Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ewGSYKGPL0ZQEDDd_PZ5XhcOX8o.roa
File: ewGSYKGPL0ZQEDDd_PZ5XhcOX8o.roa (raw, json)
Hash identifier: hMvQ4NvW+GydOxvwSyWScwp4lq717Z8aGVyi0KMTvCs=
Subject key identifier: 7B:01:92:60:A1:8F:2F:46:50:10:30:DD:FC:F6:79:5E:17:0E:5F:CA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01924E6841D32AE95C3EE41E9565E6177D5B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ewGSYKGPL0ZQEDDd_PZ5XhcOX8o.roa
Signing time: Wed 02 Oct 2024 18:05:08 +0000
ROA not before: Wed 02 Oct 2024 18:05:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:4e67:6b16/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 02 Oct 2024 18:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:68:41:d3:2a:e9:5c:3e:e4:1e:95:65:e6:17:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 2 18:05:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b019260a18f2f46501030ddfcf6795e170e5fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:46:a4:91:3c:2c:b3:8f:59:c2:4f:7f:31:
f6:0d:ab:a6:14:42:9c:31:a4:0a:48:41:a4:20:b6:
e5:c5:a5:30:cf:99:15:3b:f5:86:12:1b:c2:f5:5d:
68:d6:15:8f:4a:15:3e:2b:58:8b:df:77:88:81:74:
5b:26:47:55:77:6e:35:24:70:11:2f:1d:88:cb:69:
84:c3:30:5b:92:68:a6:ce:2c:d5:6b:72:ff:5e:89:
57:9e:d7:13:81:4d:5c:5a:4b:d8:55:da:9f:c2:60:
ef:d9:d3:1f:94:e4:18:33:f8:a3:ec:39:59:ba:48:
90:0e:20:c9:0f:ed:39:b4:a4:85:16:f4:a9:39:c0:
7a:31:6e:89:58:d9:eb:9e:c5:b6:4c:08:c5:49:6e:
60:f0:c2:fb:81:ce:fa:e2:36:b4:4f:16:ca:1c:67:
f0:72:53:af:aa:64:79:1c:7b:53:0c:ce:2e:9d:d7:
d2:c8:d1:57:9f:00:c8:83:89:40:da:34:0c:71:64:
55:2a:f1:24:30:8a:cc:5a:16:ac:f9:97:ec:83:5e:
5e:8a:37:22:ae:29:9d:6f:9d:57:a8:16:04:18:f9:
61:af:f6:d3:b8:26:f3:fb:a1:ab:70:bf:9c:de:96:
e6:b0:d9:e6:ee:18:c2:0d:08:6a:e8:cf:8f:97:12:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:01:92:60:A1:8F:2F:46:50:10:30:DD:FC:F6:79:5E:17:0E:5F:CA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ewGSYKGPL0ZQEDDd_PZ5XhcOX8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:4e67:6b16/128
Signature Algorithm: sha256WithRSAEncryption
55:5c:86:81:ba:d7:69:50:dc:80:f6:58:ab:34:c0:74:bc:3f:
fa:66:a4:63:aa:3c:31:cd:59:da:3e:9f:01:04:d1:a5:e2:b7:
60:e6:3e:c3:7e:35:00:bc:45:8b:0b:b9:18:21:f5:49:12:99:
04:bd:9a:65:fe:bb:58:44:7f:f0:28:87:54:19:60:ec:55:68:
86:ca:60:ae:f8:c2:e5:29:e5:f7:a7:89:89:82:ae:cd:25:cb:
55:c7:73:ff:3c:f4:b1:9a:50:b1:7c:32:f1:1a:aa:0b:e9:3f:
42:75:16:1a:59:09:fb:00:62:6c:15:51:e5:b0:4b:b0:18:81:
2b:60:bc:e9:4a:17:b3:c8:ae:6b:e2:73:76:ce:03:ce:da:fb:
d3:b4:33:e4:39:3d:ee:5d:6d:5d:c2:1c:59:1c:54:3f:3a:cd:
e1:b4:b9:89:b0:8e:f6:aa:47:14:0a:19:31:bd:f8:10:f5:c8:
c1:bb:4c:8d:ed:0e:3d:84:85:ee:63:91:91:4d:71:af:dc:c0:
89:b6:7f:9f:c3:56:35:7b:71:b1:5b:e9:33:6b:46:ab:10:a3:
48:1e:87:8b:05:30:2f:ba:37:ff:f7:5d:a0:e3:af:f0:d6:58:
f9:8d:ff:e0:24:e5:bb:b0:9f:45:d0:30:7d:8d:b5:a7:a5:3b:
70:70:3f:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:07 2025 by rpki-client