Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/l3A6L_zEKOZ3XB77_Lv0DRMTUvo.roa
File: l3A6L_zEKOZ3XB77_Lv0DRMTUvo.roa (raw, json)
Hash identifier: rAFkZHUlgt++VO8Xk5bGwFuPL6EyOeUKJbmvv9o12kE=
Subject key identifier: 97:70:3A:2F:FC:C4:28:E6:77:5C:1E:FB:FC:BB:F4:0D:13:13:52:FA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191825FCF52167A055225651779C8918420
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/l3A6L_zEKOZ3XB77_Lv0DRMTUvo.roa
Signing time: Sat 24 Aug 2024 03:13:22 +0000
ROA not before: Sat 24 Aug 2024 03:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 24 Aug 2024 04:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:82:5f:cf:52:16:7a:05:52:25:65:17:79:c8:91:84:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 24 03:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97703a2ffcc428e6775c1efbfcbbf40d131352fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:c0:7c:50:fe:66:d5:c6:14:fe:ce:d5:84:
e5:b0:82:cb:e4:38:ab:fb:77:04:19:26:97:0a:9f:
e4:67:59:d4:33:fb:4a:c9:6f:8f:0b:7b:34:ac:bd:
db:3d:5d:4d:0c:5b:c3:f4:e5:dd:ff:31:ec:ea:51:
78:aa:c7:0b:c3:a2:7f:dc:9f:b4:a8:5f:ec:bc:4e:
83:8f:3b:1a:0c:0f:17:9e:2b:d8:c0:b2:3e:81:84:
50:9e:19:80:b4:5e:d5:95:a9:eb:e4:6c:5a:73:f1:
29:c0:17:e9:ef:79:10:c0:1f:31:ec:b2:cc:ed:c9:
15:12:a3:15:af:69:a2:5b:ec:4d:49:6c:d4:29:ff:
4c:7e:10:21:c4:3e:36:82:9e:f1:36:70:53:03:9b:
83:f4:f5:2f:ec:65:e3:c5:aa:eb:d7:92:f4:48:03:
21:1b:1d:41:85:59:dc:12:fb:3f:9b:e2:4a:b7:3f:
db:db:ff:f4:1e:c2:f2:bd:09:1f:18:3e:03:62:7f:
fe:3c:0d:f6:ad:84:56:b9:dc:11:a1:97:39:b5:f1:
e2:83:4e:1f:76:d2:18:b8:d5:a0:7c:d1:d5:68:58:
a1:07:f8:57:1d:75:0c:37:16:3c:36:32:d8:78:14:
2d:8d:49:73:2b:31:5f:b0:05:27:b1:e4:5a:2a:32:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:3A:2F:FC:C4:28:E6:77:5C:1E:FB:FC:BB:F4:0D:13:13:52:FA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/l3A6L_zEKOZ3XB77_Lv0DRMTUvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
8f:1b:aa:85:bc:ef:22:6d:22:47:9e:26:77:cf:12:78:61:07:
26:cc:7f:54:e9:55:20:96:e0:ed:7f:0a:74:28:4c:36:8d:30:
03:35:e4:59:2a:f8:dd:18:46:26:c0:02:2f:14:34:5f:22:b0:
10:bc:37:66:e4:8a:cb:89:39:d2:93:38:4a:43:a6:b6:cb:be:
f1:4a:c8:bf:e1:2a:9a:f1:5b:9d:ce:ac:05:30:74:9b:8f:66:
4c:8c:cf:7e:18:ad:5b:34:00:7b:b0:19:46:cd:df:11:68:7f:
0d:8d:93:4b:52:95:28:50:c0:f2:4e:e6:d0:6c:b4:6a:29:58:
b8:e0:26:b3:4e:d6:1d:ee:4e:05:da:bf:b4:64:6c:4b:62:fa:
d5:34:3a:47:c2:7f:d3:f7:bd:f0:4b:3e:db:a9:16:e6:21:96:
2e:15:e5:94:60:46:25:0c:2b:a0:ac:d7:5b:64:74:5a:84:9b:
70:bf:1b:9a:31:4c:10:d6:0c:8b:04:a9:a9:aa:77:b8:60:5c:
20:06:e7:45:1e:aa:dd:0f:40:46:07:38:cd:47:21:25:e2:2c:
37:03:e9:8f:c9:a0:9e:80:50:41:65:c4:1e:1b:9c:73:ca:cd:
53:75:8b:ca:2f:f4:f8:af:9a:71:d8:fb:78:65:3d:15:46:80:
1f:ad:b8:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:04 2025 by rpki-client