Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ki-qh05F5tSt_xuhK_z7_BVsHKo.roa
File: ki-qh05F5tSt_xuhK_z7_BVsHKo.roa (raw, json)
Hash identifier: uRtt8KdhkOQ+1iM6XGkiogTddsPjExyzPCufjqiTRpg=
Subject key identifier: 92:2F:AA:87:4E:45:E6:D4:AD:FF:1B:A1:2B:FC:FB:FC:15:6C:1C:AA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019251698EB99C295D8AF24B8AE589A0DC3E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ki-qh05F5tSt_xuhK_z7_BVsHKo.roa
Signing time: Thu 03 Oct 2024 08:05:25 +0000
ROA not before: Thu 03 Oct 2024 08:05:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:5168:7cff/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 03 Oct 2024 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:69:8e:b9:9c:29:5d:8a:f2:4b:8a:e5:89:a0:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 3 08:05:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=922faa874e45e6d4adff1ba12bfcfbfc156c1caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:21:ca:f1:55:0a:d7:bb:c5:e2:7c:4d:ff:
0f:7e:52:8c:31:ad:ea:8f:ee:46:78:a1:ba:d4:4b:
d0:2e:de:aa:23:e8:ba:e0:8c:5c:79:59:a7:81:ec:
b0:e6:82:13:00:ce:14:d7:df:c2:65:ae:42:9c:b6:
a9:1e:d1:5d:ed:b2:0d:f6:a5:50:2b:90:9b:4f:de:
5a:53:49:be:d2:e4:4d:5d:40:cf:1b:70:a2:b5:ae:
2a:11:9d:3f:af:5c:e3:7a:c4:b1:fb:70:af:a3:c9:
dc:4f:c9:77:15:3a:5f:60:e5:cf:db:4e:15:8c:c3:
b2:3f:94:53:96:84:99:27:4a:99:2f:5d:88:25:5a:
b9:d1:a4:cd:e0:ef:0a:3d:61:ea:ee:75:78:eb:8d:
00:24:97:b1:db:ea:df:e1:8a:0c:b9:af:83:d6:0d:
56:eb:e9:c7:39:02:bd:99:fd:a5:9b:a2:99:c1:b0:
88:38:95:cf:59:1e:e7:ee:c5:8d:24:76:42:c2:8e:
57:4a:b1:23:4d:c4:61:bf:97:ca:ea:6f:24:66:6d:
00:89:80:9c:44:12:93:57:2b:b4:d2:a9:bf:dd:2b:
25:62:3a:23:c5:8a:89:a7:b7:e5:43:65:c4:aa:65:
ce:34:96:d7:84:25:54:30:a6:12:35:19:34:7c:5f:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2F:AA:87:4E:45:E6:D4:AD:FF:1B:A1:2B:FC:FB:FC:15:6C:1C:AA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ki-qh05F5tSt_xuhK_z7_BVsHKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:5168:7cff/128
Signature Algorithm: sha256WithRSAEncryption
8f:f2:79:4f:50:f6:da:07:c7:47:4b:93:31:c2:95:8c:d2:fd:
22:28:98:2b:66:f1:06:9d:b1:df:4b:ca:bb:ed:98:df:d6:c7:
af:37:3c:74:cc:1b:f2:68:d0:b5:3a:6b:74:45:38:0f:07:c9:
9c:27:a1:06:fe:2a:34:fd:d2:13:06:bd:d2:dd:8e:c9:87:3d:
4c:5f:31:ad:47:39:02:c6:00:aa:30:2f:b9:e7:f2:b9:d2:a9:
0b:a3:14:6a:45:53:48:d6:b7:8a:0c:21:75:99:d6:7b:61:ab:
9e:98:c3:e6:03:1d:ad:4b:be:63:02:03:0e:91:b7:2b:3e:25:
87:15:e9:57:07:35:e3:78:c6:3c:74:e6:0f:5c:91:2c:fc:ec:
ad:c4:6f:81:fb:ee:8d:1e:59:c1:52:42:b7:b5:e8:f2:42:49:
d8:7a:3f:09:d1:f8:7b:08:a4:79:b2:30:9b:98:86:4b:c8:f3:
a1:4b:8f:ef:8e:eb:35:d4:eb:d2:84:bb:83:a7:c6:09:83:66:
75:08:e8:a9:1f:85:3a:22:a0:bb:8d:25:7a:d3:84:d8:d0:3d:
bd:4b:34:81:11:b1:f9:54:dd:ce:59:6e:af:97:b9:c9:80:e8:
0a:d9:30:d7:6c:48:f6:88:56:72:fb:15:b3:13:58:ed:26:49:
7f:84:01:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:28 2025 by rpki-client