Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r0FrBo9bcOkwQrWrtgQasAF5PdI.roa
File: r0FrBo9bcOkwQrWrtgQasAF5PdI.roa (raw, json)
Hash identifier: SSLBegnvV7Y759G5dEXutwTsJ99g7tg0c75wuI+2Rbw=
Subject key identifier: AF:41:6B:06:8F:5B:70:E9:30:42:B5:AB:B6:04:1A:B0:01:79:3D:D2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191272CAC4BB20522D5C70B8EB98E42F407
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r0FrBo9bcOkwQrWrtgQasAF5PdI.roa
Signing time: Tue 06 Aug 2024 10:12:04 +0000
ROA not before: Tue 06 Aug 2024 10:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 06 Aug 2024 11:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:2c:ac:4b:b2:05:22:d5:c7:0b:8e:b9:8e:42:f4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 6 10:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af416b068f5b70e93042b5abb6041ab001793dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:2a:b6:f1:78:2e:01:d4:f9:4d:78:d4:52:
87:2b:2e:d1:3c:9f:89:51:e0:a6:3b:19:d0:35:05:
19:2f:06:37:43:f4:ed:64:4a:b2:34:4d:7c:e1:35:
0a:1b:1f:bb:e7:3d:9d:23:ea:8c:29:8e:a8:2a:95:
a0:6a:04:75:e2:42:47:08:d8:71:ec:7a:e2:a7:90:
58:05:59:22:8e:e1:ea:91:7c:d3:f0:e1:04:4d:73:
cc:bd:fa:9b:81:f2:71:d6:37:00:97:2f:1c:b4:af:
cf:13:67:b1:7e:d8:a9:0a:9d:9b:e7:2d:1c:2f:75:
23:6d:77:8d:e1:77:ef:57:31:24:e2:f0:99:dd:ee:
e2:99:16:17:22:fa:7b:5c:af:7c:af:af:97:1a:b5:
ec:97:f0:b4:6e:82:48:99:56:72:f5:3b:fc:9c:5c:
76:f7:97:7d:ce:5a:78:bd:b0:bb:80:c7:ba:a3:03:
f8:90:60:85:21:a4:5c:eb:c7:44:aa:60:cb:08:8f:
2a:5f:19:f0:33:59:74:0e:34:56:8b:30:5a:ad:5e:
07:16:53:4e:8d:d9:a1:c4:b7:e2:17:48:c1:85:ba:
b5:f5:58:94:f4:49:fb:d0:e4:10:ec:81:aa:46:9d:
c8:cb:ec:3a:77:3c:11:58:6a:11:7d:8f:cb:42:95:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:6B:06:8F:5B:70:E9:30:42:B5:AB:B6:04:1A:B0:01:79:3D:D2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r0FrBo9bcOkwQrWrtgQasAF5PdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
6a:40:bd:a7:86:b1:1e:a0:d4:49:c9:c6:47:3a:49:a6:1a:92:
bc:9c:cc:ba:9a:01:c7:b9:9c:99:f6:b8:3b:6f:f2:87:53:e5:
af:e3:53:85:09:3a:79:a1:78:9c:a1:88:f5:df:54:45:c1:b6:
88:f6:1e:36:19:6e:56:b8:c3:e2:65:13:da:de:99:79:38:5e:
73:ce:55:d7:d6:fc:7f:69:7a:9b:07:f6:e5:15:48:c5:66:df:
18:d3:fc:ca:76:e3:24:5d:fb:a1:48:5a:6a:65:46:b4:4b:38:
16:8a:19:66:44:bd:33:98:7d:f9:ec:1a:1d:a1:f3:77:83:2e:
03:3a:4d:bb:e6:db:91:99:05:66:3b:88:74:c7:a4:38:75:be:
bb:f1:df:1f:a5:64:56:b2:14:43:6e:44:f6:2c:0c:89:c0:11:
18:b5:d3:d7:0c:fb:d2:98:9a:1e:7d:9d:d0:46:3d:ac:73:af:
2b:0d:3f:11:18:43:21:48:6a:01:d2:6b:fd:92:b6:27:6c:6b:
3c:cd:01:4d:42:8b:09:1d:23:be:dc:e6:92:8c:7f:f9:70:1f:
d2:98:52:10:27:cb:04:67:32:19:53:e4:c2:dd:a0:48:78:95:
98:a6:3e:54:2e:3d:2c:fa:ae:f9:39:05:d7:8c:9c:5a:07:75:
12:6f:ff:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:19 2025 by rpki-client