Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pcs3qyGGjjrGw8d7DsLxnzbskhM.roa
File: pcs3qyGGjjrGw8d7DsLxnzbskhM.roa (raw, json)
Hash identifier: fG5Z554WoM+pRChc2UdTEnCOB9PmYzxFC7BtxeUzKFw=
Subject key identifier: A5:CB:37:AB:21:86:8E:3A:C6:C3:C7:7B:0E:C2:F1:9F:36:EC:92:13
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01911F05452516C16D6932F8CCA4301E07B0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pcs3qyGGjjrGw8d7DsLxnzbskhM.roa
Signing time: Sun 04 Aug 2024 20:12:04 +0000
ROA not before: Sun 04 Aug 2024 20:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 04 Aug 2024 21:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1f:05:45:25:16:c1:6d:69:32:f8:cc:a4:30:1e:07:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 4 20:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5cb37ab21868e3ac6c3c77b0ec2f19f36ec9213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:f8:50:f0:0e:32:1a:fc:38:4b:c2:ca:7a:
63:9d:38:b2:e9:ac:da:52:80:82:0f:4b:ef:7c:11:
78:5e:dc:b2:5b:a8:64:53:4c:48:0a:8f:7d:1c:6e:
e0:45:4d:09:51:89:79:75:a6:50:37:0c:ee:5d:52:
44:de:87:b1:4e:c7:be:17:f4:ce:8a:44:77:c1:06:
be:a7:2d:1c:74:63:2e:80:e1:f2:dc:cc:8d:c3:da:
4f:59:5a:b2:a0:7c:a4:47:c8:90:9e:5d:79:b2:ea:
21:f8:4a:59:0f:dc:46:9d:af:b9:b4:72:95:57:e6:
a3:8a:19:61:10:04:5d:92:e2:d1:1c:e9:e5:97:f3:
2b:5f:00:7d:d0:95:ea:2f:1c:93:63:56:b5:cc:71:
37:bf:a9:cf:13:20:87:7b:a6:0f:98:ee:47:85:6e:
6a:4a:a5:c0:f3:e6:b2:62:6a:2d:7a:d0:fc:39:24:
38:5a:ba:dd:78:66:2c:9b:cb:56:0c:56:99:a1:cb:
72:c4:69:9e:fb:3c:d1:21:94:dc:cc:c7:9e:f3:19:
80:93:b0:f7:43:01:15:66:d4:2c:eb:49:7c:76:ef:
6b:cb:e4:b8:7b:47:cc:c4:cd:50:94:f4:25:46:e5:
db:fb:00:11:56:8b:ad:a6:44:70:a1:d0:24:f7:f2:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:37:AB:21:86:8E:3A:C6:C3:C7:7B:0E:C2:F1:9F:36:EC:92:13
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pcs3qyGGjjrGw8d7DsLxnzbskhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
8b:02:c5:31:1f:e5:60:9f:82:32:28:a5:5e:9e:06:f3:11:cc:
a5:10:b5:e9:c7:d3:dc:9b:f7:fd:f9:e1:80:33:47:26:09:e3:
3c:58:2d:8d:d5:02:18:d3:f0:f4:7e:66:ee:42:56:99:c8:10:
bf:c8:52:35:c6:0d:65:7c:a6:f1:92:d9:09:c3:79:90:92:0e:
0e:b5:cc:c3:84:25:37:8d:11:15:41:aa:9b:59:fa:e6:cf:5d:
31:c5:ad:8c:3f:88:cc:6e:b1:b3:ab:a8:9a:9c:e0:1d:fb:ed:
63:b0:5b:f8:b4:2f:d5:43:35:e6:81:69:ca:9c:81:08:a8:41:
37:d0:fb:6c:ee:a7:d5:de:f9:81:17:4f:68:f2:24:15:a2:bc:
13:4e:b5:db:9e:27:b3:8f:94:e7:69:4e:5e:a2:d9:48:12:e4:
1c:97:ca:36:41:87:d0:9c:2e:5e:2b:49:4c:cf:62:d4:06:0b:
8a:6c:be:be:e3:c0:ae:3a:35:17:f2:97:68:5e:91:88:53:86:
ef:da:cf:b4:2d:25:80:d7:05:6b:06:06:77:67:30:e0:bb:59:
cf:a2:09:e4:24:6d:8a:b5:99:38:8c:33:8b:53:8d:49:50:c1:
f9:68:b1:be:53:67:a2:a7:20:b5:42:7c:8c:db:42:62:1e:7b:
4f:71:a0:bf
-----BEGIN CERTIFICATE-----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==
Generated at Sun Aug 4 23:01:54 2024 by rpki-client on console-fra.rpki-client.org