Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/j8AFXv47aKA5XyihsXPCTQbkW6Y.roa
File: j8AFXv47aKA5XyihsXPCTQbkW6Y.roa (raw, json)
Hash identifier: VWX4YGW2FhHXDaZxvSC26866Q8TpRRXuXBxWaIRSjEU=
Subject key identifier: 8F:C0:05:5E:FE:3B:68:A0:39:5F:28:A1:B1:73:C2:4D:06:E4:5B:A6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01910320282B7D04F63EEA65C0D3E062523F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/j8AFXv47aKA5XyihsXPCTQbkW6Y.roa
Signing time: Tue 30 Jul 2024 10:12:04 +0000
ROA not before: Tue 30 Jul 2024 10:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 30 Jul 2024 11:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:20:28:2b:7d:04:f6:3e:ea:65:c0:d3:e0:62:52:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 30 10:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fc0055efe3b68a0395f28a1b173c24d06e45ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:29:7f:0a:a3:03:83:ed:28:77:37:c5:fb:
a2:e5:41:23:1c:0c:31:2c:db:40:e2:d5:40:49:84:
a8:7a:ef:43:e3:cc:7f:a9:f3:60:3c:c9:e8:f1:f4:
c9:11:ab:e4:dc:92:6a:08:cb:2a:57:e4:02:c1:1c:
38:cd:13:30:da:b5:f5:b1:34:f0:ce:6d:59:8a:ff:
ed:26:b2:14:57:db:ef:66:05:06:a6:66:f5:ac:09:
1c:3f:82:cb:e9:d9:ba:e1:48:a9:72:9e:16:8a:3f:
73:e7:d9:4d:79:12:ee:ca:56:7c:51:6e:a5:d1:a9:
73:8d:d2:dd:4b:8d:7b:d8:2c:6b:db:0f:2e:ae:10:
6c:46:f0:c9:60:be:aa:d6:f8:ae:0d:27:f4:56:69:
85:2e:f9:29:8f:7b:b5:7c:21:25:57:c5:c4:35:76:
ab:0a:f5:8b:03:fc:bd:99:9a:38:46:c7:48:0d:8f:
c3:dd:93:2f:7e:88:29:52:a7:dd:d4:6f:7a:48:14:
be:c0:a7:3f:d2:78:84:89:7d:41:1c:1b:0e:b0:83:
02:96:41:14:24:07:b9:90:28:2b:91:6e:d8:8c:b7:
1d:f1:17:b5:96:e6:b0:d2:f4:8c:21:08:4f:b9:48:
ee:5b:f3:fc:fd:d4:66:d6:c8:67:11:b0:58:a4:f8:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C0:05:5E:FE:3B:68:A0:39:5F:28:A1:B1:73:C2:4D:06:E4:5B:A6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/j8AFXv47aKA5XyihsXPCTQbkW6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
66:72:c7:e4:57:dd:46:50:38:63:79:ce:1a:ee:8e:ab:f7:52:
3c:0c:8a:93:58:23:6a:95:61:94:4d:75:2e:63:6b:7d:e4:9c:
c7:23:2b:ea:5b:87:26:72:b7:7e:9c:19:9c:68:ba:04:00:5d:
e9:08:af:5f:e8:26:2c:73:93:59:58:4b:57:f3:7a:12:26:e4:
24:36:73:58:bf:c2:27:d1:80:51:25:58:cb:67:45:75:ab:e8:
10:35:2f:27:4b:12:7a:79:c6:1a:02:04:73:1c:c1:b3:a3:17:
10:b8:25:81:07:f5:31:06:ae:d8:32:76:32:55:41:d7:94:7f:
fc:3c:d3:66:de:fa:6f:63:7f:30:23:68:0d:7d:d7:e0:d4:10:
60:ef:f8:5f:54:40:a1:0e:b3:7c:20:42:16:60:1d:b3:41:15:
98:3e:da:fc:38:6c:23:5e:19:3a:f3:46:a3:48:ed:88:44:4c:
ab:cb:fb:37:60:9b:09:08:31:13:b2:63:91:2e:05:e9:6a:4e:
1a:27:ed:11:cb:99:38:68:73:0f:fb:3e:55:91:2b:03:74:0b:
9f:3f:ff:c4:f1:3e:25:bd:f4:77:e7:de:03:dc:f9:03:1d:1d:
be:82:ac:56:d5:7b:af:36:ed:d6:b4:6d:ad:62:06:d7:22:9b:
8c:96:ab:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:11 2025 by rpki-client