Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jxkHODjp8M7gqbHdjTIIqSBZfFs.roa
File: jxkHODjp8M7gqbHdjTIIqSBZfFs.roa (raw, json)
Hash identifier: RqSiZgRWvC9Zx/n+RWouAB2wx20nOONsIILvkmfHjRw=
Subject key identifier: 8F:19:07:38:38:E9:F0:CE:E0:A9:B1:DD:8D:32:08:A9:20:59:7C:5B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01914F198ABF91D1142AC57D915415B0BE52
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jxkHODjp8M7gqbHdjTIIqSBZfFs.roa
Signing time: Wed 14 Aug 2024 04:15:59 +0000
ROA not before: Wed 14 Aug 2024 04:15:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 14 Aug 2024 07:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4f:19:8a:bf:91:d1:14:2a:c5:7d:91:54:15:b0:be:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 14 04:15:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f19073838e9f0cee0a9b1dd8d3208a920597c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:6e:c1:fb:31:18:a7:89:e8:9f:3f:b9:71:
81:a6:0b:64:2e:3d:2a:26:ee:97:8f:53:bb:18:2e:
7b:28:48:79:04:c5:24:9d:42:6c:fd:d9:bb:10:f5:
12:4a:b9:7e:c7:54:af:37:22:67:68:23:45:d8:34:
33:20:2d:97:21:62:cb:10:ba:d4:85:14:90:cd:7f:
b0:38:33:6f:b9:3c:65:67:19:32:e9:06:d2:07:bc:
83:92:18:45:60:5c:e8:0e:b7:7e:d5:e7:38:4d:f6:
f6:ad:8a:66:de:fe:00:70:3b:1e:34:da:7f:2e:62:
c3:f4:01:cd:2a:50:ef:a6:b8:e7:1b:6c:87:c9:26:
56:1d:bf:fa:2b:9a:f2:8c:0f:6a:95:ee:ea:8e:58:
50:f5:ca:7c:75:3a:d1:f6:94:dd:37:93:8b:b4:40:
4b:31:94:0c:4a:39:76:47:08:86:ed:5a:31:3b:d1:
e1:3d:18:81:70:35:fd:68:da:90:09:de:cb:6a:04:
f0:74:43:8d:9c:00:de:21:ae:88:5c:fb:3b:99:08:
41:04:77:7e:ae:38:ce:b9:cc:c1:ce:6d:0a:da:2c:
48:c9:25:7e:31:c3:bb:a9:95:3d:7d:11:4b:95:f7:
ed:76:69:ca:73:96:ae:76:1b:03:bb:5c:b0:21:52:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:19:07:38:38:E9:F0:CE:E0:A9:B1:DD:8D:32:08:A9:20:59:7C:5B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jxkHODjp8M7gqbHdjTIIqSBZfFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
12:fb:da:42:25:1d:78:55:94:47:a0:2e:39:92:c8:26:8e:3c:
b7:e4:d9:e7:9c:33:e8:32:fd:66:10:40:4e:ed:73:c4:84:f0:
76:02:7d:40:30:f5:b7:3b:a6:31:7b:00:a0:88:ad:63:90:31:
e7:d6:80:c0:34:fa:a8:b1:e9:39:e1:20:ed:47:c8:16:d6:8c:
72:e7:d6:c4:9b:d9:94:22:10:f9:34:de:55:b9:74:53:c8:e5:
38:71:02:c8:b7:01:bc:43:d8:39:9b:c9:7e:51:fb:ca:92:d1:
f7:71:5c:45:61:8b:70:54:ba:4a:6e:29:8f:26:af:7f:41:9f:
4e:ec:75:49:a8:09:ed:6d:4d:79:a8:03:31:8d:6b:e9:76:f2:
cc:a6:d5:c4:55:04:21:d4:b2:7d:14:25:95:27:d1:68:9e:87:
96:9d:1d:28:c7:2b:42:98:e7:92:47:10:34:0d:27:92:fb:8d:
5d:0b:92:3c:12:6b:d1:27:9f:92:e8:d0:ac:64:4a:03:3b:79:
44:c8:0d:b2:51:89:ac:6f:d1:41:37:79:c2:46:9a:f4:e2:28:
68:24:a5:98:05:ae:06:45:e0:88:65:c9:45:41:b6:c0:ee:c2:
b3:29:7a:a3:e0:ac:06:0a:f0:0a:9b:83:63:7c:01:2d:9d:b6:
d9:5c:a1:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:41 2025 by rpki-client