Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f1lerxST6wBcfi86Mp8aREclxS8.roa
File: f1lerxST6wBcfi86Mp8aREclxS8.roa (raw, json)
Hash identifier: ikH3+usYyOTkS4Mom8wOzscpNUKDScseBfIlOeSLPWk=
Subject key identifier: 7F:59:5E:AF:14:93:EB:00:5C:7E:2F:3A:32:9F:1A:44:47:25:C5:2F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191CAAD079593FA938D7659BAD1F660F4CF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f1lerxST6wBcfi86Mp8aREclxS8.roa
Signing time: Sat 07 Sep 2024 04:10:22 +0000
ROA not before: Sat 07 Sep 2024 04:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 07 Sep 2024 05:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ca:ad:07:95:93:fa:93:8d:76:59:ba:d1:f6:60:f4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 7 04:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f595eaf1493eb005c7e2f3a329f1a444725c52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:d5:bb:64:19:ce:95:5c:42:da:ac:7c:20:
fe:d1:d7:98:43:37:1b:43:d9:aa:bf:92:71:3b:19:
e4:83:70:c2:55:ef:e1:14:11:f0:a3:0e:af:ba:3c:
6e:66:e7:ca:95:29:27:25:aa:41:5a:2d:e7:4a:3b:
7b:10:42:56:e1:90:9f:c1:68:86:25:53:73:16:0c:
ec:5d:50:e5:e0:a0:35:80:fd:8f:8b:3f:8f:33:4c:
b9:4f:99:9e:32:06:4f:a7:cd:c2:d8:23:29:a8:f6:
a3:6f:0b:0a:a4:c3:d9:8c:d0:c6:36:14:2d:be:ab:
82:3e:00:b5:51:28:a4:82:22:14:8c:59:b5:27:27:
16:2a:0a:8f:a9:73:6b:a9:cd:73:a1:f6:3b:99:7b:
16:91:54:9c:a5:3f:6f:70:e3:b1:f6:bd:bb:2e:9e:
95:e8:f0:95:d5:5a:b1:e5:9c:e4:bd:a4:18:97:c1:
9c:87:3f:81:f6:5a:d2:0e:95:6a:9f:af:cc:31:28:
d6:90:8f:22:7d:83:28:4b:09:fd:b3:5d:13:39:87:
47:36:3d:ad:e1:a9:58:b4:57:0b:c6:3b:28:16:90:
89:d5:0d:d2:00:71:fd:e4:b1:d8:1e:62:7a:ec:ea:
68:b7:18:1a:3b:d6:ba:39:18:43:02:19:34:6b:6f:
09:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:59:5E:AF:14:93:EB:00:5C:7E:2F:3A:32:9F:1A:44:47:25:C5:2F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f1lerxST6wBcfi86Mp8aREclxS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
85:02:4f:6d:f1:d4:1a:37:7d:cd:cc:a7:7f:7f:cf:b0:51:cc:
d2:56:54:b9:d3:d8:39:c2:68:5b:96:cc:6b:3c:f0:98:37:17:
c8:44:da:ef:77:86:ed:0b:0d:86:db:96:a2:8c:8c:6d:2f:44:
ca:cd:4d:a3:9a:27:4c:21:48:ad:c4:88:8b:7e:18:ff:b0:f0:
a0:d5:45:d3:e0:82:c4:42:5f:c1:c1:89:ce:ec:66:60:a4:7f:
00:f5:ff:d0:3c:d0:ae:b8:f7:4e:6d:31:2b:aa:4a:9b:d1:00:
d2:b9:0c:7e:cb:e7:20:24:5d:b4:f7:90:0c:8a:d5:50:9b:2a:
e3:27:6c:0d:65:0a:13:cc:b7:b7:8e:0d:36:0e:9a:59:2e:d7:
4c:a2:1c:0f:aa:41:f5:d4:90:56:92:6d:a7:23:af:ee:09:dc:
59:e4:08:53:35:0d:54:53:f4:16:c1:7c:b3:91:74:92:f0:35:
70:55:e8:15:2d:94:9f:e7:5e:1b:c4:f3:c1:e9:be:42:45:1e:
e7:26:39:82:8d:ae:b8:08:25:97:9d:e0:3e:77:60:07:ca:8f:
ed:cf:9f:1e:02:a9:0a:30:10:81:a2:3a:a3:cf:dd:4c:16:e5:
95:ff:79:13:e7:6c:f4:43:2b:3b:7b:b3:0f:f4:22:59:dc:ac:
2c:d6:a1:51
-----BEGIN CERTIFICATE-----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==
Generated at Sat Sep 7 06:42:53 2024 by rpki-client on console-fra.rpki-client.org