Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sIngKw5IqHZKH7Kt1p83GvPCmC4.roa
File: sIngKw5IqHZKH7Kt1p83GvPCmC4.roa (raw, json)
Hash identifier: 7svJvXufNY5JAoaymQLaqFeCJTdnZ7PKUX5HXJEM6d4=
Subject key identifier: B0:89:E0:2B:0E:48:A8:76:4A:1F:B2:AD:D6:9F:37:1A:F3:C2:98:2E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191A6338F3ED2593386BDB0DA07BCCF2654
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sIngKw5IqHZKH7Kt1p83GvPCmC4.roa
Signing time: Sat 31 Aug 2024 02:11:22 +0000
ROA not before: Sat 31 Aug 2024 02:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 31 Aug 2024 03:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a6:33:8f:3e:d2:59:33:86:bd:b0:da:07:bc:cf:26:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 31 02:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b089e02b0e48a8764a1fb2add69f371af3c2982e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:b5:99:7a:72:f3:57:fe:b1:22:60:a9:00:
c0:39:d5:76:f3:5e:f0:2f:86:8e:08:61:ec:16:b0:
f0:4c:d2:c6:99:f4:2d:59:0d:1d:38:ef:57:29:66:
ef:c3:9a:ec:6e:c4:be:b3:1a:33:96:3d:9a:0d:3e:
5e:f7:31:27:64:f9:d9:6f:c9:a7:cd:53:a7:ee:83:
14:e1:16:4b:ae:6b:05:fd:91:e5:2e:e6:19:51:dd:
e7:4c:5a:d4:12:b8:ce:60:9f:03:4d:3c:8d:28:94:
75:91:b2:ad:ca:a8:0d:21:7e:e4:89:9d:fd:b1:36:
8e:03:34:a3:9e:51:1b:ff:0a:73:13:8c:78:7f:12:
06:87:f9:db:a7:46:6b:57:d7:91:93:56:be:8b:f2:
bd:7e:42:73:93:94:f4:d7:4c:97:1c:6f:19:4d:e4:
72:c3:30:35:c4:e5:ff:69:19:74:d3:fb:ea:35:34:
bb:92:77:20:c0:dc:1c:a9:19:8d:99:93:1b:f0:37:
16:e4:d1:de:de:ed:e3:b5:a9:6d:73:a4:da:76:db:
01:f3:b1:28:c3:66:fe:9f:6e:6b:2d:00:c6:cc:d1:
a5:a4:eb:98:4c:d4:e7:0b:d7:3b:19:f7:49:b6:7a:
28:2d:75:bf:9a:48:50:96:8b:3d:9f:08:9a:75:3e:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:E0:2B:0E:48:A8:76:4A:1F:B2:AD:D6:9F:37:1A:F3:C2:98:2E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sIngKw5IqHZKH7Kt1p83GvPCmC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
05:84:46:32:7c:77:3e:f5:74:84:bb:3c:05:f5:e5:86:2b:18:
db:67:90:4c:7e:63:b2:eb:92:ec:b8:f6:54:4d:88:57:37:9b:
ca:da:44:cd:5c:25:d9:f1:92:29:13:cf:1d:e7:d1:62:c8:5d:
99:7e:b5:7e:8d:cf:ae:29:c6:a5:65:a4:2b:fa:8b:ee:d7:8c:
d6:ff:31:59:5b:a7:b5:b0:a7:ad:e6:46:20:1f:d3:1f:24:86:
ea:f9:cf:b6:cd:8b:b7:75:04:43:ff:43:53:8e:0f:89:ab:81:
79:86:c3:37:86:47:be:4a:7c:f5:72:b0:65:65:ef:5f:8b:bf:
e8:87:1b:13:6b:8a:1f:a8:ce:36:15:0b:eb:b9:25:e1:6f:35:
ac:06:e4:c8:51:dc:fd:dc:24:c4:14:76:b0:65:88:29:90:92:
4b:34:ca:97:2b:37:92:b7:ba:b9:12:11:33:75:28:9b:cf:8c:
ba:7d:02:aa:f1:0f:46:28:1a:d8:3f:5a:a2:96:1e:13:04:0c:
96:77:fe:37:70:12:41:72:c1:b2:9e:da:a3:10:f0:3f:2f:49:
95:ff:ae:66:d5:00:60:d9:b5:ac:cf:08:b5:44:45:91:d8:75:
7d:5a:18:11:1c:c6:1e:b5:b7:56:d4:b3:a5:b2:85:07:bb:10:
1d:a2:ca:57
-----BEGIN CERTIFICATE-----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==
Generated at Sat Aug 31 05:44:46 2024 by rpki-client on console-ams.rpki-client.org