Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cWNz8uiriWZnJqPD2oTJOuLi3nU.roa
File: cWNz8uiriWZnJqPD2oTJOuLi3nU.roa (raw, json)
Hash identifier: JeprFXVMIYFl36amNP1ZpOj0zrURYHDUHnhYO1qbufg=
Subject key identifier: 71:63:73:F2:E8:AB:89:66:67:26:A3:C3:DA:84:C9:3A:E2:E2:DE:75
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913B55CDD5A1CC361AF8160E2211F93FCD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cWNz8uiriWZnJqPD2oTJOuLi3nU.roa
Signing time: Sat 10 Aug 2024 08:09:24 +0000
ROA not before: Sat 10 Aug 2024 08:09:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 10 Aug 2024 09:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3b:55:cd:d5:a1:cc:36:1a:f8:16:0e:22:11:f9:3f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 10 08:09:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=716373f2e8ab89666726a3c3da84c93ae2e2de75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:39:c0:92:4d:34:b6:04:2f:33:83:83:cb:
a7:d5:af:d5:7e:2d:7d:e3:fc:25:f6:fa:03:f2:07:
9f:b7:2a:c8:38:3b:37:1a:72:62:b9:14:f5:c9:d3:
60:d8:04:7c:6e:22:c1:00:91:34:d1:30:4f:42:aa:
1c:21:cf:07:78:8b:69:e8:39:73:62:00:6d:46:94:
77:5d:74:8c:9b:26:60:6b:a7:2a:b7:92:06:57:20:
58:d8:bf:9d:0f:e2:7c:7c:e8:ee:37:d3:d6:6e:a7:
05:1a:d5:3b:25:8a:c2:ec:73:5d:b7:75:90:29:42:
c8:0e:f0:c9:6a:19:9f:0f:9d:28:95:6e:ed:06:2c:
76:9b:e7:1a:c8:49:4b:e6:f3:28:11:6f:1b:89:79:
49:e1:f6:99:6e:3f:29:91:38:8d:8e:84:65:68:68:
8c:d3:2f:0d:35:56:99:8b:38:c3:2f:1a:1a:db:ee:
1e:16:69:c4:73:af:a0:d3:81:51:b6:ed:48:46:1c:
c1:a3:9e:77:1b:c2:16:d9:37:fa:12:8d:98:74:13:
90:db:49:1d:2d:e2:ce:f6:7d:c6:b7:f6:cd:2d:cd:
1a:bf:5f:74:95:06:7c:fe:52:69:c7:33:f5:1e:3c:
43:1f:d3:84:14:27:8f:7c:58:b9:c1:2f:3a:51:c8:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:73:F2:E8:AB:89:66:67:26:A3:C3:DA:84:C9:3A:E2:E2:DE:75
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cWNz8uiriWZnJqPD2oTJOuLi3nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
1a:78:31:8f:b3:bb:bb:f9:fb:aa:34:29:75:82:8c:42:c9:01:
55:52:71:54:c4:78:90:18:ec:a2:97:26:8b:39:b6:05:74:9c:
56:c7:22:83:0c:df:10:22:ad:f0:bd:a9:c7:ed:86:b5:11:60:
c1:96:49:f4:4f:3e:6e:39:bc:4a:ff:81:52:29:69:02:8c:a2:
59:37:b4:31:14:78:f4:d7:09:24:60:e6:8e:57:a5:33:7c:be:
27:79:62:c0:92:73:4d:46:f1:12:7e:19:dc:28:b7:7c:fc:95:
bd:5a:c7:53:c4:4c:46:6d:92:8f:5a:0a:92:88:c6:be:6e:bc:
a9:b4:b0:a8:8c:71:bf:45:eb:32:e5:95:07:a5:40:a2:e8:7f:
71:1e:d9:d9:b0:34:76:ab:a5:11:35:cd:fc:da:a4:90:01:49:
db:45:16:48:35:76:a5:1f:5b:e4:29:82:d4:5a:03:8d:53:33:
aa:4c:96:77:10:73:a5:e8:48:6e:d5:20:b9:17:04:a1:66:86:
89:84:26:67:fc:d1:d2:3a:b1:4f:36:c0:41:1b:9d:97:9d:2d:
2b:97:d2:bd:21:32:c4:6b:8f:88:8b:28:62:9a:d0:a0:b8:5e:
80:c4:6b:76:27:fc:84:2b:89:62:6c:40:be:10:98:8d:99:78:
4e:b0:8f:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 10 12:38:34 2024 by rpki-client on console-ams.rpki-client.org