Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fsWbRobYmH43II6ZFcrrfRPXKyc.roa
File: fsWbRobYmH43II6ZFcrrfRPXKyc.roa (raw, json)
Hash identifier: ehoUfDO8LCbHrYUsac24JISoH7TZOkYjIK/XtH3Sq3I=
Subject key identifier: 7E:C5:9B:46:86:D8:98:7E:37:20:8E:99:15:CA:EB:7D:13:D7:2B:27
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191DF7DCAADA79DD42AF7D6C2BCCDA230CD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fsWbRobYmH43II6ZFcrrfRPXKyc.roa
Signing time: Wed 11 Sep 2024 05:10:48 +0000
ROA not before: Wed 11 Sep 2024 05:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128
2001:67c:64:ffff:0:191:d82c:371b/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 11 Sep 2024 06:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:7d:ca:ad:a7:9d:d4:2a:f7:d6:c2:bc:cd:a2:30:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 11 05:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ec59b4686d8987e37208e9915caeb7d13d72b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:31:ef:af:9f:5c:4d:ff:36:c8:f6:5f:a1:
c5:02:3a:8b:c6:f0:20:99:fa:53:59:bf:25:e7:6e:
62:b6:c6:52:d5:4a:2a:15:6b:7f:91:bd:18:08:4b:
18:b1:75:bf:89:4b:78:e8:45:b8:c6:b1:05:b0:b6:
f3:e2:54:0d:f7:b6:ca:f5:63:7a:3a:f1:85:9a:75:
8b:d7:ad:09:8e:c5:f0:f8:db:8f:3a:34:f3:f8:81:
75:f9:1d:0e:a5:df:9e:ff:1a:9e:ed:33:48:83:d0:
cc:b1:ea:d2:e4:df:62:1a:cc:3d:a7:ef:69:23:a9:
0d:f0:a8:e9:e7:2a:0e:ef:81:f4:9e:07:82:47:d9:
54:63:2f:4a:cf:44:4b:3b:9b:ff:f6:38:d1:ce:7a:
3b:08:09:8c:7e:05:11:e5:a7:e2:bc:2b:94:4d:d7:
98:84:78:0a:ad:96:95:3e:c7:95:6d:98:d9:f9:9c:
15:70:3a:ff:e6:0e:4f:13:a9:1b:3e:2a:97:85:a1:
5d:5a:2b:0b:df:e4:4e:a4:c1:0a:f4:d9:05:c1:c6:
38:d3:36:a1:cf:f4:34:1b:5d:d2:1c:a1:0f:f6:3a:
e1:6d:45:7a:2d:58:dd:16:0e:85:f9:14:83:06:e8:
1c:03:75:28:d8:9d:4c:b6:fa:61:18:02:b5:fb:33:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C5:9B:46:86:D8:98:7E:37:20:8E:99:15:CA:EB:7D:13:D7:2B:27
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fsWbRobYmH43II6ZFcrrfRPXKyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:d606:d79c/128
2001:67c:64:ffff:0:191:d82c:371b/128
Signature Algorithm: sha256WithRSAEncryption
2b:0f:4d:2e:c6:b3:d4:38:f9:de:37:f1:ea:c4:82:1f:e5:f7:
99:58:a0:8f:64:e1:53:53:9e:2c:b6:23:7f:78:81:14:6a:88:
da:f3:26:69:14:d2:51:93:60:2a:cd:78:af:66:3b:d1:97:87:
1c:1b:44:e9:ed:15:b8:df:c4:de:0c:7e:d2:e1:0b:68:70:4a:
96:4c:fe:28:7b:cf:98:42:90:47:c6:e1:24:5a:c7:65:2e:b8:
06:c4:a4:d8:22:7e:97:5d:5b:7d:10:f7:52:75:eb:31:9e:bb:
bf:b3:d5:0d:66:5c:77:d7:95:4f:88:ab:3b:fa:b7:6c:81:8e:
0b:21:06:5e:9a:fe:b3:64:05:33:ae:72:f7:24:df:33:a7:33:
05:31:14:ba:74:af:14:f2:9b:a4:23:a6:8c:3c:fe:5c:45:9a:
0f:b4:48:3c:4c:cc:03:64:1e:d0:45:a0:52:23:ba:eb:d5:51:
4f:c8:f8:72:65:0d:0c:c7:39:73:bf:7e:12:c0:b4:2c:d2:a2:
60:26:60:7f:f3:e1:47:06:22:2c:5b:32:f2:20:db:9e:eb:3e:
f6:71:c9:9f:23:90:85:bf:2d:78:35:48:43:fd:fa:2a:0c:a3:
37:b7:88:a7:21:51:b2:3d:0d:ac:3e:47:f2:81:f1:38:82:a7:
4e:2b:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:35 2025 by rpki-client