Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_g-Z_nocCbAvsj0IWsOUFyeL8v4.roa
File: _g-Z_nocCbAvsj0IWsOUFyeL8v4.roa (raw, json)
Hash identifier: tCJ3rAZzQ2SbDFiwVlk0dj/c4/vzl0mj5HYqvxLUhzI=
Subject key identifier: FE:0F:99:FE:7A:1C:09:B0:2F:B2:3D:08:5A:C3:94:17:27:8B:F2:FE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191339EB567F07BB3A1AE15BD2841B37350
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_g-Z_nocCbAvsj0IWsOUFyeL8v4.roa
Signing time: Thu 08 Aug 2024 20:12:04 +0000
ROA not before: Thu 08 Aug 2024 20:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 08 Aug 2024 21:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:33:9e:b5:67:f0:7b:b3:a1:ae:15:bd:28:41:b3:73:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 8 20:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe0f99fe7a1c09b02fb23d085ac39417278bf2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:37:8c:54:a4:d7:0a:04:aa:c1:94:45:4c:
b3:bd:95:f6:66:ad:7f:97:69:fc:1f:ee:fa:22:4a:
88:cf:a3:c5:93:85:38:03:e2:01:3f:c6:b7:a2:aa:
dc:27:66:a9:1b:91:e4:ee:2a:47:0e:55:b5:bc:42:
bc:68:4f:af:30:11:c7:c2:f6:0a:48:21:4b:e2:dd:
d5:02:f5:84:14:9b:82:78:da:e9:91:27:b5:e8:01:
04:65:a4:e7:29:45:0e:4e:9e:6a:6d:3a:80:83:41:
15:6e:cd:2c:7b:1e:ab:a3:5e:ed:47:84:e2:5c:8b:
91:d5:0c:e8:b9:ef:14:e6:dd:3d:ed:26:56:d9:68:
de:19:cd:72:2c:31:96:c1:91:f5:8e:13:7c:09:ff:
c2:91:fc:ce:86:7a:7a:23:e1:45:ef:f0:f6:a7:17:
1c:5c:fc:80:59:68:50:29:d2:c7:3b:bb:09:71:b2:
22:5e:a2:bc:c7:5e:a8:78:ed:23:ec:a5:70:ec:04:
95:b4:28:10:26:27:39:ca:57:26:4d:0b:34:0e:80:
dd:42:31:53:e1:a8:04:87:df:82:88:65:67:cd:b9:
ae:27:41:0e:6e:7e:07:02:5f:8a:c5:5e:d1:f7:71:
08:36:9b:7f:69:3e:81:54:3b:bb:da:f2:58:aa:fb:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:99:FE:7A:1C:09:B0:2F:B2:3D:08:5A:C3:94:17:27:8B:F2:FE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_g-Z_nocCbAvsj0IWsOUFyeL8v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3e:8c:18:ed:71:49:3c:c9:48:e0:2f:b6:92:ec:22:7a:0c:9d:
96:41:c6:9e:75:cb:b9:4d:55:79:22:52:ff:fd:2a:64:44:f1:
e6:f1:3b:c0:3c:5b:c8:12:96:42:2b:51:05:cf:d2:4d:24:e1:
62:b8:21:af:2c:bf:84:15:7e:08:a9:c7:cb:a9:9b:64:93:a8:
71:75:36:31:64:b5:a6:1c:f6:66:bf:fa:d7:55:2c:b5:22:d0:
70:8c:56:cd:70:58:21:bb:c0:17:25:d4:63:2d:e3:7d:f9:3e:
65:57:e7:27:b0:e9:19:eb:f2:47:b2:35:eb:86:50:bd:ee:9e:
ba:b8:44:d0:87:2d:94:15:30:92:03:ef:fc:99:02:dc:8d:2f:
b7:b7:83:28:b6:3d:cb:c0:bf:92:37:90:18:83:37:19:51:bf:
3b:60:fd:ec:4f:13:0b:52:0d:e4:7b:43:32:f3:fe:5b:2a:f7:
99:d6:06:8f:b0:4c:c4:0a:d5:b1:48:de:7c:07:62:ad:42:f4:
07:53:56:38:d1:7e:29:9e:f7:e5:7e:f9:81:ea:9a:b8:03:6c:
ff:8e:81:72:d2:d1:ab:b4:07:5f:6e:0b:d9:f4:ca:76:5d:9d:
dc:60:00:04:6c:f8:78:03:ef:79:79:3b:72:73:3e:de:4b:6d:
4c:4c:b9:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:18 2025 by rpki-client