Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vFURSntacKWq8U5WzJ7F9HsXIK8.roa
File: vFURSntacKWq8U5WzJ7F9HsXIK8.roa (raw, json)
Hash identifier: qqPw6RBmNNtOWANchaSMfbfccXLvBKDw0/w8rZs8GJs=
Subject key identifier: BC:55:11:4A:7B:5A:70:A5:AA:F1:4E:56:CC:9E:C5:F4:7B:17:20:AF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01911BCC627E37578B5D8D3EECE774E5AC0C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vFURSntacKWq8U5WzJ7F9HsXIK8.roa
Signing time: Sun 04 Aug 2024 05:11:04 +0000
ROA not before: Sun 04 Aug 2024 05:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 04 Aug 2024 06:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1b:cc:62:7e:37:57:8b:5d:8d:3e:ec:e7:74:e5:ac:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 4 05:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc55114a7b5a70a5aaf14e56cc9ec5f47b1720af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:fb:35:ae:83:60:a0:47:1c:cf:7f:b8:1c:
e0:10:29:f1:26:11:c9:89:01:11:ca:cd:6b:a8:5f:
85:36:f7:e7:6c:41:a0:41:75:38:c5:cd:26:1f:0a:
97:3f:58:fb:8f:3a:c9:9a:e2:c8:b9:cd:50:d5:cc:
9a:b7:e9:31:31:33:b9:a5:5e:0e:5d:b7:a4:20:42:
a6:3b:8a:0c:d6:ae:c2:e0:24:90:ab:de:4d:3f:5f:
e6:50:cf:ce:e9:cd:95:1a:57:97:31:26:b9:2a:aa:
7b:de:3c:89:7f:cd:2f:c9:cc:55:fc:61:1d:2b:ee:
e1:5f:5b:53:ae:84:e0:25:ba:06:74:18:bd:a3:76:
b8:3e:34:28:b5:7f:99:03:39:8b:84:65:2f:e2:6a:
2c:3c:2f:01:69:a8:65:33:a5:9e:02:88:0b:fe:74:
02:b0:73:c5:15:45:44:19:6a:71:45:24:02:ce:a8:
13:5a:c2:07:a5:63:fa:0c:73:5c:03:d7:b4:06:59:
85:cf:14:2b:68:04:97:3e:07:b5:2f:43:f6:ca:26:
bf:35:1a:de:50:73:65:f1:1d:fe:f2:05:2f:bf:0a:
4d:9e:84:a5:38:76:46:92:02:7d:23:6a:e2:7f:49:
a2:91:a0:ef:28:52:64:75:83:3a:15:97:29:fa:1c:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:11:4A:7B:5A:70:A5:AA:F1:4E:56:CC:9E:C5:F4:7B:17:20:AF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vFURSntacKWq8U5WzJ7F9HsXIK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
89:66:f4:a8:82:bc:f6:e8:99:e4:89:de:9d:42:12:ea:45:e6:
48:09:20:a3:30:80:66:97:d3:ee:52:76:12:a3:39:36:d0:59:
29:a5:9e:02:2c:f2:b8:50:98:d4:67:7b:bb:35:c8:71:0e:ba:
e9:9c:85:f6:40:d9:85:36:6f:f3:0a:84:d5:70:bc:48:e3:c1:
ef:c1:88:af:89:b8:48:cb:93:fd:29:9b:e6:47:70:ed:3d:dc:
15:94:4d:dd:91:83:ea:b6:74:d9:f9:31:5c:9b:4b:fa:d0:fa:
93:2a:c8:ac:a7:a9:aa:ef:ff:20:e2:45:f0:31:a0:16:ee:4c:
70:68:0d:09:37:3e:b3:ca:39:68:fe:c9:a4:b7:20:9d:f5:f7:
ef:81:ad:60:87:13:18:fb:a5:df:b6:ae:4b:9c:34:52:61:9f:
14:47:e3:15:b4:c9:bf:a6:4b:63:51:53:24:89:c7:b2:00:26:
71:1b:c7:dd:5c:7a:36:78:25:73:b6:aa:84:cb:89:83:8d:e3:
a4:73:51:7e:cd:a6:f1:48:26:2a:c9:83:f0:88:58:f1:3d:fb:
87:e7:0e:c0:8c:b1:2e:a1:52:bb:70:85:0b:3a:76:11:a5:54:
bb:6a:6d:d4:91:93:93:c9:c0:39:18:e8:d5:50:fb:7a:88:86:
0d:07:94:c8
-----BEGIN CERTIFICATE-----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==
Generated at Sun Aug 4 08:14:03 2024 by rpki-client on console-ams.rpki-client.org