Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/v-yfRB9hfB1pPZ-8Q1OoXdyMQDk.roa
File: v-yfRB9hfB1pPZ-8Q1OoXdyMQDk.roa (raw, json)
Hash identifier: w8lHDuBxwcoTqMDXIJwUMmsgQ8/8WnaNLv1mLiTeq8A=
Subject key identifier: BF:EC:9F:44:1F:61:7C:1D:69:3D:9F:BC:43:53:A8:5D:DC:8C:40:39
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01919FC486EF552B87D9F7A9EE9336E1AC43
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/v-yfRB9hfB1pPZ-8Q1OoXdyMQDk.roa
Signing time: Thu 29 Aug 2024 20:12:22 +0000
ROA not before: Thu 29 Aug 2024 20:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 Aug 2024 21:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9f:c4:86:ef:55:2b:87:d9:f7:a9:ee:93:36:e1:ac:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 29 20:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfec9f441f617c1d693d9fbc4353a85ddc8c4039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:ab:d4:90:7c:9c:00:fd:23:cd:7d:1e:6b:
0f:1c:7b:21:0d:3c:99:03:fb:44:5d:86:fb:26:23:
b4:a4:bf:46:10:f5:54:a6:9a:c9:f0:dc:5b:5a:64:
a5:e8:9d:22:2a:10:8f:12:08:da:8d:28:72:81:11:
1a:ac:8a:cf:b7:9c:86:6e:79:df:39:9b:4d:44:9e:
b5:1c:27:c0:f1:bd:1a:03:b8:04:41:67:f0:ac:2e:
18:3a:e6:91:c6:6f:9a:ef:04:91:91:12:ce:9e:66:
c4:56:89:e1:83:f6:ac:cf:8c:d6:ce:43:9f:c6:27:
e0:96:56:08:e5:9b:49:9d:33:99:f0:64:1e:6a:64:
34:3e:0d:47:cd:43:50:e7:48:95:c8:ac:ca:f2:8d:
08:df:3c:15:1e:2f:e8:70:68:9c:a5:2b:82:d2:5c:
7c:89:98:6b:60:69:47:5f:4c:03:92:c6:d3:8a:8f:
c5:4d:37:d7:c0:7a:3b:8c:d3:e7:9e:86:3f:1f:66:
5d:29:37:9c:af:de:a0:e4:b1:03:d7:db:4e:d5:0b:
6a:68:8a:1a:5d:1c:fa:ed:c5:e8:0d:2b:bf:d5:ce:
62:2d:35:ab:aa:2a:8f:c7:b9:be:cd:e0:78:e5:b7:
4f:98:6c:48:20:fb:48:f6:24:4c:ce:b0:cf:a5:c5:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EC:9F:44:1F:61:7C:1D:69:3D:9F:BC:43:53:A8:5D:DC:8C:40:39
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/v-yfRB9hfB1pPZ-8Q1OoXdyMQDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
97:65:ce:fa:c2:37:0d:1d:39:ca:44:eb:6c:ce:e8:8f:88:7e:
0d:31:e9:3a:b8:69:34:ee:0b:1b:2b:6e:ea:e4:6f:10:45:ea:
56:91:00:e9:b7:06:7a:01:d6:60:e2:13:a2:02:7a:ea:e6:bc:
1c:23:1d:e4:9a:5a:6f:e9:f3:b2:db:9f:49:69:40:05:c4:a0:
7d:df:cb:69:44:b3:a3:42:5a:82:38:b5:84:c5:fe:44:bb:18:
4b:19:58:65:d9:67:e2:d8:82:0e:59:de:dd:e9:2d:f9:3b:9f:
f6:b8:ee:02:7a:23:2e:07:85:9b:22:a3:68:a0:22:52:63:be:
a1:af:2c:14:f2:f5:c4:9f:d2:11:52:0d:ff:9d:c9:56:8c:8e:
5d:fe:1d:0e:ce:ca:b2:46:04:0c:00:e8:6e:9c:18:f2:2f:40:
99:6f:f8:6b:ed:8f:0c:97:7e:8a:f5:ee:4b:38:80:76:44:24:
fc:bd:ed:d0:d0:67:1b:2d:fc:17:92:c9:39:31:f0:e9:70:b2:
86:fc:42:2d:77:64:ce:6f:89:07:54:c4:f7:bb:21:81:47:ae:
75:7c:23:02:f4:20:0a:10:aa:33:80:c3:8e:3b:e0:52:27:09:
9c:8b:c6:e7:e0:0a:8f:66:68:c2:ca:1e:cc:e2:a4:4e:18:9d:
ce:d8:15:0f
-----BEGIN CERTIFICATE-----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==
Generated at Thu Aug 29 23:12:47 2024 by rpki-client on console-fra.rpki-client.org