Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/czfj68Tx86P2ILk_-cemP0aXN68.roa
File: czfj68Tx86P2ILk_-cemP0aXN68.roa (raw, json)
Hash identifier: dgewZzep4X9lIRejXeE0a/kAKlrYFQk/J2EyFWalR30=
Subject key identifier: 73:37:E3:EB:C4:F1:F3:A3:F6:20:B9:3F:F9:C7:A6:3F:46:97:37:AF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B839D15941F4285A909608CA87D0C224
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/czfj68Tx86P2ILk_-cemP0aXN68.roa
Signing time: Tue 03 Sep 2024 14:11:22 +0000
ROA not before: Tue 03 Sep 2024 14:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 03 Sep 2024 15:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:39:d1:59:41:f4:28:5a:90:96:08:ca:87:d0:c2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 3 14:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7337e3ebc4f1f3a3f620b93ff9c7a63f469737af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:ee:d0:ca:c1:8e:20:a8:ba:2e:d0:44:4f:
bd:34:19:53:72:2f:e6:db:22:ec:7a:b5:a3:f5:ca:
5d:a2:59:e2:0c:26:ec:cc:41:d6:80:a7:9a:d7:66:
8e:aa:09:7b:6f:b1:15:84:6c:c6:e7:97:74:37:c9:
17:b9:fd:ef:d5:93:bc:74:63:0e:84:41:92:ab:21:
dd:75:33:95:9c:0d:f5:3c:5c:74:31:0a:ed:78:ca:
dc:06:1f:62:be:fa:d4:2c:8c:2b:5c:94:91:fb:90:
07:15:50:ed:cb:ea:32:27:15:72:e4:96:10:28:f8:
5f:61:d8:0e:aa:2b:9f:e8:af:a4:4d:64:97:12:d3:
9a:9c:2a:a0:24:2a:5d:65:13:1c:ac:0f:56:c3:24:
4d:25:1e:ef:ac:e3:47:0e:65:f8:0a:00:70:48:3a:
9d:27:47:b2:36:c1:fa:87:54:94:ca:3e:4c:ce:63:
20:56:bf:b3:1d:4f:32:11:01:9a:44:02:10:99:35:
c7:03:47:af:fc:aa:20:47:f3:9b:86:37:58:e7:21:
5e:66:26:7f:28:a3:36:01:7a:86:b6:5c:5f:10:15:
2f:9c:e4:a9:c9:8c:12:1b:cd:d4:ee:a1:c4:58:1b:
3a:6c:69:c5:a5:5b:93:49:98:b0:fc:87:2a:02:fb:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:E3:EB:C4:F1:F3:A3:F6:20:B9:3F:F9:C7:A6:3F:46:97:37:AF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/czfj68Tx86P2ILk_-cemP0aXN68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
60:f7:e3:32:c1:cd:c8:cb:b8:94:76:93:41:1c:c3:32:17:c6:
da:81:5d:b5:e8:e0:50:8c:19:67:c5:52:97:c5:00:4c:4e:4c:
7d:8b:af:a7:6b:88:09:ee:3a:1a:51:e1:8e:e2:9f:6a:9b:64:
4a:53:e7:47:9d:b4:36:ec:95:3b:29:76:67:f6:85:d2:2b:14:
4b:15:b7:89:be:51:02:4b:1d:e7:5d:d2:82:cf:aa:35:ca:f4:
36:1b:45:d8:96:b5:fb:cc:c3:0f:73:cd:6b:66:9d:90:ed:6f:
97:71:8e:e3:1c:41:e3:f4:38:3a:81:98:92:e3:d6:86:db:6e:
08:a7:80:96:b8:59:ac:a4:9d:b0:0f:b3:4e:60:21:2b:56:2d:
a7:99:6a:fb:56:b7:05:0c:a5:8a:80:f9:29:20:3e:bb:f4:0d:
c1:fd:1d:1e:79:7d:3e:a8:ae:49:6f:f4:bb:61:b3:01:14:1d:
f8:3a:4b:f6:e6:eb:f4:f5:c1:5d:b3:7d:b6:fd:c8:53:0f:30:
c7:be:61:36:de:e1:dc:f2:d9:41:92:10:ca:eb:79:7d:20:f2:
16:63:13:3d:73:6a:18:06:97:1f:8e:25:39:1c:a7:08:a3:45:
6b:c2:a1:5e:07:a3:41:21:2a:d4:0a:7b:1e:f3:ec:68:f8:10:
9d:5e:8a:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 3 18:16:24 2024 by rpki-client on console-fra.rpki-client.org