Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cUFEufowLRIj5phcwjWeeoimN3k.roa
File: cUFEufowLRIj5phcwjWeeoimN3k.roa (raw, json)
Hash identifier: w6GyZgZtwJxXmzGt67Y0i9hbSLw4LeKNNQNKc1JdcYw=
Subject key identifier: 71:41:44:B9:FA:30:2D:12:23:E6:98:5C:C2:35:9E:7A:88:A6:37:79
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918AF4763D18178C8C7B39B01747C60692
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cUFEufowLRIj5phcwjWeeoimN3k.roa
Signing time: Sun 25 Aug 2024 19:12:42 +0000
ROA not before: Sun 25 Aug 2024 19:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 Aug 2024 20:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8a:f4:76:3d:18:17:8c:8c:7b:39:b0:17:47:c6:06:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 25 19:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=714144b9fa302d1223e6985cc2359e7a88a63779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:84:29:c1:8b:01:cb:3e:20:4d:cf:74:b2:
89:b9:b9:66:b8:38:64:3a:c0:b8:83:ee:81:9b:60:
d3:38:a5:95:c1:9c:cd:06:40:dc:46:4b:e2:11:75:
4e:79:07:54:17:40:b2:38:6a:7b:a5:c9:5a:57:0e:
53:f0:48:e6:b5:77:aa:dc:eb:e0:56:2b:4f:03:22:
9c:2b:fd:65:9f:9b:a4:04:a1:a0:2a:1c:18:77:5e:
ac:89:27:9b:58:a3:79:13:6b:7a:51:1f:22:c8:f9:
c8:79:8b:58:37:01:7c:67:d5:ca:82:33:67:9d:fa:
20:14:84:eb:c3:90:68:a1:7b:5b:b5:32:9c:32:99:
cd:8b:fc:f0:69:0b:ea:c1:23:a4:64:d6:34:63:3b:
69:e3:9e:45:ac:d7:a0:d6:f7:ca:3b:50:ff:6d:bb:
8b:24:d0:a0:db:24:3c:6f:e2:2e:b0:86:8c:da:3e:
11:c5:ff:c7:66:72:73:61:cf:45:19:f6:97:4f:66:
c8:3b:36:69:af:f2:d3:ba:85:c7:79:9d:35:74:76:
c4:e4:b4:5d:cc:43:d4:df:2e:5f:89:53:53:8d:b2:
b0:73:c9:47:c3:2c:c7:67:87:c4:d3:1b:98:34:3a:
7b:fb:2a:8a:05:45:6c:5c:c5:cf:84:d3:78:5e:4d:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:41:44:B9:FA:30:2D:12:23:E6:98:5C:C2:35:9E:7A:88:A6:37:79
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cUFEufowLRIj5phcwjWeeoimN3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3b:e8:eb:a6:12:ac:4b:da:49:bf:e3:61:72:52:0f:d9:89:35:
18:07:44:e6:87:20:0f:c5:e0:68:c0:65:8a:50:48:01:1d:0a:
c8:97:ae:8a:fa:59:64:9c:9e:15:4a:50:bd:31:78:58:5c:be:
cb:c2:46:ab:1f:a0:88:76:d1:5b:b6:ca:72:40:99:d4:44:0c:
e8:15:4d:95:9a:b1:c6:c6:3b:65:20:dc:25:88:1c:d6:07:2f:
2d:a5:57:63:ce:91:ee:c1:6a:ed:22:4d:1d:8c:ef:46:1e:78:
e7:97:6a:c2:05:bc:d6:aa:09:95:71:3a:bb:ac:0b:05:d8:61:
a9:87:e6:02:cd:88:93:8e:34:7c:2f:a1:66:4b:ba:1d:94:9c:
60:a2:f5:35:a0:db:64:5a:23:b8:07:ec:01:38:58:6a:20:88:
4c:53:b0:3f:ee:9f:b8:c7:a3:cb:b3:67:e5:26:a0:2c:a6:4e:
4a:15:59:e1:8d:c8:6b:04:27:b4:3a:38:85:fd:b4:68:bd:19:
89:d4:08:e5:ec:c1:50:57:79:9a:ca:39:8b:1b:62:fb:4e:dd:
06:a9:e9:74:db:2d:78:c0:cf:f4:59:3c:93:ed:2f:51:08:bc:
d9:2e:bc:b5:bf:28:16:d1:f4:36:e8:4c:10:01:6c:d1:70:1f:
1c:a7:fb:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:02 2025 by rpki-client