Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/h_pMwVP16lV9nUhnC0Ul3NYa3h8.roa
File: h_pMwVP16lV9nUhnC0Ul3NYa3h8.roa (raw, json)
Hash identifier: /QhLO/X/C5ntHotd+d20ctIXpK+Ae0/8dZPjX4WJLnk=
Subject key identifier: 87:FA:4C:C1:53:F5:EA:55:7D:9D:48:67:0B:45:25:DC:D6:1A:DE:1F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B645F17990E87F098C729632A9F7F4B3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/h_pMwVP16lV9nUhnC0Ul3NYa3h8.roa
Signing time: Tue 03 Sep 2024 05:05:22 +0000
ROA not before: Tue 03 Sep 2024 05:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:b645:16ca/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 03 Sep 2024 05:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:45:f1:79:90:e8:7f:09:8c:72:96:32:a9:f7:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 3 05:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87fa4cc153f5ea557d9d48670b4525dcd61ade1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:a8:83:2d:84:8f:2d:ab:6e:fe:d7:57:05:
56:d7:dd:fb:10:62:7a:b3:ff:b2:2d:27:a6:4f:e7:
8d:07:90:30:36:ef:e5:fc:ff:ce:0a:22:2b:f0:b8:
6d:fa:d7:20:7d:09:76:5d:61:58:55:16:7f:ae:1a:
fe:0d:98:eb:69:71:a8:12:69:e5:0f:1a:96:6b:97:
74:3e:c2:54:dd:cc:e5:fb:a9:98:7b:a9:13:8c:ed:
98:8c:54:02:ee:38:7d:97:78:fa:69:a0:7d:be:31:
eb:40:c1:3e:75:60:8e:70:ad:68:6d:a6:f6:10:f8:
c4:fc:72:0d:05:4e:ac:1b:59:df:dd:d0:ae:83:cd:
50:72:b6:90:7b:0b:7f:d5:c4:4f:78:b2:a7:39:0c:
77:21:84:69:0c:0a:b2:98:d8:6f:fd:52:45:be:a5:
4d:a9:9f:28:95:86:78:f0:4a:33:52:1e:8f:65:9c:
3a:ae:81:90:3e:a0:5c:08:a3:91:ca:18:de:aa:65:
53:7b:45:73:00:95:a2:bf:11:21:bf:da:31:71:d4:
d3:bc:c5:8d:93:f7:7c:07:3a:2c:06:b2:ca:f2:a0:
91:3a:9f:af:c7:d3:46:fa:81:c3:9d:de:dc:52:74:
3b:90:cf:5f:cd:18:6d:0b:41:cc:54:c9:11:c0:ff:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:4C:C1:53:F5:EA:55:7D:9D:48:67:0B:45:25:DC:D6:1A:DE:1F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/h_pMwVP16lV9nUhnC0Ul3NYa3h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:b645:16ca/128
Signature Algorithm: sha256WithRSAEncryption
83:10:cd:b8:cd:8b:a3:1e:1b:a8:30:cf:6f:b4:c9:fd:74:33:
83:6e:d1:9a:21:e0:56:63:60:ab:e6:b9:45:3c:9b:fd:68:88:
36:21:7f:01:7d:c7:e9:11:49:bd:40:52:91:63:9a:ea:fc:ec:
eb:f8:41:77:68:7e:7d:6e:b1:16:32:6d:bc:76:67:4b:47:f0:
77:66:84:23:23:24:62:e0:5c:c2:54:09:0a:f1:4a:0b:1e:75:
b8:cd:b8:a4:c6:99:74:e0:ac:43:bc:6a:3d:92:b1:23:d5:14:
a1:22:fe:9a:91:8c:38:55:bf:d3:87:70:8b:3f:06:56:8d:89:
1d:af:c1:13:b3:b1:78:1c:ff:0a:ea:47:20:4e:73:23:b9:a1:
ce:03:84:34:31:c0:fa:98:d7:ed:03:ce:2a:fe:2b:0d:00:8a:
d2:45:8e:f5:be:fc:37:04:ff:50:d0:77:13:a8:ca:54:c8:e2:
bf:ea:de:2c:3d:d2:b4:4e:90:b9:09:8c:a0:d8:13:79:86:74:
b6:1d:38:54:8b:33:1c:2e:27:ff:8e:63:66:f1:f2:dd:1b:e3:
9f:2e:ce:d8:7f:4f:a9:b0:d2:30:3a:ec:6d:a8:55:6c:45:5f:
f7:db:6f:08:71:a6:60:b5:65:70:6b:2a:25:f4:c2:6c:6b:9a:
49:5d:a6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 06:47:48 2024 by rpki-client on console-fra.rpki-client.org