Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/s3zwE1oEMGkgFB92QGFwISeWjXY.roa
File: s3zwE1oEMGkgFB92QGFwISeWjXY.roa (raw, json)
Hash identifier: P/euxbZCSuYJTC383/8G9JTEbigtuQHFlT40LcE7CkU=
Subject key identifier: B3:7C:F0:13:5A:04:30:69:20:14:1F:76:40:61:70:21:27:96:8D:76
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01930D614FD6955A20DADAB05696BB46E858
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/s3zwE1oEMGkgFB92QGFwISeWjXY.roa
Signing time: Fri 08 Nov 2024 20:05:01 +0000
ROA not before: Fri 08 Nov 2024 20:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:d60:9f47/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 08 Nov 2024 20:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0d:61:4f:d6:95:5a:20:da:da:b0:56:96:bb:46:e8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 8 20:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b37cf0135a04306920141f764061702127968d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:82:02:4b:a3:c0:4d:ba:43:e3:19:fe:a6:
9d:97:7a:71:84:3d:03:ba:08:45:06:ec:9b:67:a1:
32:7e:17:83:38:77:ad:08:22:14:bc:ea:60:07:13:
51:51:65:f2:b1:cd:38:f0:71:73:58:96:e9:d6:fa:
7e:2a:b8:f3:03:b7:1f:e9:e9:c1:6c:37:75:e9:36:
cf:e7:bf:97:ba:bb:b9:20:a8:af:0e:f0:bc:59:69:
43:e3:4a:78:ae:d3:79:64:4e:d7:62:ac:7f:e2:37:
90:95:26:58:cc:2a:69:75:35:f2:a4:0c:78:c5:a1:
c0:2c:d0:7c:92:8d:b1:bc:79:6a:fd:47:94:65:d9:
20:dc:29:52:02:33:88:ca:00:80:83:28:44:e6:c7:
01:3c:2e:54:30:e4:8c:ce:00:91:bd:f9:11:27:bd:
c8:c3:38:1b:d4:a8:25:94:9f:3b:cd:fb:35:4f:3e:
e8:66:2e:78:5f:47:a9:8d:a2:3b:9e:f6:17:52:c5:
61:34:7e:cd:08:94:88:f1:bb:29:8e:06:4c:fe:9d:
7e:6d:55:98:5e:f3:cf:a3:8c:8a:92:fe:04:de:24:
4a:69:65:f8:57:63:86:d1:b1:dd:84:e1:55:60:95:
48:10:60:9e:ab:63:56:e6:d4:18:0c:ef:11:ac:8e:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7C:F0:13:5A:04:30:69:20:14:1F:76:40:61:70:21:27:96:8D:76
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/s3zwE1oEMGkgFB92QGFwISeWjXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:d60:9f47/128
Signature Algorithm: sha256WithRSAEncryption
23:af:19:48:79:12:ea:4f:23:86:53:b3:45:98:93:b3:86:96:
13:a1:c4:ee:eb:5c:a4:18:a2:93:80:ca:9c:46:5b:83:e1:f2:
8b:bf:3e:a7:72:47:de:7c:d8:e4:4d:66:b8:61:0a:3f:29:a3:
8d:2a:ad:bf:9c:71:ea:d7:38:27:43:7c:58:c8:79:e2:8d:3d:
bf:29:70:cb:c3:cf:75:1d:4e:73:94:d7:0c:56:ff:7d:be:d3:
de:16:61:10:38:3a:f0:a4:81:0d:43:77:5a:11:bb:62:c6:ec:
b4:dc:45:5f:b9:9f:e3:3a:60:54:2e:7f:8e:f4:17:1a:e4:2a:
d7:f6:cd:0b:32:9c:03:db:7a:53:ce:ee:d6:a0:82:0e:90:59:
aa:c5:89:a9:f9:24:6a:41:28:3c:3c:89:15:19:94:48:f8:48:
13:94:60:23:bf:73:65:94:ff:45:cd:1e:26:38:cc:f2:22:4c:
86:38:47:8d:00:50:52:9b:09:9f:8f:ba:cc:86:0e:37:1f:5e:
9d:42:0c:e1:d7:80:08:b4:40:32:f1:74:20:91:54:51:ab:7c:
6f:45:c8:2e:35:f1:b9:89:40:d4:37:2e:89:02:e6:75:e9:2f:
05:1e:23:dd:39:59:bb:19:9e:ea:0f:41:95:fc:55:c4:ab:1b:
2d:72:17:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:28 2025 by rpki-client