Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vd6pOR8WuSmsjpREkVjPCU0iuSo.roa
File: vd6pOR8WuSmsjpREkVjPCU0iuSo.roa (raw, json)
Hash identifier: ktCLdPNeW6UW29S1autNxOBBhrBk0CAoJTIJLSPa+qE=
Subject key identifier: BD:DE:A9:39:1F:16:B9:29:AC:8E:94:44:91:58:CF:09:4D:22:B9:2A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C43D1396790DDAB928EE93D7D3C4804F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vd6pOR8WuSmsjpREkVjPCU0iuSo.roa
Signing time: Thu 05 Sep 2024 22:10:22 +0000
ROA not before: Thu 05 Sep 2024 22:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Sep 2024 23:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c4:3d:13:96:79:0d:da:b9:28:ee:93:d7:d3:c4:80:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 5 22:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bddea9391f16b929ac8e94449158cf094d22b92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:4f:2b:38:72:42:47:06:a7:52:e9:80:db:
d9:b3:68:6a:a1:4b:e0:f8:98:60:a9:ea:50:7b:a6:
d5:da:c1:88:05:30:2c:9b:bd:11:1a:49:e0:8c:2f:
aa:28:cc:8e:17:29:37:78:48:ef:23:c9:11:a8:3a:
ab:cc:f9:9d:2b:38:f0:0f:79:75:de:1e:a0:21:44:
02:af:5b:56:04:2a:5b:8d:43:8d:16:7d:4b:b1:5d:
04:1c:15:54:9c:a7:fd:ff:65:36:4e:e0:61:e7:90:
fc:15:20:ac:d4:06:b1:8d:66:94:16:4e:e5:a5:1b:
a2:a3:51:e4:2e:46:60:4d:2d:3c:cb:23:18:7c:35:
f2:05:53:ac:dd:48:4a:24:af:1e:f4:7b:b8:c8:50:
67:0c:ac:11:75:99:1b:ea:e0:24:c3:02:e1:87:a9:
c5:a9:61:97:61:a3:7b:ba:7d:b8:a1:f9:6f:25:70:
07:f4:3e:e6:fa:3f:83:5f:7a:27:c0:65:d0:fb:23:
93:c8:79:3f:58:af:80:2c:2f:15:2d:f9:eb:02:97:
89:d1:65:0c:7b:65:5b:7b:f6:a5:3e:4f:bf:02:4a:
10:bb:2d:04:ea:46:e3:ec:a2:c1:38:63:27:c5:83:
d5:14:a5:c9:d6:b4:40:50:64:b2:39:6c:da:e3:0e:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DE:A9:39:1F:16:B9:29:AC:8E:94:44:91:58:CF:09:4D:22:B9:2A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vd6pOR8WuSmsjpREkVjPCU0iuSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
21:64:fc:94:b4:14:ee:8c:da:32:a2:b2:ba:f7:ec:c2:3a:4f:
1f:94:e4:43:ec:95:99:46:51:f3:ff:74:89:b3:11:9c:8e:5a:
8c:d5:69:8d:1c:48:39:57:5f:2c:d5:7e:8a:7f:27:f2:cd:4a:
99:96:e3:ae:bb:a3:5c:f6:36:f4:d0:44:b3:84:00:8d:9a:c6:
1c:0e:b8:66:21:a2:70:80:ad:e0:6d:52:50:6a:2f:70:d0:b1:
58:06:04:70:0c:94:ad:2a:7b:ea:9a:1d:29:f7:d7:6c:c2:75:
0d:c6:50:c4:5d:d2:a0:da:2e:28:43:17:93:ad:e6:84:0c:f4:
ab:fc:70:62:5a:7c:2e:49:5e:1a:db:44:0e:05:0c:23:2a:42:
58:4a:f7:1f:9d:a9:53:37:5a:5c:67:bc:00:8e:95:67:0d:b9:
a6:47:51:f7:e0:48:67:c0:ec:6b:f0:c1:a1:91:40:75:fa:be:
38:0e:ff:38:95:86:2c:3c:78:f9:63:99:79:1a:44:6a:be:7a:
68:0e:a8:63:a3:7a:02:5e:f4:10:bb:25:a9:aa:8e:e7:5c:10:
48:90:22:44:d1:6a:cb:b8:98:1a:2c:e3:d9:f3:ea:60:c9:7c:
a5:6a:56:c7:31:88:73:88:1f:90:78:2a:e8:65:72:85:b1:7e:
00:fe:7d:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 6 01:50:17 2024 by rpki-client on console-ams.rpki-client.org