Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/loHqX7FKcyQy3CnUoEFtQ48zJUw.roa
File: loHqX7FKcyQy3CnUoEFtQ48zJUw.roa (raw, json)
Hash identifier: k+CwqIEoK2K7Tegx/8iY1roTfUa3zGj0KhS9jSgRvV8=
Subject key identifier: 96:81:EA:5F:B1:4A:73:24:32:DC:29:D4:A0:41:6D:43:8F:33:25:4C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019148DDC80E82A5B41383BC10AE741B09C7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/loHqX7FKcyQy3CnUoEFtQ48zJUw.roa
Signing time: Mon 12 Aug 2024 23:12:59 +0000
ROA not before: Mon 12 Aug 2024 23:12:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 13 Aug 2024 00:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:48:dd:c8:0e:82:a5:b4:13:83:bc:10:ae:74:1b:09:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 12 23:12:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9681ea5fb14a732432dc29d4a0416d438f33254c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:c6:e5:71:0c:ed:20:dc:9c:2d:2c:c7:d4:
8b:2e:23:0d:fd:35:6c:82:17:f8:62:54:d2:41:6f:
21:8a:9c:8c:e0:d3:7c:3b:a0:26:28:62:a2:50:c6:
ce:ce:fb:f4:9f:ee:41:2f:3c:a0:21:8f:74:4d:88:
de:4e:e3:9a:9a:40:b4:5e:23:f1:89:f6:bb:ee:eb:
f0:09:95:d1:7c:86:46:6a:2c:65:44:58:1c:d0:9e:
1d:72:3a:e1:79:a4:5e:15:3d:2e:42:ef:56:7b:52:
71:36:4f:f5:71:87:1f:e0:3a:35:20:f3:8d:d6:c8:
d3:02:e3:8e:dd:9e:e6:56:43:5b:61:af:a9:8b:8f:
4f:c8:33:5b:1c:e7:4b:85:5e:ba:9a:93:6d:1b:fa:
68:5a:55:58:6f:5d:0d:01:2a:a8:c4:cd:36:3d:58:
72:f0:d7:2e:a0:df:0d:c8:0b:fd:40:62:e9:d2:90:
56:a0:e1:2f:e9:23:a9:02:0c:f3:0b:b4:25:56:06:
9e:36:23:39:d8:40:8b:72:23:17:86:e6:ba:0e:3b:
5a:8b:bc:d5:63:03:da:a9:2c:f2:37:6a:de:7a:a5:
4e:2d:3e:b5:4a:e2:ec:3d:ac:16:91:72:00:65:50:
c6:19:33:2e:8d:70:d3:fa:85:5b:3d:a9:1f:5b:8b:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:81:EA:5F:B1:4A:73:24:32:DC:29:D4:A0:41:6D:43:8F:33:25:4C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/loHqX7FKcyQy3CnUoEFtQ48zJUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3c:0f:04:f0:cb:20:b2:ba:4e:5b:1b:2a:9b:cc:47:16:4b:8a:
ed:2b:c7:cd:44:62:6f:b6:29:5a:59:94:7e:da:ca:a1:eb:45:
ac:9d:7f:31:a6:aa:16:e8:7f:82:f3:b3:de:db:f8:ad:6c:79:
d4:f3:80:80:88:6f:09:c0:cd:13:1f:3f:64:41:45:76:32:f2:
d5:4d:6f:b7:e9:7b:55:5a:91:ed:3b:bc:ab:88:09:ce:e7:fb:
ca:b2:9b:09:b2:53:eb:97:00:13:44:9a:4d:51:08:00:26:8e:
ec:98:3f:69:4e:03:be:0a:5d:fa:6a:9e:c2:e6:24:6e:e2:86:
ad:8e:76:bc:62:93:d8:61:8d:9b:5f:b5:51:5e:af:b0:ff:99:
6e:88:0f:41:f1:b6:2b:4d:f4:33:fa:fa:8e:ac:1a:c3:67:34:
76:a8:93:3a:e9:fd:49:01:37:08:1f:f3:5b:36:13:f1:a8:13:
32:ae:d2:e4:4e:20:cf:ee:32:f4:47:3a:6a:d4:07:8c:34:b9:
54:b5:cf:06:a4:f0:55:e7:60:ab:ba:22:a5:74:5f:3f:c7:aa:
b9:bb:67:66:fd:80:bb:e5:ad:fc:34:fc:19:37:4f:b8:28:e8:
32:3a:a2:ac:73:e9:5c:eb:b9:f2:de:1a:1d:49:21:7d:90:d0:
78:10:9d:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Aug 13 03:10:47 2024 by rpki-client on console-fra.rpki-client.org