Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bul4_Rnkz4vB21w_mRs49YfYKsQ.roa
File: bul4_Rnkz4vB21w_mRs49YfYKsQ.roa (raw, json)
Hash identifier: sULh3EAlBeA6kTiwmGdluOwZSDdYjBigaPr0br4tQE4=
Subject key identifier: 6E:E9:78:FD:19:E4:CF:8B:C1:DB:5C:3F:99:1B:38:F5:87:D8:2A:C4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01911C712CDEF3244E544DB3776BE9D55436
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bul4_Rnkz4vB21w_mRs49YfYKsQ.roa
Signing time: Sun 04 Aug 2024 08:11:04 +0000
ROA not before: Sun 04 Aug 2024 08:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 04 Aug 2024 09:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1c:71:2c:de:f3:24:4e:54:4d:b3:77:6b:e9:d5:54:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 4 08:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ee978fd19e4cf8bc1db5c3f991b38f587d82ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:59:32:3c:8b:56:cd:f2:2d:42:88:88:9a:
f2:b2:1a:00:c3:d1:97:76:b5:f2:73:12:46:68:05:
4a:2e:f0:e2:74:a4:bf:67:b5:33:b8:86:9a:63:bd:
5c:59:70:c4:0f:2d:b1:d8:3c:7b:f2:c3:3d:5d:0c:
fb:02:90:d2:0e:56:f6:97:8b:2a:b3:fc:d0:e3:02:
05:8d:fd:64:06:2a:ff:e2:da:4d:38:b5:ec:7f:e7:
25:28:9f:35:18:5e:04:16:b2:ca:82:63:04:d6:c6:
ce:12:d5:39:2c:04:ca:01:2d:31:40:4b:94:2a:c4:
98:0b:4d:eb:45:78:61:1b:92:94:5d:9b:48:37:03:
6d:18:06:8e:5c:4f:55:ae:41:94:37:0a:7c:62:11:
2a:50:01:9c:07:d0:53:64:5a:8b:e7:0a:7d:26:b1:
78:ec:af:64:8c:89:f8:04:de:29:9d:8b:b2:67:1c:
16:90:ab:7f:2b:9a:8f:6a:a7:a1:90:eb:df:a8:0e:
67:37:f6:24:d0:c2:1d:ae:77:39:8b:1d:cc:bf:77:
41:28:8b:a6:46:52:65:7a:07:5c:11:4c:4e:8e:1e:
1f:d8:f7:7a:be:81:91:1c:54:5f:01:13:c4:c4:a9:
51:f7:57:8f:b1:1b:20:67:65:de:50:43:9e:75:db:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:78:FD:19:E4:CF:8B:C1:DB:5C:3F:99:1B:38:F5:87:D8:2A:C4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bul4_Rnkz4vB21w_mRs49YfYKsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
24:03:90:ff:e5:94:6b:ce:25:f1:50:55:e5:5e:b7:3f:78:34:
9c:b2:f3:99:45:32:33:ac:8f:e5:3a:39:b4:cf:f4:c6:a3:54:
52:25:07:37:fe:5d:57:17:5c:c1:c7:a3:e2:0d:c7:c1:24:86:
db:f3:52:b1:e7:1a:a9:47:b4:90:ec:01:34:5d:63:f8:a5:dd:
29:ed:69:3e:0c:ea:7f:ee:21:f6:42:b8:8d:aa:c5:c3:86:47:
ab:51:16:78:22:61:c3:d0:f2:b6:20:64:40:f5:e4:84:5e:b8:
98:1a:83:db:f1:95:83:08:6c:9b:2b:5e:0a:cc:a3:2f:0a:b0:
5b:35:c3:af:1e:05:f7:f6:9d:fc:69:40:43:28:12:eb:ad:e4:
0a:fd:83:ba:f0:51:8f:bc:ee:13:6e:a4:dd:7a:2c:fd:87:ef:
04:89:3c:12:5a:bf:aa:20:86:f4:f2:4f:3f:a8:b1:e3:20:96:
78:d7:9e:a6:c2:60:28:38:64:b8:39:c2:04:c4:df:7c:01:bf:
ca:b9:93:cf:83:8f:0e:12:15:09:8a:15:ef:39:3c:a9:34:53:
4a:9f:f3:bf:b3:19:ba:ae:ed:3c:17:7c:4c:8f:7a:57:ca:0b:
8c:d4:b9:0d:e4:8d:4a:ce:f4:a8:cf:fe:45:b0:5e:7f:84:3c:
9d:51:20:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 4 12:21:41 2024 by rpki-client on console-ams.rpki-client.org