Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ogqZ6E5efZGfKTyBy6NJivpzYUQ.roa
File: ogqZ6E5efZGfKTyBy6NJivpzYUQ.roa (raw, json)
Hash identifier: Ket2SUcCUpKshHgPq2v3cNvDAPGTaw34bVjbXeLuQhE=
Subject key identifier: A2:0A:99:E8:4E:5E:7D:91:9F:29:3C:81:CB:A3:49:8A:FA:73:61:44
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192C4DAA769B374E2338E564087C57DBD06
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ogqZ6E5efZGfKTyBy6NJivpzYUQ.roa
Signing time: Fri 25 Oct 2024 18:05:16 +0000
ROA not before: Fri 25 Oct 2024 18:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:c4d9:f5a6/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 25 Oct 2024 18:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c4:da:a7:69:b3:74:e2:33:8e:56:40:87:c5:7d:bd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 25 18:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a20a99e84e5e7d919f293c81cba3498afa736144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:c8:34:0a:b1:1e:c3:7e:63:14:09:b0:37:
7a:36:0f:fb:6e:14:33:85:16:96:28:7e:98:ec:1e:
66:30:b9:e1:6a:03:77:08:df:f8:77:3b:90:a9:1f:
6b:93:25:8b:26:9b:7e:dc:57:c4:37:e5:90:2f:b1:
2d:aa:0c:d8:e7:71:a1:31:36:f7:89:48:fa:10:4e:
44:2f:a9:da:8e:11:16:56:a1:aa:84:d7:85:3b:50:
b1:95:10:e0:ff:84:15:68:33:b5:e6:67:0b:33:5a:
7f:97:f6:33:6c:95:4b:f0:43:aa:b6:57:ab:0f:29:
ce:f4:98:0c:51:d1:d0:d5:1e:2b:bc:0f:c3:09:67:
1b:a6:f5:8f:33:3a:e7:2f:d5:2a:b2:1c:35:25:1b:
c5:53:9a:c3:9a:ec:ad:c1:42:4f:af:5e:fb:c5:72:
ba:fa:77:62:c1:1c:40:84:82:22:f3:de:f8:c6:17:
69:4d:e3:8b:30:ba:f9:01:31:13:ab:72:fb:ba:14:
84:7e:6c:2e:95:16:d7:90:4f:a7:0e:06:78:ff:09:
28:b9:25:38:46:7e:ce:54:c2:5b:39:5e:1c:fe:56:
65:f9:0d:ad:65:a3:d0:e9:e2:b2:30:6a:2a:1b:47:
f7:69:2a:e1:92:75:d1:b0:7c:ab:67:0f:dd:8d:6d:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:99:E8:4E:5E:7D:91:9F:29:3C:81:CB:A3:49:8A:FA:73:61:44
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ogqZ6E5efZGfKTyBy6NJivpzYUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:c4d9:f5a6/128
Signature Algorithm: sha256WithRSAEncryption
12:01:5b:96:bc:8e:59:80:cf:62:be:9a:cd:aa:a3:34:56:3e:
13:d0:35:24:c3:f9:92:eb:b4:87:04:f5:bd:1c:6c:43:1b:fd:
07:b3:80:fe:83:41:2e:65:83:21:36:49:45:be:37:02:f7:44:
c3:4c:af:85:c9:d3:f6:d0:3f:15:c2:a8:4d:f7:ac:43:ff:15:
41:02:80:54:d1:57:2e:bc:3b:cb:7c:83:2e:ed:aa:42:7f:89:
f2:fb:d1:57:62:2f:c9:be:e7:3a:88:01:fe:da:d0:7b:99:e7:
bc:57:60:04:b0:d6:15:42:92:b3:70:44:0d:6d:c2:93:e6:2d:
9c:5d:65:74:27:9c:ce:78:c8:d8:af:65:f3:68:50:61:36:17:
65:da:9f:40:91:be:34:cc:26:d8:ab:26:77:61:4f:dd:09:73:
e1:c8:4c:06:cd:45:6c:63:18:8d:00:ec:ee:f8:b1:bb:f4:79:
c2:6c:b8:d1:8d:9c:3e:6d:91:02:d9:30:be:4c:00:79:7e:05:
e7:23:b0:6c:2a:20:34:62:04:7c:0e:e5:9a:fa:fb:70:94:93:
1b:ea:52:33:3e:8a:dc:a5:fa:1d:b6:af:cd:0c:eb:73:68:f0:
41:64:8f:77:3f:73:fa:0d:b4:d1:f8:b7:88:2c:a0:de:a6:3d:
1b:fa:0f:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 25 20:57:57 2024 by rpki-client on console-fra.rpki-client.org