Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ie-Jxt3yyW_aIVCu4RYuYD2WTK4.roa
File: ie-Jxt3yyW_aIVCu4RYuYD2WTK4.roa (raw, json)
Hash identifier: uhm+I90fVgrrhYltQaJthA/Y2bQN269mt5VlyUvHydc=
Subject key identifier: 89:EF:89:C6:DD:F2:C9:6F:DA:21:50:AE:E1:16:2E:60:3D:96:4C:AE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019138FB63A83C1B8CCA5CC99E25B2AD8D35
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ie-Jxt3yyW_aIVCu4RYuYD2WTK4.roa
Signing time: Fri 09 Aug 2024 21:11:24 +0000
ROA not before: Fri 09 Aug 2024 21:11:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 09 Aug 2024 22:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:38:fb:63:a8:3c:1b:8c:ca:5c:c9:9e:25:b2:ad:8d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 9 21:11:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89ef89c6ddf2c96fda2150aee1162e603d964cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:4f:b1:b0:05:ea:30:80:90:39:4e:3b:87:
32:b3:03:d8:17:be:46:04:2b:d8:03:35:af:7e:05:
a1:1a:2f:31:4c:72:b2:c6:cd:f8:4f:f6:f1:f3:36:
8f:eb:b2:8f:e2:27:a8:c4:9e:d6:92:0f:f8:4d:d6:
97:a2:a7:67:e8:a5:78:12:c9:1f:24:b3:c5:a1:4a:
f3:73:b4:de:f0:23:77:aa:70:c9:3f:d5:e4:d7:dc:
28:ed:e9:ba:48:6a:6e:9e:c1:89:f5:35:00:ec:29:
31:d5:c4:dc:5d:7c:5e:7f:a2:a3:e0:8b:57:35:84:
2b:60:f7:47:82:53:31:7e:cc:aa:9d:3a:ab:76:95:
60:cc:af:56:be:31:06:1d:5d:58:91:5d:cb:8d:f9:
ab:aa:87:86:20:8d:ac:7e:ab:a1:e2:9e:9c:25:b0:
21:cf:3a:1e:c6:2b:ba:95:28:22:85:34:d2:a9:39:
94:16:89:7a:69:a3:c2:6b:21:59:07:d7:bf:13:13:
b0:3e:52:93:23:35:e6:07:f2:f2:b5:47:bc:97:6a:
df:ad:36:99:0c:2c:f6:fc:42:df:1e:c6:86:cf:1c:
fa:9e:6f:16:6b:a3:14:6a:bb:3f:46:07:a0:77:68:
8a:5d:25:10:db:ef:a6:ed:9c:b2:87:f2:e8:8b:f5:
7e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:89:C6:DD:F2:C9:6F:DA:21:50:AE:E1:16:2E:60:3D:96:4C:AE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ie-Jxt3yyW_aIVCu4RYuYD2WTK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
79:82:4f:21:9d:ac:6f:30:4b:e1:ac:b0:cc:e7:fd:1e:3f:49:
1a:f9:5c:2c:1c:7d:d7:2b:cc:89:11:af:e8:cd:25:38:77:ef:
21:76:b5:c8:fe:72:cd:49:e3:60:25:68:fc:9c:55:4a:b5:ae:
b1:5e:69:08:38:c7:c8:87:fb:cb:61:6a:ac:27:1b:d4:ed:fe:
d0:e0:ee:09:af:25:1a:00:f3:ee:88:86:14:07:de:b7:20:b3:
fc:c0:85:f9:9c:a0:bf:f4:ec:c1:e5:4f:5f:76:30:32:32:a0:
6f:b4:73:3f:8d:9d:10:36:01:52:f7:de:b3:26:57:09:49:9c:
27:8a:54:8b:8c:4f:8e:c0:91:5b:35:22:1a:88:16:9a:f5:f3:
b9:99:f3:ab:ff:16:aa:ae:e2:07:c5:1a:c4:4f:3e:30:fb:70:
82:05:3d:fd:8b:a4:83:8e:c5:a0:00:63:bc:d3:eb:1d:20:ba:
39:36:78:6f:01:16:1b:51:33:3e:55:8b:30:30:e2:cc:3f:7b:
d2:82:b8:7e:b6:ff:6f:7a:80:6b:a8:57:32:b7:70:70:31:d5:
8a:49:29:75:be:b4:ab:60:ab:3e:0f:11:2b:db:30:a3:3c:62:
dc:1e:52:b0:1e:1b:23:9c:4b:97:3a:4c:e7:e9:1e:a9:29:36:
a5:5b:f4:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:02 2025 by rpki-client