Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a5JBRPhU3Rc_vImU1PhWU3g8QCE.roa
File: a5JBRPhU3Rc_vImU1PhWU3g8QCE.roa (raw, json)
Hash identifier: b+hDtmooKvCWKfSO0K7ZvrF5gi8nhmuuLWl/SLnewYY=
Subject key identifier: 6B:92:41:44:F8:54:DD:17:3F:BC:89:94:D4:F8:56:53:78:3C:40:21
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019144CA75A05D016AB0A9F07BA5553163F0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a5JBRPhU3Rc_vImU1PhWU3g8QCE.roa
Signing time: Mon 12 Aug 2024 04:13:24 +0000
ROA not before: Mon 12 Aug 2024 04:13:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 12 Aug 2024 05:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:44:ca:75:a0:5d:01:6a:b0:a9:f0:7b:a5:55:31:63:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 12 04:13:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b924144f854dd173fbc8994d4f85653783c4021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:36:2a:1d:ed:38:b9:e2:7b:1d:6c:3a:a6:
c5:c0:c5:4b:3c:f5:40:eb:b8:c0:ea:f7:15:25:75:
4d:a4:79:ed:44:94:96:41:f1:f1:df:dc:81:64:ff:
77:eb:8a:cb:7e:3d:54:a6:d2:41:ce:a4:a3:a1:7b:
39:2d:35:5c:98:4c:e1:83:b7:74:8a:54:e1:f3:71:
59:9c:88:64:56:21:8a:4d:9c:93:22:53:7f:4d:43:
87:ec:ed:44:8a:ff:51:8a:21:f1:e8:7d:fe:9f:cd:
2e:4a:e8:74:1b:22:2b:b3:a2:92:01:e1:33:2f:c6:
f9:4f:f4:f0:6a:f8:cf:f0:e5:a6:76:be:61:d4:84:
19:5f:1c:d8:6c:f5:dc:7a:25:74:a3:49:de:35:c6:
34:57:69:d6:37:37:b2:51:e6:56:57:70:7f:cd:de:
6f:2e:2a:c1:bb:5e:71:30:d7:98:0b:2e:95:e2:f2:
42:77:f4:33:7f:fe:7d:a4:0a:2a:20:69:3c:3e:0c:
e1:73:4a:3b:4a:7b:d1:34:bd:9c:41:4c:48:43:fc:
e7:e2:91:0a:95:f6:5c:70:36:a3:f3:b6:cd:42:ce:
49:cc:a8:6c:29:95:93:1f:d6:98:7b:36:e4:73:a4:
bd:c4:73:f8:ea:83:e4:4c:7c:12:f3:40:36:6f:9a:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:92:41:44:F8:54:DD:17:3F:BC:89:94:D4:F8:56:53:78:3C:40:21
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a5JBRPhU3Rc_vImU1PhWU3g8QCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
27:ff:e9:59:6b:e3:26:ff:bd:ac:64:5b:b4:7a:e8:a5:af:d6:
7f:55:16:a9:6c:b5:24:39:9d:81:d1:b7:82:e4:4f:b9:e4:1a:
da:c5:de:0e:ea:70:6d:32:be:72:64:d9:21:ee:5b:04:c4:e4:
1e:c7:c4:b8:ba:9b:b1:80:b1:f6:a6:ca:74:5e:99:45:ae:31:
12:57:db:5a:16:dc:7b:72:70:1c:07:37:3b:8d:36:dd:ae:16:
7b:6e:1b:fc:20:d8:2c:52:33:35:07:f7:12:34:bb:11:99:14:
03:a2:54:4b:16:82:bf:65:15:ff:fa:83:02:17:90:99:2f:e7:
02:be:03:9a:0b:72:e5:24:d6:78:fb:28:8d:d6:64:e7:03:10:
11:e2:64:5f:41:84:f7:d5:8e:7f:95:ec:d8:59:40:6a:1f:b4:
e9:5a:14:d5:37:04:ed:b2:80:ab:f6:f1:3e:1a:cb:48:e8:9e:
2c:ca:fe:a0:0d:69:f2:7a:54:18:c5:e4:b8:9e:0c:a2:a3:82:
cc:66:15:69:1e:26:af:6e:a3:01:cc:31:d3:8c:23:70:d0:e0:
93:96:24:cf:9c:36:e7:19:f2:95:e7:5c:bd:d3:47:65:75:2a:
eb:92:ad:1b:56:e9:54:fe:4e:a2:a6:24:7e:8f:03:33:97:51:
72:b9:79:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:58 2025 by rpki-client