Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_P6ax9AqqsRuDQPfWblfalRIf4I.roa
File: _P6ax9AqqsRuDQPfWblfalRIf4I.roa (raw, json)
Hash identifier: zs3Z4CIgl1phLvxLOjPEOVujZZRgsT4XF+7kHGt0OKs=
Subject key identifier: FC:FE:9A:C7:D0:2A:AA:C4:6E:0D:03:DF:59:B9:5F:6A:54:48:7F:82
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913366DC6C799937C66B578BA2556DB691
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_P6ax9AqqsRuDQPfWblfalRIf4I.roa
Signing time: Thu 08 Aug 2024 19:11:04 +0000
ROA not before: Thu 08 Aug 2024 19:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 08 Aug 2024 20:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:33:66:dc:6c:79:99:37:c6:6b:57:8b:a2:55:6d:b6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 8 19:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcfe9ac7d02aaac46e0d03df59b95f6a54487f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:07:37:31:ff:94:26:b6:9d:18:71:55:0b:
59:21:71:0e:1d:1f:ec:d2:b9:d5:ed:39:b2:2b:9d:
be:29:af:0b:cc:e4:c4:7d:aa:6e:cf:4f:d4:f9:f3:
23:00:39:99:f2:40:20:84:d3:76:1f:e5:65:fe:4f:
b2:ab:a5:0f:a3:d1:3a:db:10:33:a9:e6:f7:8c:91:
3b:07:9d:b9:67:54:ff:35:d1:e6:4e:87:68:e7:62:
a5:fe:ee:d1:84:33:a4:36:28:57:92:55:6c:5e:2a:
8a:b5:06:d0:8c:30:70:30:2d:26:73:e3:52:8c:1b:
b7:84:4e:bd:45:d1:62:03:96:18:84:a9:3a:df:12:
0b:5b:9a:db:69:a5:3a:f3:1b:47:37:e8:c5:ea:42:
a0:83:2a:66:3e:db:b3:a8:6a:dd:e3:30:41:40:50:
1b:dd:0e:5f:09:80:4c:47:84:45:da:c8:de:d2:ee:
ae:10:fe:20:17:cd:81:4d:18:72:4e:7d:f0:07:74:
bb:42:17:49:40:db:c2:58:96:7c:9e:dd:35:2e:1e:
45:74:f3:f1:4a:b6:c9:1f:6d:e8:65:29:a3:87:c5:
99:41:1d:ec:06:25:94:ff:eb:e7:2f:30:39:68:d5:
7c:bb:61:d7:d6:07:a6:b6:c4:65:c8:1a:63:5b:37:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FE:9A:C7:D0:2A:AA:C4:6E:0D:03:DF:59:B9:5F:6A:54:48:7F:82
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_P6ax9AqqsRuDQPfWblfalRIf4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
94:74:7b:79:61:4f:59:2d:7c:4d:e1:3e:7e:f1:8c:3b:eb:66:
fa:e6:72:ab:b9:b0:ea:1a:56:99:2b:13:0c:7f:8c:15:5c:9b:
4f:e6:d6:b5:62:27:9b:a5:54:69:c0:e0:07:da:2e:9e:51:8a:
ad:3f:a5:b6:3b:3e:26:f4:96:ca:bb:c8:06:7d:dc:dc:4d:ad:
b3:6b:20:19:b6:89:f1:e1:21:22:f4:c5:ff:9c:9b:54:04:f7:
a9:9c:96:a8:76:63:7a:85:bc:f0:c3:55:e0:89:a6:f3:a5:d2:
fe:08:43:a2:95:c6:c4:63:f6:5f:c2:b6:b8:08:d3:72:fb:21:
76:83:68:09:e5:49:a5:d5:5e:9d:ff:8c:bd:36:98:c6:49:ca:
82:f5:71:34:f0:31:bc:fa:53:ea:f6:49:97:c7:da:25:7f:1f:
1b:54:49:71:21:e6:93:a7:0c:52:c1:3f:20:17:23:30:e6:5b:
fa:bf:a3:3a:6a:51:e9:37:87:1e:9d:b3:dc:9f:12:a6:92:1a:
00:cc:dc:9e:5a:8e:cd:84:f4:a0:cf:ee:65:4c:e9:62:59:ea:
6c:c5:7a:92:61:b2:44:93:8f:94:f3:d0:74:90:49:ff:15:d6:
85:74:a1:17:a4:65:76:1c:af:49:d2:fe:c9:b2:2b:6a:7c:0f:
e5:94:1f:7d
-----BEGIN CERTIFICATE-----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==
Generated at Thu Aug 8 22:24:17 2024 by rpki-client on console-fra.rpki-client.org