Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dO4JlDcS_A_XIIYtMjgouC3xwnM.roa
File: dO4JlDcS_A_XIIYtMjgouC3xwnM.roa (raw, json)
Hash identifier: VTSMX/qFasY7oXYU2/9DZP7q6hhFARZWWUix3cUVAtE=
Subject key identifier: 74:EE:09:94:37:12:FC:0F:D7:20:86:2D:32:38:28:B8:2D:F1:C2:73
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01919276C40373D08DEEEE9E8C006C5A797E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dO4JlDcS_A_XIIYtMjgouC3xwnM.roa
Signing time: Tue 27 Aug 2024 06:12:22 +0000
ROA not before: Tue 27 Aug 2024 06:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 Aug 2024 07:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:76:c4:03:73:d0:8d:ee:ee:9e:8c:00:6c:5a:79:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 27 06:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74ee09943712fc0fd720862d323828b82df1c273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d9:e6:ea:43:9a:db:eb:98:31:27:ae:4a:26:
a5:90:ad:bb:aa:48:77:01:c0:56:fa:77:9e:89:07:
ee:65:8f:a3:f8:55:c7:b2:9d:78:cc:f1:0b:4d:70:
6f:79:e9:56:1e:4c:78:b5:0f:92:82:01:5d:af:1c:
ff:80:a8:d6:f9:1c:d7:9f:ef:0a:30:f7:5a:c5:85:
3d:3f:ec:b6:b1:82:2a:02:00:e7:f6:b8:74:65:17:
54:c5:c2:c6:b1:66:c0:aa:d1:03:9c:6b:e7:53:d2:
67:81:ad:10:ef:29:36:fd:9b:d4:69:55:8c:a0:64:
66:ee:7c:3f:9a:6b:dc:d4:7b:18:a5:d2:5c:24:52:
aa:8a:17:e1:15:cc:90:ff:c3:35:b7:83:c3:c5:ae:
85:93:1e:94:cb:69:12:99:c6:87:54:20:32:8e:f3:
1f:09:94:9e:f3:00:f1:69:5f:cf:f8:80:4a:3e:4b:
85:a8:37:ea:b4:f5:95:90:39:5a:52:a1:89:a5:4b:
0a:7f:d6:c2:9b:f1:8a:82:14:1d:4e:1f:08:36:0d:
36:3e:59:fc:fd:de:09:77:06:0a:e5:55:e0:f8:57:
39:e4:fa:f6:13:7e:8a:f2:11:1b:af:3c:9b:f5:6a:
59:0b:5e:87:1f:22:43:82:07:aa:41:fe:4c:dd:b2:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EE:09:94:37:12:FC:0F:D7:20:86:2D:32:38:28:B8:2D:F1:C2:73
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dO4JlDcS_A_XIIYtMjgouC3xwnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
32:68:53:ab:08:58:c7:1a:2a:0e:9e:bf:6e:c2:fa:23:7d:78:
3a:d5:06:ce:b1:0e:d6:ee:a7:00:95:43:4b:f9:56:bb:19:50:
1c:ef:bd:84:4a:a4:12:fc:c3:2f:f1:b5:dc:d8:0b:90:a0:7d:
34:29:cc:f0:8c:04:ea:6d:fd:37:f5:80:d6:17:7b:db:80:1d:
ee:08:cc:e5:08:d5:73:4b:bc:c1:2c:7c:ff:2b:d2:42:e0:d9:
67:1c:0a:6b:6d:fc:22:e1:a4:e9:4f:5d:7f:12:20:20:4b:50:
6b:fd:80:16:63:cc:37:5b:95:90:15:05:b4:0f:26:42:30:92:
a3:bd:cf:9b:75:97:07:86:9d:9e:42:0a:dc:61:fa:29:ad:70:
54:bc:e2:58:a6:38:a0:7d:c2:4f:54:4d:5d:91:82:15:3d:62:
c1:db:1a:10:2c:e1:44:a8:61:b0:b8:6f:d2:69:cd:3d:f5:f5:
95:d9:54:16:bb:1f:19:39:c1:73:6c:14:18:be:6a:9e:b7:bd:
f0:19:b8:88:45:4a:5f:6a:21:64:51:74:02:ec:61:38:b8:d3:
bb:31:db:47:eb:4b:d3:59:4a:6d:b7:2c:f5:d6:a8:07:d3:3e:
dc:e1:59:b5:5e:c7:cd:07:2a:3d:d1:69:eb:e1:76:dc:51:45:
b5:b0:77:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:52 2025 by rpki-client