Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YJyQfj_6UdAy1dm2KSk_sjxdEfM.roa
File: YJyQfj_6UdAy1dm2KSk_sjxdEfM.roa (raw, json)
Hash identifier: kW2O/rlKQkGtmFZzy+cIJ3XBGuFpSSR28OEf5/u0Q9g=
Subject key identifier: 60:9C:90:7E:3F:FA:51:D0:32:D5:D9:B6:29:29:3F:B2:3C:5D:11:F3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191738EC8355DC73791D2E0E039518D59F9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YJyQfj_6UdAy1dm2KSk_sjxdEfM.roa
Signing time: Wed 21 Aug 2024 06:10:22 +0000
ROA not before: Wed 21 Aug 2024 06:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 Aug 2024 07:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:8e:c8:35:5d:c7:37:91:d2:e0:e0:39:51:8d:59:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 21 06:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=609c907e3ffa51d032d5d9b629293fb23c5d11f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:28:ca:21:e4:bc:15:3f:52:77:73:5b:17:
06:8e:35:4c:ef:93:bc:94:db:1e:d4:5e:96:d5:2f:
44:28:25:32:e4:a3:36:88:f5:22:e4:6a:50:38:38:
3e:ee:96:9b:e8:63:cf:da:30:73:e3:f2:34:5c:ea:
7f:11:b1:2b:ca:cb:ef:40:d8:85:76:15:2b:3e:c0:
02:4d:80:d6:a0:ef:60:bc:98:5f:e7:12:57:7d:17:
85:5a:bd:d6:09:6b:49:55:9e:a3:d6:d8:1d:12:a9:
36:72:50:c0:ee:c5:81:34:6b:c3:09:21:73:af:45:
1e:13:d8:ba:4b:ea:bd:7c:2c:fd:ac:be:c7:f7:a4:
fd:71:fc:f8:67:90:37:28:78:f0:d8:1b:fe:e9:ce:
b6:f0:37:fe:bd:07:c3:30:ef:b0:94:ad:d0:8f:8f:
ab:92:d2:ea:c8:a6:2a:09:88:7a:5a:91:39:15:25:
77:98:da:d9:ae:11:58:b8:6f:9a:3b:39:e3:9a:e7:
07:bf:36:2b:f4:ce:54:41:57:c6:07:df:18:7e:1f:
0b:c1:5d:57:0f:43:0b:f9:b6:19:6e:85:ce:48:73:
d7:aa:88:1f:47:5f:fc:bf:c0:54:c1:ff:8c:8d:6f:
66:b4:87:a3:cf:3c:48:43:f2:d3:0d:ac:a4:79:de:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9C:90:7E:3F:FA:51:D0:32:D5:D9:B6:29:29:3F:B2:3C:5D:11:F3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YJyQfj_6UdAy1dm2KSk_sjxdEfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
13:af:71:53:af:82:a6:ae:6e:2c:ae:53:6b:2e:43:75:af:c8:
9b:b4:5b:94:c8:d4:fd:3f:eb:24:8f:e5:25:5d:4b:ab:80:57:
39:89:02:29:22:45:c0:9d:8a:d9:3e:8d:0b:bf:5a:8a:29:0d:
22:bb:98:96:a5:83:34:94:4e:5c:c9:fe:2c:a3:4d:48:82:b0:
2f:73:4d:e9:a8:6d:e0:1b:3b:76:04:11:44:8e:9e:1f:ba:68:
ed:2b:ea:c0:69:a6:9f:e7:8c:fa:56:83:db:f1:e7:81:74:03:
49:45:bf:e3:10:de:37:d8:a8:c0:a8:a6:33:71:d5:6b:73:5f:
7e:fc:e6:85:f9:46:3d:15:39:44:c5:80:ea:dc:fa:16:99:d9:
81:67:1a:99:94:0d:3e:38:3e:1c:11:2f:43:be:f0:3d:12:9a:
df:f3:a7:5f:7c:28:ce:f0:10:50:04:be:f4:da:e2:a3:99:19:
6c:a3:bb:8f:d4:66:d9:88:c8:98:db:0d:86:92:49:96:a7:29:
df:3a:46:33:6f:e8:ce:4f:1a:f0:de:f7:52:c4:c5:f4:c9:99:
49:13:1e:de:17:09:a5:6d:c5:dd:3a:7e:1b:81:4e:d0:39:62:
5d:55:1f:ee:9a:ca:44:a3:93:c6:f8:36:5a:e6:ee:f0:bc:5d:
d6:ff:2e:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 21 09:58:21 2024 by rpki-client on console-fra.rpki-client.org