Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_jQGt3LTj8wknuco5QxgtKq6f1E.roa
File: _jQGt3LTj8wknuco5QxgtKq6f1E.roa (raw, json)
Hash identifier: z4Gr3ieW6ltK7A2vPGCNQiEcsW84idg/vOChXO0JyJk=
Subject key identifier: FE:34:06:B7:72:D3:8F:CC:24:9E:E7:28:E5:0C:60:B4:AA:BA:7F:51
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191302DF80143B7B2111C2A9A077F9F7575
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_jQGt3LTj8wknuco5QxgtKq6f1E.roa
Signing time: Thu 08 Aug 2024 04:10:04 +0000
ROA not before: Thu 08 Aug 2024 04:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 08 Aug 2024 05:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:30:2d:f8:01:43:b7:b2:11:1c:2a:9a:07:7f:9f:75:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 8 04:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe3406b772d38fcc249ee728e50c60b4aaba7f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:34:f5:f6:a4:b6:77:ac:bb:a4:2d:41:dc:
24:52:a8:9f:6e:19:52:2b:ff:d8:8b:a4:49:a5:e4:
97:c1:07:ed:b4:1c:78:ce:4e:5a:3e:b8:23:3e:53:
8b:b8:4d:56:3a:c3:16:b2:f3:30:d3:ab:78:38:6a:
1d:cd:19:32:c9:88:0f:0c:a7:93:4e:5b:6f:06:56:
07:4e:35:a2:40:a7:e7:f5:b5:76:ae:16:d0:24:dd:
e6:1e:5d:05:32:96:ec:e7:84:b9:bc:58:f2:06:6d:
6e:d6:95:83:e5:65:fb:29:9c:cc:fa:74:28:f3:c0:
15:32:e6:51:46:18:4f:42:68:e5:74:bc:b3:f9:76:
81:56:33:84:be:62:b6:3f:6e:88:50:86:ac:72:3f:
c1:63:5d:8f:47:b5:1b:17:20:27:cb:e2:c5:8e:01:
15:d0:31:a8:93:ca:3e:ba:b0:a3:14:2a:da:51:fd:
2e:df:21:8b:ba:5e:72:85:4c:da:a8:ef:cf:7e:bf:
50:d1:0c:86:a4:4b:9e:97:82:f4:75:2a:54:d1:ef:
a1:c2:96:74:24:e0:9e:59:54:e4:bd:a5:ae:a6:d1:
ed:06:d6:db:89:61:e8:25:0c:e6:0b:ec:61:a1:e5:
c2:a1:2b:b1:b7:1d:ce:de:9b:04:4d:da:60:8a:15:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:34:06:B7:72:D3:8F:CC:24:9E:E7:28:E5:0C:60:B4:AA:BA:7F:51
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_jQGt3LTj8wknuco5QxgtKq6f1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
94:09:33:ac:15:e2:3d:f0:2e:09:d6:83:cf:de:63:10:ae:75:
54:dc:d5:14:90:15:92:4b:da:22:64:9a:a9:36:b0:c1:1f:d7:
7e:c5:3b:a1:5f:38:f9:7c:09:71:e5:5f:d3:54:50:a3:b6:29:
d1:ab:16:86:cc:f2:cd:ec:9f:4d:02:9f:c2:ac:f1:eb:5c:fd:
92:6b:fd:bd:33:98:44:94:2c:51:0b:69:d2:e1:92:08:92:3e:
32:49:0c:3e:ef:33:e2:13:ad:95:89:fb:d1:d0:c0:33:24:15:
3e:f2:09:09:6d:e4:69:10:c6:04:52:c1:d9:26:fd:95:3a:ba:
53:4a:19:dc:e2:75:c9:fa:89:71:3c:80:9f:23:18:7b:95:39:
79:70:e5:9e:3a:46:f0:58:fc:c8:98:fe:32:9a:6e:11:91:7a:
e9:01:73:0c:39:72:99:61:01:f4:d3:62:ac:78:85:ad:87:2b:
1b:9f:51:33:da:51:1a:ae:a5:c6:74:4f:46:b2:6c:ad:34:03:
05:b5:81:df:43:b0:ea:13:96:2e:1a:d3:1f:2c:0f:df:f4:f9:
16:6c:51:eb:03:5a:bc:79:3d:0e:35:dc:19:fd:76:9d:ef:c8:
83:8f:52:a0:78:1e:e5:d1:9e:70:f8:27:ba:2d:32:fa:0d:ff:
6e:22:e4:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:42 2025 by rpki-client