Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/j6tqxGDcJL_sW7oCuwK0W1VjfHA.roa
File: j6tqxGDcJL_sW7oCuwK0W1VjfHA.roa (raw, json)
Hash identifier: jYcvQlF4OKl0+XkHaMBbmicn4AXuBjm3jls07rhD0DQ=
Subject key identifier: 8F:AB:6A:C4:60:DC:24:BF:EC:5B:BA:02:BB:02:B4:5B:55:63:7C:70
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019125736340E39BB975C2EDC6E094EC7B61
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/j6tqxGDcJL_sW7oCuwK0W1VjfHA.roa
Signing time: Tue 06 Aug 2024 02:10:04 +0000
ROA not before: Tue 06 Aug 2024 02:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 06 Aug 2024 03:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:25:73:63:40:e3:9b:b9:75:c2:ed:c6:e0:94:ec:7b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 6 02:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fab6ac460dc24bfec5bba02bb02b45b55637c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:d1:da:a8:cb:44:11:f7:ef:42:6c:f1:a9:
72:ab:c8:ff:00:92:25:a5:e2:a8:a4:70:ec:fc:f8:
94:e5:82:d4:81:e3:b6:7e:04:7b:5d:3b:8a:9d:6e:
16:d6:9a:1c:bd:ba:b2:f6:38:0b:44:09:ff:14:8c:
d0:94:3d:6c:46:48:1e:38:65:f1:c2:64:57:8c:7d:
fa:05:d7:7a:e9:71:41:bb:7b:52:03:16:5d:5d:ea:
ae:12:78:07:a0:f9:ea:d3:8b:97:73:97:4b:f9:b6:
b1:90:cc:32:ba:3c:08:ac:24:3c:63:a9:ed:89:9f:
eb:97:b1:fd:0e:3c:76:c0:85:50:03:41:02:e9:c0:
33:57:d3:cf:ad:03:f1:94:cd:0d:3d:e8:63:6e:a4:
e0:fb:2a:60:c4:d7:a8:f1:c8:2a:7f:93:bc:62:c8:
0b:62:b3:21:ec:ef:ad:d9:1e:88:13:15:fc:05:eb:
d0:64:9e:f2:17:7a:3b:05:b2:fd:e4:9d:3b:3e:92:
28:45:32:64:b1:07:05:9c:c9:53:1d:79:21:3b:46:
f5:c4:e9:72:79:0d:3b:dc:f4:bf:41:00:a1:14:9b:
8c:37:48:4a:09:b7:21:14:a8:d3:d8:a2:16:f1:68:
57:a8:ad:af:59:7d:e8:27:16:ac:47:2e:5d:9f:20:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:6A:C4:60:DC:24:BF:EC:5B:BA:02:BB:02:B4:5B:55:63:7C:70
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/j6tqxGDcJL_sW7oCuwK0W1VjfHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
87:f2:8f:5f:bb:c6:66:bd:b6:bc:fc:f9:45:0d:6b:0b:3f:56:
aa:5d:58:ee:23:2f:0e:c5:d7:52:19:ec:45:59:0a:8a:bd:e8:
36:4a:cb:fd:4f:45:99:29:cb:f2:13:42:5a:64:96:e8:f8:dc:
31:0f:57:ca:58:66:4c:71:67:b7:05:0c:33:88:85:c6:f3:2c:
17:f7:a3:b4:6e:d3:92:9d:50:88:fb:39:c4:33:51:49:bc:ac:
4e:3b:6f:d4:8d:91:85:07:31:59:2d:2d:cc:da:61:af:d3:ea:
2c:ef:34:35:0e:37:40:36:20:f5:5e:51:ae:d1:23:65:57:90:
2b:17:bb:7c:b7:af:3f:88:63:dc:9a:ad:01:c6:38:f5:f0:80:
e2:3b:a3:ec:74:c7:e8:b0:9d:bf:62:93:1e:53:26:b4:4e:34:
52:38:c0:8d:60:23:3c:3d:dc:54:18:81:6e:c0:4f:19:91:bf:
bb:21:d4:60:bf:43:cb:8f:8f:f8:c7:63:55:fc:45:20:67:da:
dd:51:29:95:62:68:bd:4a:2b:c3:20:21:ac:15:b3:82:1e:21:
78:40:3b:f3:d5:15:4a:3e:de:28:86:0a:d9:52:33:e9:62:4e:
9e:04:d6:61:d3:e5:16:f3:0b:f0:58:61:e2:20:35:90:78:1a:
d0:4b:82:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:18 2025 by rpki-client