Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rw9bhSf4x6h0WvD36I7-0hDLawE.roa
File: rw9bhSf4x6h0WvD36I7-0hDLawE.roa (raw, json)
Hash identifier: nVIosUKrE+3+9NBisJDhT9O3S41/O1u4+FP2Qn4NNNI=
Subject key identifier: AF:0F:5B:85:27:F8:C7:A8:74:5A:F0:F7:E8:8E:FE:D2:10:CB:6B:01
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01925DA41A7A8BF67F75B18491F16E6E995B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rw9bhSf4x6h0WvD36I7-0hDLawE.roa
Signing time: Sat 05 Oct 2024 17:04:48 +0000
ROA not before: Sat 05 Oct 2024 17:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:5da3:9946/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 05 Oct 2024 17:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5d:a4:1a:7a:8b:f6:7f:75:b1:84:91:f1:6e:6e:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 5 17:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af0f5b8527f8c7a8745af0f7e88efed210cb6b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:3f:31:cd:5f:f0:4c:9e:bd:e2:35:ca:52:
04:47:38:d1:83:41:de:84:97:3c:c1:e4:2a:1b:a8:
fa:94:b5:84:b1:0c:2f:68:b7:f7:98:33:ea:2f:c2:
b4:71:ba:37:4f:8b:b8:54:db:5e:88:8c:51:0f:cb:
4d:02:3d:5e:9b:59:7f:92:9e:7d:d0:23:97:09:cf:
4d:34:cd:4e:d4:42:4d:a0:bb:ac:a6:a3:c6:17:ae:
5e:12:96:52:5c:a9:22:c3:11:90:de:5d:ac:f4:6f:
38:fe:27:7b:83:18:bd:e6:3d:b9:a8:a7:41:30:a4:
33:91:6d:9d:8a:6a:4f:e3:ce:e0:af:46:36:db:3b:
00:f6:b0:7d:22:e0:ff:d6:08:19:f5:5b:f2:4d:7c:
3d:54:23:d9:71:38:c4:cf:36:ad:80:c5:a1:06:a1:
ee:4a:8f:82:4d:4c:19:a5:1b:9d:eb:97:66:82:f4:
01:7a:86:67:5e:5d:d0:00:0a:ab:5d:20:60:55:62:
21:0c:3d:44:3a:1d:62:22:c0:98:2d:57:04:a0:9c:
73:7b:26:99:a6:17:f1:a4:cd:a1:12:2d:a3:69:22:
43:5c:d1:47:e5:f5:50:1e:18:19:1d:e6:1c:8b:07:
bf:f9:dd:43:52:6b:53:c1:54:b3:4a:19:7e:50:9e:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:5B:85:27:F8:C7:A8:74:5A:F0:F7:E8:8E:FE:D2:10:CB:6B:01
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rw9bhSf4x6h0WvD36I7-0hDLawE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:5da3:9946/128
Signature Algorithm: sha256WithRSAEncryption
73:9d:e6:69:36:49:43:88:90:f8:60:2d:bc:8a:65:38:dd:d7:
0d:13:57:c2:12:ef:15:89:10:72:11:0c:f5:74:39:9e:d8:21:
97:42:6e:6e:ea:6d:98:d1:aa:79:67:97:f9:c1:20:04:f9:fb:
e8:8a:d0:e6:e2:c4:04:5c:f4:e4:27:a8:35:49:31:8f:da:1d:
04:24:53:be:9b:2a:05:f8:04:67:99:30:7e:1c:68:02:53:de:
38:34:c2:ec:a8:de:eb:ab:cd:ee:bd:c7:ae:9c:82:dc:67:91:
50:2e:71:34:fb:e0:64:15:b5:eb:ae:4a:23:43:11:12:a9:90:
b8:89:01:ed:22:0d:7e:d1:02:ac:50:88:74:8e:20:ce:5e:b2:
57:da:e0:d1:81:26:a4:bd:86:94:ed:02:40:8a:fa:ca:9a:bf:
86:fb:35:53:c2:92:6a:f7:23:5f:db:14:50:28:3b:80:58:8f:
7d:a9:98:93:df:b0:e6:f2:17:7b:68:e1:ec:29:be:0a:01:09:
35:98:f5:fc:6c:e2:b2:c7:7f:06:cd:18:0b:91:ca:b5:62:65:
da:c7:40:26:c1:76:b3:68:41:71:f4:e3:2c:19:d0:58:96:cc:
8d:d5:a5:12:15:f6:85:90:04:34:0c:d7:f7:26:4e:53:33:73:
0c:5b:ea:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:18 2025 by rpki-client