Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rqcpyF703nH71N9nlZVIX3Nz81Q.roa
File: rqcpyF703nH71N9nlZVIX3Nz81Q.roa (raw, json)
Hash identifier: TBRLktKjMTVWDRVNcWcHs5QTeqIUv+sZ07moS5BQPGc=
Subject key identifier: AE:A7:29:C8:5E:F4:DE:71:FB:D4:DF:67:95:95:48:5F:73:73:F3:54
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01915DAD952B10D9BE168EA090B43E3B4E3F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rqcpyF703nH71N9nlZVIX3Nz81Q.roa
Signing time: Sat 17 Aug 2024 00:12:22 +0000
ROA not before: Sat 17 Aug 2024 00:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 17 Aug 2024 01:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5d:ad:95:2b:10:d9:be:16:8e:a0:90:b4:3e:3b:4e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 17 00:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aea729c85ef4de71fbd4df679595485f7373f354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:75:02:94:76:00:3e:8c:f6:a1:ee:ff:fd:
bd:9e:6a:7d:fc:15:1b:02:ae:09:da:69:58:12:80:
60:95:11:e1:a8:ef:17:08:4e:be:2e:f4:59:da:3c:
ad:e1:3f:9b:09:92:72:b7:a7:22:44:58:dd:f4:cc:
18:a4:da:2d:7d:cd:9b:80:28:14:44:a4:55:75:45:
c7:9d:9f:7f:59:1b:39:06:0c:ff:48:df:e8:17:6f:
34:64:bd:59:44:e5:bc:52:87:cf:7f:d6:dd:c5:57:
b4:41:cc:e9:bc:bf:09:bc:15:38:23:19:13:32:ae:
4f:6d:f1:df:f9:cf:2c:73:eb:71:a0:47:38:c7:9b:
61:f0:aa:6a:0a:de:ac:60:44:3a:1a:b1:6b:a9:f2:
a5:68:72:25:28:21:8a:52:e3:ea:08:53:03:8a:24:
dd:13:fb:fc:4e:9e:08:f5:0c:41:53:82:6a:6e:64:
29:03:9a:d8:67:f9:62:be:25:6f:8a:5a:a2:20:6b:
90:97:97:b4:ae:d2:e1:a9:96:b1:8b:06:7b:1d:16:
f0:ce:10:93:42:2c:62:12:80:9b:7c:e5:ab:ca:c1:
12:4e:0b:30:b4:59:45:d9:70:58:47:94:3b:e5:85:
f5:af:1d:ea:9e:bb:f4:30:b3:93:6f:1c:fd:57:66:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A7:29:C8:5E:F4:DE:71:FB:D4:DF:67:95:95:48:5F:73:73:F3:54
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rqcpyF703nH71N9nlZVIX3Nz81Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
4c:6f:e9:9b:4f:e7:1e:c1:c3:34:b0:57:3e:4c:35:3d:da:88:
8f:8f:63:d2:9c:bb:75:8a:3c:70:24:19:70:2b:6a:a6:99:c1:
79:47:34:f1:10:c1:1a:2d:f5:8b:ba:c4:13:42:2d:db:22:bd:
0c:97:7a:46:e5:d8:04:52:2d:1c:51:a2:99:9d:75:5d:0e:92:
b7:01:66:b8:30:5f:db:de:0b:43:0e:a4:5e:9f:91:d7:24:51:
6a:a9:50:a4:df:e2:7b:ab:89:8e:30:bb:a5:02:0e:51:c2:b6:
6e:15:cd:92:4e:70:3b:f9:06:b6:e4:44:f9:dc:6b:6c:7c:d7:
2c:a5:df:75:62:08:0c:87:d3:49:d2:3f:4c:2f:af:1c:b8:f9:
9e:48:eb:8f:73:13:c1:6e:6b:58:69:b5:86:6f:52:eb:22:50:
5c:0f:72:63:2a:0d:d7:7d:08:15:87:be:95:c0:b6:76:56:66:
a4:0c:c1:1b:15:b6:97:a9:9b:1a:ed:34:9e:c9:29:26:6f:e2:
c7:35:f2:bf:ad:2c:b9:7e:ab:ff:83:d1:f4:fe:13:3e:c3:79:
66:30:e7:fb:ca:66:7d:89:fd:20:66:f3:93:f7:c2:36:18:5f:
83:31:d0:33:0e:c7:b1:f9:2e:51:7a:8b:39:50:6c:ef:59:dc:
21:f1:ec:85
-----BEGIN CERTIFICATE-----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==
Generated at Sat Aug 17 05:47:28 2024 by rpki-client on console-ams.rpki-client.org