Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dCMgMCe9Wx8HN7dYsIB9GGaG3Ls.roa
File: dCMgMCe9Wx8HN7dYsIB9GGaG3Ls.roa (raw, json)
Hash identifier: W/3apWzG/vKRFYUAO97PikhID83cwS9MEVOblrXpjDg=
Subject key identifier: 74:23:20:30:27:BD:5B:1F:07:37:B7:58:B0:80:7D:18:66:86:DC:BB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913EF711476C55C76D7187A375B6682355
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dCMgMCe9Wx8HN7dYsIB9GGaG3Ls.roa
Signing time: Sun 11 Aug 2024 01:04:24 +0000
ROA not before: Sun 11 Aug 2024 01:04:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:3ef6:f7af/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 11 Aug 2024 01:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3e:f7:11:47:6c:55:c7:6d:71:87:a3:75:b6:68:23:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 11 01:04:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7423203027bd5b1f0737b758b0807d186686dcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:ce:41:84:df:10:c5:c9:47:62:69:3f:e1:
36:70:bf:f1:b2:0e:4a:1a:d5:d1:5d:85:04:db:c4:
d8:42:73:b4:a8:dd:04:31:ab:aa:fe:9e:e0:15:44:
6c:37:21:25:f3:e6:01:f9:6a:59:90:dd:ef:66:86:
49:f8:a3:96:a7:2e:e7:b6:c8:47:f9:ca:87:af:31:
22:a4:4e:26:68:3d:c8:15:10:11:b6:e4:35:58:ff:
4c:04:fb:07:1c:7e:44:38:9b:f7:73:c6:bc:41:9e:
1b:3f:1a:91:5b:47:d4:fb:8d:06:0b:23:3e:c7:d2:
86:10:32:76:a9:fc:56:49:f1:80:77:ed:c0:78:01:
f5:ae:db:ce:88:23:a3:26:7c:3e:15:95:71:f2:ca:
f5:f7:78:a6:a8:57:33:06:c5:1d:d2:c6:94:e2:be:
49:7e:f8:00:50:f7:2f:f1:c9:e3:24:cd:f2:7f:7c:
41:d0:a3:b5:50:84:cf:bd:05:84:68:41:25:72:e6:
5a:d1:59:27:96:bf:16:12:f1:a6:02:7c:97:df:93:
f3:ca:9e:11:57:1f:e3:15:a6:c7:8d:60:21:7a:f1:
d1:3d:2d:cc:85:bd:48:85:88:e6:c5:b4:f3:71:df:
b0:91:11:57:04:e4:5b:1f:81:46:bf:8d:61:ea:a5:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:23:20:30:27:BD:5B:1F:07:37:B7:58:B0:80:7D:18:66:86:DC:BB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dCMgMCe9Wx8HN7dYsIB9GGaG3Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:3ef6:f7af/128
Signature Algorithm: sha256WithRSAEncryption
3b:3b:cb:6d:bc:a0:c7:48:f4:7b:65:90:9c:ac:ef:d4:7d:09:
fa:fb:89:b7:95:28:0f:54:3a:45:bb:f9:d7:f1:a3:2d:e8:bc:
da:15:17:5a:6e:96:c8:4a:74:bc:e8:6d:9a:80:b6:2f:29:cc:
da:10:9d:91:e4:20:ca:cf:54:60:f8:3a:75:04:9b:e9:2a:5f:
11:c0:96:8e:28:60:de:9f:9f:ef:c3:e3:fb:91:da:66:59:bf:
ca:14:da:40:7a:b1:c7:9e:1a:9b:ee:0d:e5:43:ad:c0:4d:4a:
21:62:cf:bf:6f:14:e9:20:88:3a:f3:49:a8:2a:b0:8c:5b:35:
e5:4f:8f:b2:5b:07:54:bd:17:55:e7:ac:8c:d4:0d:dc:b7:7c:
26:78:ba:6a:98:f2:3b:a4:bd:2b:6e:3a:14:9f:e7:ed:b6:77:
51:0f:9d:48:e5:89:f9:d7:23:9b:71:24:53:cb:72:52:df:47:
74:7e:86:d5:d9:90:f5:dc:38:3f:d3:46:6f:94:02:f4:6b:bd:
74:c5:8c:6a:1c:14:1f:55:93:90:ee:a4:c4:6b:74:3d:63:1b:
16:24:5e:b2:4c:b6:89:02:ff:c8:73:8d:a2:a9:a6:dd:23:3e:
14:38:29:c2:15:bc:bc:d1:9e:20:27:5e:ed:eb:f4:80:94:8a:
38:99:9b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:43 2025 by rpki-client