Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kExB2m-7Sr2sNEHGu0IxoIWhn6s.roa
File: kExB2m-7Sr2sNEHGu0IxoIWhn6s.roa (raw, json)
Hash identifier: KrxIlGVYgFJCyi3xRNaQ4PC6SmVUj/4H0fmg26+ovqg=
Subject key identifier: 90:4C:41:DA:6F:BB:4A:BD:AC:34:41:C6:BB:42:31:A0:85:A1:9F:AB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192EC1EE87FBF5B5E35BB79053777E20A99
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kExB2m-7Sr2sNEHGu0IxoIWhn6s.roa
Signing time: Sat 02 Nov 2024 09:05:01 +0000
ROA not before: Sat 02 Nov 2024 09:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:ec1e:3b8f/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 02 Nov 2024 09:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ec:1e:e8:7f:bf:5b:5e:35:bb:79:05:37:77:e2:0a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 2 09:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=904c41da6fbb4abdac3441c6bb4231a085a19fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:93:ec:f5:e9:b7:2a:4d:b1:a8:0e:9e:5b:
0f:e7:3a:68:ff:fe:7a:bb:c6:6f:be:eb:8c:c5:18:
79:64:9c:05:09:23:76:29:f1:39:6b:d2:73:a1:24:
98:f1:a6:b4:7a:1e:5e:89:84:8a:3a:a1:df:a9:f6:
63:cf:65:1b:86:48:55:e0:9c:d7:59:77:9c:c2:f6:
38:dc:7c:61:33:21:eb:c2:dc:df:d4:86:5c:1d:8b:
aa:af:6e:38:48:fa:38:4c:81:09:14:75:08:98:7b:
97:36:05:64:d7:08:23:21:c7:cb:96:d1:8b:88:b0:
a5:54:a0:a7:ba:0d:77:fd:df:b3:19:76:7d:3f:23:
8a:74:59:16:73:5c:4d:53:50:45:fd:33:e0:77:dc:
e6:c8:b4:6d:0d:d5:e4:ee:34:e0:48:b6:08:c1:ed:
68:b3:58:93:7b:49:16:7d:82:18:36:5e:7a:62:69:
de:04:5d:35:8d:4e:3f:ca:be:f7:4e:4d:e7:8c:4f:
fe:fc:15:c5:b2:55:2d:a6:0e:04:d4:b4:97:b9:be:
99:33:7a:8f:25:9c:ff:14:da:2b:da:23:5f:44:be:
8a:b1:15:38:1a:92:5c:0c:09:61:20:34:91:57:b4:
53:81:13:21:26:ff:07:13:84:83:9e:73:c0:ef:85:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4C:41:DA:6F:BB:4A:BD:AC:34:41:C6:BB:42:31:A0:85:A1:9F:AB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kExB2m-7Sr2sNEHGu0IxoIWhn6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:ec1e:3b8f/128
Signature Algorithm: sha256WithRSAEncryption
15:d6:ef:87:db:02:da:7e:88:77:ea:56:e5:89:2a:c7:14:c1:
70:eb:3b:00:55:00:f2:72:cb:07:e5:41:ff:02:fd:33:aa:17:
0b:9d:0f:5c:50:6c:ee:54:7c:e3:84:3e:a5:6a:38:5b:2a:7f:
b7:0b:43:d7:f8:71:e1:23:e6:f7:1b:e7:78:d4:1f:ec:0b:f3:
7a:b9:47:69:1e:13:4d:15:b1:33:1d:1e:7e:f7:02:ad:f4:65:
82:8b:23:9e:23:c2:c3:80:c9:cd:78:d2:21:1e:c2:a5:98:be:
ce:35:61:37:c7:d6:bf:45:14:b2:b9:75:58:2b:b4:8e:fe:6c:
6e:ba:cc:c3:2e:87:75:ea:58:4b:4d:19:47:2d:7b:5b:b0:0f:
d2:8d:34:ee:78:78:14:90:63:c1:20:1a:74:2f:79:c0:5a:d8:
63:c5:d6:64:24:f3:2c:a8:27:f8:8e:47:42:6f:e0:d1:61:33:
43:58:30:a1:57:a6:28:b8:f3:d9:34:c2:0a:92:51:f5:c5:b3:
58:c0:fc:8d:65:db:dd:0e:6e:10:3f:4c:9a:f1:94:82:cd:02:
2e:84:cc:f6:d0:36:32:2c:4e:7e:61:42:dc:2f:d7:84:30:f4:
d3:1e:ac:d1:38:39:06:34:ba:7e:be:18:3a:51:3e:c5:22:bc:
4a:30:93:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 2 11:21:58 2024 by rpki-client on console-fra.rpki-client.org