Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_CJdSpyHUVhk-rGB-Ij9pk-3BVk.roa
File: _CJdSpyHUVhk-rGB-Ij9pk-3BVk.roa (raw, json)
Hash identifier: 1N70XOqULiHzuhN4K3v7DE/uVK7HEZDkwbPLhqwtNKI=
Subject key identifier: FC:22:5D:4A:9C:87:51:58:64:FA:B1:81:F8:88:FD:A6:4F:B7:05:59
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192324BE94900A9C01D7054F682C31FB783
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_CJdSpyHUVhk-rGB-Ij9pk-3BVk.roa
Signing time: Fri 27 Sep 2024 07:04:48 +0000
ROA not before: Fri 27 Sep 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:324b:6945/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 27 Sep 2024 07:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:4b:e9:49:00:a9:c0:1d:70:54:f6:82:c3:1f:b7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 27 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc225d4a9c87515864fab181f888fda64fb70559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f5:fb:38:d4:f7:18:56:99:25:42:f4:fc:9f:
2e:68:6d:e7:57:a8:0a:a9:b1:dc:f1:62:5e:41:51:
bc:e6:8a:13:a3:2c:79:4f:6b:ed:42:c7:3a:7a:73:
92:6f:73:1e:f1:dc:a3:20:db:a8:07:8a:6b:26:12:
d0:ba:5c:95:ac:4c:86:a5:ad:63:a3:1b:3f:6e:af:
61:ff:ec:1c:86:8f:ad:76:f3:64:38:21:9a:4c:6d:
d4:12:6d:ae:e0:22:78:14:07:de:6f:3b:6a:ce:8e:
f4:a7:6d:e7:40:7e:fc:49:c1:0b:2c:dd:d1:57:1b:
e7:d3:f0:16:9d:c7:cb:2d:8a:ed:9c:a1:61:9c:0e:
a2:58:60:98:ff:6a:81:fd:df:79:ad:45:78:20:20:
2d:1d:1d:e5:36:8c:fb:2b:2a:a4:45:82:9d:9f:2a:
32:48:83:97:71:96:d9:be:eb:d0:da:04:10:85:6c:
9f:28:4b:23:1c:11:af:79:fc:c0:df:69:65:32:2f:
b8:e1:0a:16:fe:ba:ed:4c:21:50:c5:5c:28:bd:21:
ec:78:ca:a2:59:a2:dc:6f:57:98:85:27:b5:fe:c5:
1e:4d:15:48:18:23:8e:e0:0b:ef:79:7a:1a:64:7c:
07:a5:90:40:f7:d9:7b:9b:0f:d6:a8:33:2f:b1:04:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:5D:4A:9C:87:51:58:64:FA:B1:81:F8:88:FD:A6:4F:B7:05:59
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_CJdSpyHUVhk-rGB-Ij9pk-3BVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:324b:6945/128
Signature Algorithm: sha256WithRSAEncryption
7b:0e:b9:85:45:dc:b6:87:e1:49:e2:a2:38:4a:cf:f0:d1:ce:
e5:48:7f:1d:d2:5e:77:6b:89:7d:d9:35:35:4c:7e:1b:8c:b2:
95:85:ee:ce:8e:e8:9a:9f:89:0b:e2:fa:ad:f1:10:8a:86:5f:
77:fc:1f:e8:0c:01:1f:e9:95:cd:f7:b4:5f:f3:aa:3b:ca:34:
03:27:bb:96:c5:81:3b:57:04:ad:fe:d1:2a:72:a0:58:52:fc:
a4:51:94:2f:49:8c:2c:18:b8:ef:97:3e:7a:e1:33:51:94:3d:
7d:1c:79:c0:b6:17:2e:35:c3:41:36:b8:6b:bf:df:2e:c8:ed:
ac:82:98:dd:c2:6b:b7:5e:6f:d3:a4:42:e2:f3:8e:d2:fc:57:
1b:2e:d5:9d:18:62:8c:03:3d:02:43:cc:67:b1:6f:0d:11:58:
d9:7e:ec:5f:49:7d:0f:85:fe:a3:3a:08:62:6a:d4:71:c2:fe:
37:df:58:14:ed:26:2c:5e:f1:3c:31:d3:f6:0c:3f:3d:8a:a5:
3a:1f:67:d9:50:f1:f0:a9:60:ec:7a:4e:0b:82:c1:73:22:37:
dc:12:be:9a:04:f7:95:19:1d:c7:c4:0d:7b:f0:f7:9e:34:5f:
2a:77:71:e2:a0:fc:f4:0a:0e:a5:bb:66:22:5e:7f:26:91:a3:
69:5b:7a:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:30 2025 by rpki-client