Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sIq4v4s6IuajZCBs4BbbcSFBdjw.roa
File: sIq4v4s6IuajZCBs4BbbcSFBdjw.roa (raw, json)
Hash identifier: BNy86cgHZ0kO2QMg+yad08g1hn7D8wH+nNY54z9Ni6M=
Subject key identifier: B0:8A:B8:BF:8B:3A:22:E6:A3:64:20:6C:E0:16:DB:71:21:41:76:3C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191CE54EA696B1E998CB591141B88907722
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sIq4v4s6IuajZCBs4BbbcSFBdjw.roa
Signing time: Sat 07 Sep 2024 21:12:37 +0000
ROA not before: Sat 07 Sep 2024 21:12:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 07 Sep 2024 22:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ce:54:ea:69:6b:1e:99:8c:b5:91:14:1b:88:90:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 7 21:12:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b08ab8bf8b3a22e6a364206ce016db712141763c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:ed:aa:25:66:b8:b2:51:4a:47:88:d4:be:
6f:e0:5d:ee:02:d5:db:56:5d:b5:a1:87:94:d2:64:
27:a1:a7:fa:fd:41:37:fa:20:ca:51:ae:3f:06:8a:
19:76:0f:4a:a9:58:09:e9:10:6c:d6:98:bc:15:51:
91:11:86:b8:3c:8a:85:9c:8d:3d:df:d5:8d:4a:4a:
0e:b9:ac:01:c0:74:d1:57:75:8d:a3:ab:14:5e:05:
12:13:c1:9f:51:bc:d5:4f:d7:c3:78:35:f4:85:8d:
15:e7:1b:84:66:ad:bc:fa:b2:7c:2d:34:79:e0:8b:
db:e1:89:33:9a:86:56:9b:8f:4e:6c:39:cc:41:63:
0a:e9:bf:13:cf:75:2e:e5:6c:08:bd:77:3f:e8:52:
04:06:c5:0f:ac:4c:00:89:bd:4f:ff:48:56:6b:9e:
0e:cb:2d:14:b4:46:ba:fd:d0:63:c7:97:33:25:61:
c2:02:b9:cd:35:5c:26:0b:0d:43:e9:5d:e0:89:98:
57:32:ac:5f:5f:62:20:08:c0:93:c2:99:ed:77:7a:
c7:e5:b9:b8:83:73:ef:b7:d3:5d:26:43:ca:86:15:
41:62:e1:92:f1:2b:6f:00:4a:8c:9f:e0:d0:8b:5d:
4c:6d:3b:0f:8c:4a:54:02:41:59:a1:ec:01:32:12:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8A:B8:BF:8B:3A:22:E6:A3:64:20:6C:E0:16:DB:71:21:41:76:3C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sIq4v4s6IuajZCBs4BbbcSFBdjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
4c:a4:66:4a:41:c9:11:65:42:2d:3d:c8:d7:3d:bd:c4:dd:99:
bb:6d:d0:71:b9:7b:3a:d7:88:24:ad:29:c4:fe:37:4d:14:ee:
69:e3:36:a2:b9:ac:da:f6:bb:6e:79:56:8c:fa:45:6f:aa:a5:
f8:97:64:63:ef:c2:f6:2e:e8:63:0a:3c:ee:ee:80:98:f3:04:
25:6d:80:66:f3:ee:65:2c:b7:ad:46:77:15:d5:28:16:2a:ed:
2e:fc:ab:0c:09:47:7a:1a:b6:18:ff:4a:3e:44:a0:98:d0:1a:
34:9c:99:93:8d:74:2d:09:5c:ea:44:9d:c9:00:24:be:8f:1e:
3f:ff:a6:56:7e:59:7d:68:45:59:98:87:bd:60:20:07:d8:cb:
1a:79:2e:88:66:a7:89:63:a2:d0:a6:fb:eb:b1:26:82:05:09:
76:22:cb:d2:c3:a3:34:90:78:3b:3e:28:66:21:56:5d:cf:5b:
8c:2b:ab:5f:2e:07:eb:f2:95:49:3d:98:8c:69:06:df:c9:44:
5b:3a:10:17:b0:73:35:67:7b:f9:91:9a:8e:f5:0d:f8:64:1a:
71:bc:f6:03:fd:9d:d7:cd:5f:a5:e4:14:a4:7f:05:93:62:be:
12:57:1c:05:63:18:08:f1:2d:f6:fb:e7:3d:8b:ed:61:89:30:
1f:d6:57:65
-----BEGIN CERTIFICATE-----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==
Generated at Sat Sep 7 23:24:34 2024 by rpki-client on console-fra.rpki-client.org