Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hVZkNyVRIqxtp887vFXb8q0Gg6M.roa
File: hVZkNyVRIqxtp887vFXb8q0Gg6M.roa (raw, json)
Hash identifier: TwppieNbuI1iMMdzGXFCPa8IXu8doyutI8zV44MFigQ=
Subject key identifier: 85:56:64:37:25:51:22:AC:6D:A7:CF:3B:BC:55:DB:F2:AD:06:83:A3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01914684471CA41CA40FE08DAB7ED08DB78B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hVZkNyVRIqxtp887vFXb8q0Gg6M.roa
Signing time: Mon 12 Aug 2024 12:15:59 +0000
ROA not before: Mon 12 Aug 2024 12:15:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 12 Aug 2024 13:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:84:47:1c:a4:1c:a4:0f:e0:8d:ab:7e:d0:8d:b7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 12 12:15:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85566437255122ac6da7cf3bbc55dbf2ad0683a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:51:97:15:d7:0a:b9:2e:04:2c:aa:67:d3:
8a:d1:43:89:ec:71:4b:34:39:f1:ed:da:16:3c:1f:
6b:77:3b:d8:33:00:8f:c7:14:23:ef:46:ec:96:7f:
7b:f7:14:3a:48:88:e1:f2:af:25:4a:5c:f0:2f:13:
2e:d3:55:48:7f:39:4f:5c:d1:63:a2:e2:f3:72:32:
7a:0b:20:af:f6:4d:f2:9b:9c:49:99:89:46:8e:21:
8a:6b:a7:2a:90:ae:68:0d:13:ec:dc:a5:68:a2:e6:
bb:bd:86:df:96:1c:74:6f:d8:7a:33:ac:3b:f8:9d:
91:3c:3d:1c:0f:72:16:00:45:0a:d5:fc:c3:58:ec:
b8:24:30:21:40:64:65:5d:14:5f:36:6b:37:d9:68:
c7:82:32:27:8a:70:a8:e0:13:2d:bb:a7:2f:1a:9a:
95:d2:ef:df:61:88:b5:57:e3:a4:f8:9c:88:37:bc:
03:3e:9c:5b:f3:18:84:96:c2:5c:37:fc:aa:87:1b:
09:77:5e:bd:96:b2:f8:f1:1e:71:fd:cd:c8:fd:6d:
92:51:de:5f:43:13:7f:06:3b:8f:35:30:1b:ca:84:
fb:f0:da:f5:67:50:c6:88:9d:df:f4:3a:1b:bd:de:
e7:b6:4e:35:f9:17:3b:60:c0:b0:00:92:20:d2:31:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:64:37:25:51:22:AC:6D:A7:CF:3B:BC:55:DB:F2:AD:06:83:A3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hVZkNyVRIqxtp887vFXb8q0Gg6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
6f:40:47:00:63:e6:28:82:f9:52:be:d0:51:92:9e:56:5c:c3:
d2:50:79:58:ac:a6:fc:8d:d7:dd:f2:13:58:8b:92:36:95:58:
ac:15:37:32:c0:28:89:50:68:a4:1f:3d:5f:1e:da:75:ec:3a:
7c:fe:a3:e4:10:49:85:6d:e4:0d:51:17:65:10:ef:71:04:02:
d8:b1:5f:91:24:9d:d3:3e:53:95:3c:b3:fa:52:5f:4f:79:c6:
d5:85:e8:a8:f6:04:aa:8a:92:19:be:f1:c0:ca:d3:3c:5d:b2:
5e:82:b1:07:8b:37:6c:b6:e2:5f:73:1c:09:04:68:3b:42:66:
fd:fd:0c:12:87:f2:02:97:6d:19:d1:80:ed:44:39:2a:dc:b1:
76:57:a5:19:3a:21:29:62:cf:40:fc:ec:0f:79:97:da:9b:66:
67:8d:7d:be:04:66:78:0a:a4:d2:e8:06:fe:c2:13:75:23:e0:
20:cd:dc:53:f8:ec:dc:14:3b:7e:54:a4:a2:61:d9:6f:f8:b3:
22:de:63:6e:94:50:ee:a6:c7:3b:32:04:c7:a1:d1:9d:96:cb:
95:6f:b1:04:65:23:0d:f8:27:de:1e:97:7c:dd:a2:d3:fa:a3:
e4:4a:11:32:d5:7f:5f:81:79:fe:0c:87:b0:ae:46:75:de:b3:
d0:17:f9:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:41 2025 by rpki-client