Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vYM8l7O5NcPxBucb6Bgc0JXMc_I.roa
File: vYM8l7O5NcPxBucb6Bgc0JXMc_I.roa (raw, json)
Hash identifier: wxHF3HEThzZLcwkaFyMjE5L/wvseaW2SBVp+zaixhSo=
Subject key identifier: BD:83:3C:97:B3:B9:35:C3:F1:06:E7:1B:E8:18:1C:D0:95:CC:73:F2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B2DE03DC2D64DA10FE330CEA6B81031F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vYM8l7O5NcPxBucb6Bgc0JXMc_I.roa
Signing time: Mon 02 Sep 2024 13:13:00 +0000
ROA not before: Mon 02 Sep 2024 13:13:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 02 Sep 2024 14:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:de:03:dc:2d:64:da:10:fe:33:0c:ea:6b:81:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 2 13:13:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd833c97b3b935c3f106e71be8181cd095cc73f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:dd:54:a2:ea:5b:be:ca:e6:f8:4c:b1:eb:
e9:b6:eb:4f:0c:b7:08:db:64:63:0c:9f:29:cb:e1:
bb:e7:79:a3:4d:80:d9:c5:bf:b5:6c:8a:4f:f1:b4:
cd:38:61:60:f5:9b:bb:18:40:e6:be:7d:88:46:ee:
43:b4:8c:ed:12:95:2f:bf:2a:3b:61:f1:51:5c:ad:
83:26:f1:3b:ef:fb:23:9d:c6:9a:d1:14:43:b5:76:
a0:fe:38:e6:48:3f:2a:12:ab:36:3e:b1:15:af:1d:
f0:9e:e9:76:88:ce:2d:76:73:f0:9e:b6:eb:fe:d6:
3c:06:0d:d4:4b:11:c7:ca:19:cb:cc:51:6e:97:83:
89:33:ae:60:13:b1:65:85:49:15:9f:a9:13:e5:0b:
f5:5d:05:c2:55:51:03:df:92:cb:fd:20:70:b1:48:
e1:16:be:7e:de:66:64:ae:ea:4c:ec:77:db:51:a3:
1e:90:cb:7f:b6:4c:cb:7e:9b:32:e0:0c:28:87:cb:
2d:ec:07:82:7f:8c:fa:e1:7f:f1:0d:35:55:38:a4:
a9:92:8b:ab:0d:f3:df:cb:c0:9f:7a:58:dc:8a:a3:
7e:b9:9a:1a:7c:8e:10:76:7b:3b:27:4a:3e:bd:82:
77:ba:ee:b3:f7:3b:6d:99:da:26:19:16:08:b3:e2:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:83:3C:97:B3:B9:35:C3:F1:06:E7:1B:E8:18:1C:D0:95:CC:73:F2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vYM8l7O5NcPxBucb6Bgc0JXMc_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
2d:aa:8a:a6:cd:12:02:fc:e6:f3:cf:a4:fa:4d:c2:5a:e1:62:
c5:46:ac:77:f2:b7:99:20:f3:66:50:41:34:14:de:88:7d:a5:
a9:39:37:20:a5:00:2b:34:0a:69:d5:29:8c:08:8a:e6:2d:19:
20:68:12:7d:50:19:66:31:92:fb:05:6b:b9:be:4c:e2:c2:e9:
60:45:96:b6:09:d5:46:18:eb:81:dd:ec:7a:3b:8d:9d:ed:38:
8a:64:40:ee:b1:60:9c:37:ea:eb:af:c2:b5:1f:d5:d2:cc:5b:
a3:35:5d:f9:9f:85:b0:44:1e:2c:6a:5c:14:62:53:7d:ba:74:
8d:03:70:ba:d1:4a:c5:6a:e0:bc:73:25:1f:c4:e1:96:01:92:
d3:a3:cf:3c:a8:ef:ee:06:8b:68:6b:83:26:89:ae:3d:54:02:
3e:8e:cf:95:ea:01:24:4e:4c:a0:99:3f:10:48:3d:0d:d8:9e:
72:67:9f:52:e8:f8:b0:b0:10:bb:9d:c7:9e:6f:2e:01:ea:c3:
46:1a:d6:a2:8e:c5:cc:34:18:01:df:f7:89:41:ee:1a:14:8b:
6f:65:b2:0a:0a:72:0b:5a:a3:92:33:7c:cd:b6:aa:d2:49:d0:
ef:b3:52:ca:59:61:05:fb:fb:44:6c:30:3a:00:4a:53:e4:e9:
0f:3f:fa:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 2 18:31:11 2024 by rpki-client on console-ams.rpki-client.org