Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cjCANDSIeFBdNFiGctxGYvnfiMM.roa
File: cjCANDSIeFBdNFiGctxGYvnfiMM.roa (raw, json)
Hash identifier: 1cNN0dUMzvkuRH9fI4GkTPB3yMoC2SvlMZ2riIY/FGc=
Subject key identifier: 72:30:80:34:34:88:78:50:5D:34:58:86:72:DC:46:62:F9:DF:88:C3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191618885BADC7CEA9DB12FEF96E8B6FA93
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cjCANDSIeFBdNFiGctxGYvnfiMM.roa
Signing time: Sat 17 Aug 2024 18:10:22 +0000
ROA not before: Sat 17 Aug 2024 18:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 17 Aug 2024 19:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:61:88:85:ba:dc:7c:ea:9d:b1:2f:ef:96:e8:b6:fa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 17 18:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72308034348878505d34588672dc4662f9df88c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:87:60:1d:cf:79:48:ea:d5:fe:01:cb:95:41:
64:6a:f6:6b:be:5a:d6:7a:f0:41:cc:ef:dc:58:43:
9d:ce:4b:84:34:3c:d7:0c:e2:6e:99:9c:95:55:4a:
56:bc:ac:e6:28:2b:60:c3:fb:7e:4d:fb:cb:df:3c:
df:10:fd:ab:1d:82:2a:28:66:bc:7c:d8:f9:d1:d2:
14:7a:66:90:9a:02:7b:30:06:3c:57:1a:00:c5:48:
bc:f1:34:e5:13:ca:bb:dd:83:48:00:4a:ad:35:51:
58:9c:fa:f7:e8:89:37:b3:1c:33:e6:25:c0:ab:09:
18:ce:ca:d4:4a:f0:7a:7d:a8:1c:24:77:05:f2:9d:
78:15:c3:3c:27:a9:b0:f4:12:69:bc:cf:00:e1:85:
ac:75:a3:b9:c0:fc:91:f3:75:77:f3:3f:cd:f5:cc:
67:44:b4:78:47:7d:eb:92:46:9c:5f:3b:75:76:13:
c3:4a:1c:50:cc:76:40:71:a5:c8:3b:ba:7e:72:a1:
62:b6:e1:e1:8d:bb:33:a8:ab:79:07:be:fd:23:c7:
99:ba:7a:b4:e5:61:59:1a:07:4e:c8:0e:bd:62:e7:
f0:fc:87:dd:d3:ac:8a:53:b8:55:8f:77:60:ac:0c:
a8:88:e5:4f:28:fa:ee:cc:b8:6b:61:e5:cb:7f:b8:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:30:80:34:34:88:78:50:5D:34:58:86:72:DC:46:62:F9:DF:88:C3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cjCANDSIeFBdNFiGctxGYvnfiMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
30:28:fa:f7:14:27:09:49:5c:87:08:15:43:79:ca:1a:05:4a:
39:18:bb:24:62:ac:dc:85:90:b3:a1:0b:69:63:a7:06:f1:86:
6d:f7:dc:69:4c:4d:3f:87:a7:55:6b:6a:9e:b3:7e:ab:cc:12:
5e:ad:e9:45:45:89:64:48:c8:f3:51:ef:40:23:fb:63:2e:0a:
cb:7e:f6:99:28:4a:4c:b3:40:d9:d6:6a:d2:f1:0b:af:76:d2:
3c:5f:05:c7:44:54:54:a7:9f:ad:e6:c1:db:d5:2e:ab:48:e6:
7a:7c:fc:47:cc:54:82:7d:22:e1:4e:24:75:19:0b:c9:3e:3c:
ee:f5:c4:74:5a:4c:3e:8c:cf:56:bb:56:58:91:b0:d6:3c:f1:
31:6c:e8:03:4d:76:50:d6:b7:f7:5f:c8:c1:6d:b4:c7:d7:ca:
84:b4:5b:3e:dc:76:82:5d:82:5d:a7:93:54:b7:40:e8:f6:67:
66:e9:4e:e9:12:2d:0b:05:7f:d0:2e:b5:a1:6d:1d:58:aa:14:
03:86:04:7f:47:3b:67:96:6d:82:5b:c6:49:7e:35:21:98:a2:
48:20:98:38:53:86:5d:4e:fb:27:10:e9:c0:b4:cb:af:4a:56:
03:16:0a:e5:b6:d1:eb:65:1c:89:8d:f7:39:08:fe:d1:b7:e0:
64:2b:8e:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:54 2025 by rpki-client