Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_-d8kGUme2Eeeor-1ml_78ZiLGI.roa
File: _-d8kGUme2Eeeor-1ml_78ZiLGI.roa (raw, json)
Hash identifier: hxSjvPNm/L03rTFXHs84TbYP0xEePMFj0OpL2o77/mU=
Subject key identifier: FF:E7:7C:90:65:26:7B:61:1E:7A:8A:FE:D6:69:7F:EF:C6:62:2C:62
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01917469968DD42A5CCBB171BC8DE3B76358
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_-d8kGUme2Eeeor-1ml_78ZiLGI.roa
Signing time: Wed 21 Aug 2024 10:09:22 +0000
ROA not before: Wed 21 Aug 2024 10:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 Aug 2024 11:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:74:69:96:8d:d4:2a:5c:cb:b1:71:bc:8d:e3:b7:63:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 21 10:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffe77c9065267b611e7a8afed6697fefc6622c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:21:ab:f7:0c:2c:f6:8e:44:c1:db:22:cb:
71:83:84:ef:d1:5a:70:43:b6:78:5c:9c:e5:ac:78:
3f:c1:90:b4:3a:6e:9c:41:af:dd:d4:7a:ac:80:ac:
43:ef:1b:16:f4:cf:a7:04:7f:7c:ed:23:6c:e8:20:
b4:09:cf:3a:e6:ea:24:fe:28:40:54:10:6b:bc:22:
9a:a2:f9:ed:bc:42:5d:4a:d5:53:64:c1:78:8c:4d:
3b:8c:9a:ff:8d:91:43:66:e8:5f:6f:61:f4:e5:f2:
a5:20:1d:d0:d7:f5:fe:e3:fa:6a:d4:82:80:b7:da:
e8:27:0a:61:96:e3:64:f4:44:6f:f1:01:d3:2a:9c:
16:0b:25:a5:67:36:1d:ba:5e:8f:8e:11:94:10:37:
53:23:a5:cf:8d:e2:97:7b:df:8f:e1:76:86:d7:3d:
02:51:db:59:54:ed:83:50:a0:57:83:22:f2:27:42:
e5:71:e8:f9:24:b8:e7:9d:4b:cf:f5:89:23:8d:80:
9a:d0:2c:26:55:b5:7f:af:cf:39:3a:57:8c:cf:44:
3e:4d:14:b8:53:5a:5f:bc:f4:a8:de:bf:5d:50:7d:
cf:8c:53:9e:28:6c:ed:8c:c8:aa:d3:4c:aa:ca:58:
5e:25:56:95:ad:6d:2b:47:e9:6d:b8:72:63:7b:f9:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E7:7C:90:65:26:7B:61:1E:7A:8A:FE:D6:69:7F:EF:C6:62:2C:62
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_-d8kGUme2Eeeor-1ml_78ZiLGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
41:be:cc:56:ba:f2:92:f2:24:c8:fa:2c:5b:4d:72:1f:55:67:
6b:03:ba:ea:b0:cf:a4:77:2b:67:8d:e9:05:34:99:df:ae:3b:
ae:ae:2d:33:8b:78:bb:18:ad:54:7f:da:d5:03:6a:cc:8b:72:
45:81:8c:e2:0e:0d:dd:2b:fe:c2:d9:4b:a6:0f:33:bb:b7:e5:
d6:c6:90:c0:84:ad:10:5a:08:47:e5:da:42:4a:4a:fd:3f:8d:
4d:f7:ca:5a:81:b9:aa:45:db:24:f7:03:0d:27:db:27:fa:5f:
3e:1a:cf:51:8b:79:ab:de:6f:f2:c0:bd:11:0a:1d:36:cb:29:
e2:ed:86:d1:41:df:0e:3a:fe:bd:f5:cd:4a:9e:95:4c:b4:84:
e5:83:27:b0:4d:51:00:c1:a8:c8:28:79:d1:9e:44:a2:1d:10:
6c:34:c5:37:8b:6e:e5:87:66:30:c0:58:d1:85:7e:06:ee:16:
87:cd:4e:cc:65:f2:f3:ab:61:c9:56:8d:ee:34:2b:2b:b9:94:
7b:5c:5f:b9:d2:f0:23:4c:0f:dc:66:ee:73:9a:51:a7:f4:1e:
b8:9a:87:da:0c:cf:08:89:4b:cd:c5:d9:16:71:39:04:00:86:
f8:ad:2f:8e:db:85:91:8a:ca:8f:f7:5c:dc:92:e9:91:98:4c:
c8:50:14:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 21 16:36:46 2024 by rpki-client on console-ams.rpki-client.org