Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fXtffPm34aIWqBldawAtITE8Ct4.roa
File: fXtffPm34aIWqBldawAtITE8Ct4.roa (raw, json)
Hash identifier: JLkiLN689AA8phObWaYTV6YhoxEXT8ag7JtGgMFtsw4=
Subject key identifier: 7D:7B:5F:7C:F9:B7:E1:A2:16:A8:19:5D:6B:00:2D:21:31:3C:0A:DE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193136365BB7CAE05B8A3CF41796817509C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fXtffPm34aIWqBldawAtITE8Ct4.roa
Signing time: Sun 10 Nov 2024 00:05:01 +0000
ROA not before: Sun 10 Nov 2024 00:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:1363:2150/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 10 Nov 2024 00:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:13:63:65:bb:7c:ae:05:b8:a3:cf:41:79:68:17:50:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 10 00:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d7b5f7cf9b7e1a216a8195d6b002d21313c0ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:b9:44:7e:d7:5c:c3:9a:a4:c6:49:e2:c2:
39:81:b4:16:62:2e:82:3c:88:8a:10:ee:9a:9a:d7:
b7:20:73:e7:d4:b7:46:67:be:3a:9e:d6:7a:8d:8b:
9f:b4:d1:80:d7:ef:55:d0:49:6e:c6:2b:8a:0c:f0:
d5:85:bc:68:d1:20:a3:ce:98:56:8a:46:36:3a:aa:
6b:07:b2:a0:28:48:3e:cc:01:d8:5e:48:3a:f2:d9:
64:3e:de:6c:85:d5:91:2d:40:e7:78:19:c8:f4:d9:
4c:e2:a5:e3:a8:07:d5:29:18:3b:b4:02:4a:d2:a8:
81:42:f7:24:0e:25:d8:b5:ea:eb:97:1d:38:69:c7:
c2:6b:19:4b:b7:42:5b:5f:39:a3:5a:3c:38:29:30:
c0:36:14:51:41:f6:83:78:3f:90:e8:02:ab:19:cf:
d6:37:76:f2:95:7b:8e:7a:8c:84:5e:86:0f:72:33:
ef:20:8f:5d:d4:f3:e9:98:6b:0e:de:ef:c7:fb:5a:
22:72:76:b4:86:ab:7f:24:6c:ae:2d:85:a1:86:a7:
40:21:7c:4c:0a:36:07:49:ff:64:60:6b:92:7a:37:
3f:9e:d8:55:49:fc:fa:cb:02:8c:94:43:b9:2a:9c:
1b:15:2e:40:d6:49:10:4b:ab:88:b1:e9:3a:ca:27:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:5F:7C:F9:B7:E1:A2:16:A8:19:5D:6B:00:2D:21:31:3C:0A:DE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fXtffPm34aIWqBldawAtITE8Ct4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:1363:2150/128
Signature Algorithm: sha256WithRSAEncryption
1c:46:3c:7b:5c:b6:33:86:8b:43:de:10:f2:1a:86:07:ba:30:
49:13:87:40:4f:69:f3:b1:a7:97:1c:30:d7:fe:13:5c:fb:c2:
02:8a:3f:8d:60:73:4e:5c:19:c8:d4:78:46:67:8f:e2:40:5d:
24:84:7f:73:91:1b:e8:3c:2f:bc:1d:a3:c9:f4:80:fb:9d:5f:
f3:18:4e:58:34:21:26:27:dc:94:c5:86:0d:0e:3f:d4:76:08:
8b:49:5e:1e:3a:91:da:a8:82:43:74:de:ef:c1:7a:e6:e2:22:
f6:ee:ae:35:aa:4c:fc:02:53:ba:6a:f4:d4:72:37:a5:9d:61:
56:c9:35:2b:02:ea:da:71:49:58:23:1a:56:95:2f:11:1d:40:
df:de:73:8b:35:24:82:dc:4c:0d:70:c9:88:ef:73:8b:5a:1f:
27:fd:92:6f:cf:b2:b0:51:85:2a:1b:b7:83:2a:c6:8c:79:86:
30:86:59:60:e0:8d:5b:93:78:31:9a:0a:f3:1d:51:84:5d:b7:
26:79:c6:ee:c1:bc:d1:7e:12:62:8b:85:9b:07:b1:d5:ac:74:
5e:db:77:25:9d:82:2a:17:c3:2b:9d:12:26:ac:a5:92:4f:21:
27:90:90:fa:2b:02:1b:37:9a:c2:c6:28:1b:cd:98:e8:99:3a:
42:d8:bc:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:27 2025 by rpki-client