95:a9:bc:6a:4e:01:ae:71:56:
e3:23:14:38:a0:fe:71:c5:eb:6e:4f:29:67:bf:5c:
88:35:6e:13:a2:71:4b:bb:e6:1a:46:a6:d0:71:2e:
1d:a4:68:48:1f:8f:18:0a:ea:9b:78:b7:c3:fd:62:
06:fb:7e:07:f4:d4:95:c0:fb:39:1b:7c:50:5f:db:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:38:66:CD:8E:6B:33:CE:F0:61:E9:0D:44:67:07:D7:A4:93:6B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xic4Zs2OazPO8GHpDURnB9ekk2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:d606:d79c/128
2001:67c:64:ffff:0:191:d82c:371b/128
Signature Algorithm: sha256WithRSAEncryption
3a:4e:82:05:3e:f0:a5:ab:f6:37:8d:f6:4a:b4:38:2a:8e:41:
51:f3:90:8a:40:64:03:5f:95:8b:a1:97:63:6a:9c:15:9b:a9:
23:c2:b6:83:d0:0b:93:bb:42:56:71:59:5f:eb:ad:5d:2a:e5:
3d:e5:14:34:28:d8:8a:88:50:7a:10:0f:8d:ac:82:77:ed:51:
6e:96:67:3e:59:d6:47:ef:d2:42:da:85:ef:b8:af:f2:b8:28:
c7:28:3b:ac:55:57:ba:8d:ee:cc:99:1d:02:af:03:2c:97:5f:
e1:6a:04:9b:6d:42:51:19:de:6a:2f:8a:aa:86:0d:0f:86:24:
63:94:ec:c6:91:f3:79:f4:c1:9f:0d:8b:49:1a:ff:6e:8d:9e:
10:82:76:57:0a:de:63:c5:a5:fe:6d:87:1e:7a:95:88:73:e9:
55:ae:ac:ec:4a:96:1f:0b:d7:70:8c:e7:e8:5a:f1:ff:0a:78:
64:f4:63:10:e5:ce:c9:97:f2:97:4d:52:07:5e:6c:a8:6f:45:
de:7e:a6:32:91:1a:33:35:ab:01:31:e7:1d:7c:bb:1c:1d:0d:
ef:9d:ed:50:48:46:26:a6:06:a5:fb:5f:aa:d4:da:ed:a0:5b:
ce:fd:e4:2d:99:47:54:41:32:d1:b8:79:fd:93:d0:99:86:a0:
2b:33:91:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:54 2025 by rpki-client