Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fEpOwyGWD7c8I3kybQwjJ65myts.roa
File: fEpOwyGWD7c8I3kybQwjJ65myts.roa (raw, json)
Hash identifier: 6pcdp0KWB+Yh6kP2Om43Fg+KhV6YCZKbVQmSgR+dAdg=
Subject key identifier: 7C:4A:4E:C3:21:96:0F:B7:3C:23:79:32:6D:0C:23:27:AE:66:CA:DB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01915AAC89E3E75CF106846E6FCD87987729
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fEpOwyGWD7c8I3kybQwjJ65myts.roa
Signing time: Fri 16 Aug 2024 10:12:22 +0000
ROA not before: Fri 16 Aug 2024 10:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 16 Aug 2024 11:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5a:ac:89:e3:e7:5c:f1:06:84:6e:6f:cd:87:98:77:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 16 10:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c4a4ec321960fb73c2379326d0c2327ae66cadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:84:10:7d:ef:62:6d:a8:8c:17:f6:49:cd:
00:3c:56:9e:29:d6:69:f6:00:40:9d:bc:68:26:1d:
e1:8c:11:72:8d:b3:4d:84:70:16:eb:6a:c3:87:3d:
4d:05:0a:39:a8:83:66:3f:f6:15:ee:dc:93:c2:b6:
4c:13:cd:9b:5a:13:0e:25:87:e9:d8:8c:bb:ac:25:
6a:43:7f:b7:68:e8:e3:01:9c:0a:ba:0a:7d:44:72:
e2:6f:d6:cd:b5:71:e1:ac:09:b6:05:60:cd:cd:d6:
61:4c:8e:89:69:16:ed:ca:c8:d2:04:8a:aa:16:bc:
29:6a:66:65:06:e8:c6:f4:74:09:bc:d1:eb:7a:01:
14:41:9e:d4:22:46:15:54:92:21:62:fd:62:92:27:
0b:7b:91:93:b5:03:78:bf:f4:b5:47:1f:97:5e:08:
c4:d6:e5:68:eb:d9:4a:58:90:51:ef:a6:f2:36:0c:
55:99:5c:1b:6e:47:19:45:75:3f:13:0d:b5:bb:b7:
98:2f:de:81:2d:ff:ee:c9:27:d5:13:1b:7b:78:ac:
fe:5f:f3:98:f8:c3:b4:36:96:9d:5b:e6:f6:42:68:
47:3f:fb:95:69:48:6e:68:6d:0a:86:38:e4:68:e0:
62:e0:91:b9:38:d4:75:6f:32:d5:59:3d:6a:cf:a9:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4A:4E:C3:21:96:0F:B7:3C:23:79:32:6D:0C:23:27:AE:66:CA:DB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fEpOwyGWD7c8I3kybQwjJ65myts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
1a:a8:8c:76:d8:9b:6f:03:26:3d:92:2d:48:98:99:fc:b0:0a:
53:74:e1:e2:3c:e8:de:7f:89:74:0c:1e:da:5f:69:27:46:fc:
56:18:9e:14:0b:87:93:41:b1:4e:c4:95:0b:0a:3d:27:8a:71:
0b:57:17:a2:65:49:d7:4e:40:2b:51:54:31:65:d0:fc:e3:9d:
d2:88:91:2b:3d:13:ad:d4:e4:67:23:d5:f6:3a:64:5f:3b:65:
83:71:28:1c:f1:23:22:10:40:d9:66:0e:dd:0f:0e:d0:bf:a6:
97:3e:55:67:ec:14:e9:cd:54:a6:93:6c:cf:c4:8a:3a:cb:bc:
8f:da:83:5a:e0:0d:9f:3d:9b:f3:de:1e:24:dd:97:b6:5f:32:
03:53:94:63:5a:7b:1d:5a:44:6c:94:52:a2:49:d8:05:92:4f:
30:41:5a:c5:e5:1e:62:10:d9:79:34:51:f3:bb:86:40:22:9e:
aa:e8:fc:d4:9f:6a:60:34:55:33:5d:48:b1:5b:d6:1d:b6:89:
76:3c:dc:b8:75:a7:13:f1:fe:41:34:ab:19:d4:6b:97:31:e7:
31:6a:63:57:b7:20:3b:1f:07:62:3e:46:f6:a9:58:f9:cf:70:
1a:a6:b3:d2:64:bd:4e:88:0a:73:63:6f:7f:2a:ca:fd:1d:3b:
6d:75:64:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:00 2025 by rpki-client