Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xz0ZkTPzJIDrxmp8auJMfRpnnPM.roa
File: xz0ZkTPzJIDrxmp8auJMfRpnnPM.roa (raw, json)
Hash identifier: WIDRjOw/Ly0oltjjVe02LSYqSzAclLMyXvaDO9yksig=
Subject key identifier: C7:3D:19:91:33:F3:24:80:EB:C6:6A:7C:6A:E2:4C:7D:1A:67:9C:F3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191163829ACD9C2C11B5FB943D47DFE7D13
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xz0ZkTPzJIDrxmp8auJMfRpnnPM.roa
Signing time: Sat 03 Aug 2024 03:11:04 +0000
ROA not before: Sat 03 Aug 2024 03:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 03 Aug 2024 04:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:16:38:29:ac:d9:c2:c1:1b:5f:b9:43:d4:7d:fe:7d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 3 03:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c73d199133f32480ebc66a7c6ae24c7d1a679cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:3a:11:c8:11:17:ab:c9:2d:9b:04:f0:e1:
45:10:3f:89:e2:7d:b8:86:5b:2f:b7:f4:d0:ec:1f:
ae:e0:ab:f3:ce:c3:27:19:a7:96:c7:44:c3:65:b7:
17:7a:7c:84:4c:ff:3e:5c:56:88:d2:52:c7:4f:19:
e6:ce:82:13:4c:c9:db:31:4b:bc:d8:d8:85:59:9e:
e5:0c:bf:cc:6e:cc:d2:f7:7d:af:fa:ee:09:54:fb:
53:b5:9b:c5:91:fd:dd:9c:39:d1:b3:bb:68:d5:92:
30:65:b5:24:73:da:1d:29:e9:f5:62:47:2d:23:36:
fb:47:48:06:54:84:66:ea:b5:dc:01:bb:60:3c:fa:
b7:cb:82:ca:ed:6a:55:73:21:9d:6c:7f:f1:70:7b:
4d:2d:8e:43:b7:e4:20:b0:91:02:f2:12:f4:07:57:
38:63:2a:7b:ef:e1:58:5e:09:b2:0f:9d:a7:9b:a1:
2e:e0:98:21:b2:6e:8e:04:2a:83:2c:12:7e:85:ce:
f2:db:30:e3:42:8e:2e:8c:b9:a3:ef:e1:43:37:ad:
a2:c0:11:bd:e5:74:ce:02:43:44:d0:ce:6c:ac:65:
cb:e8:f8:2f:d8:40:88:64:6f:1a:e0:94:b3:51:fa:
26:0f:47:0d:cc:a0:3f:ef:90:78:f2:e5:dd:bf:fc:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3D:19:91:33:F3:24:80:EB:C6:6A:7C:6A:E2:4C:7D:1A:67:9C:F3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xz0ZkTPzJIDrxmp8auJMfRpnnPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
69:a9:43:a3:06:57:a3:d7:de:2a:81:a7:c2:a7:4c:bc:84:b2:
cd:20:63:e7:15:fd:2f:44:37:66:5d:cd:a1:28:79:ac:d5:ab:
ef:54:f3:47:01:4f:d7:48:ae:ee:2e:9d:43:bf:00:c4:e3:4e:
d7:9e:af:45:bd:d7:e8:2d:44:70:bd:1a:c4:7e:71:2a:33:9c:
21:07:3c:92:b8:43:5e:0a:75:f1:ac:9f:25:f8:8b:7d:ad:f7:
7e:86:14:e7:e1:95:b0:7a:a1:0d:93:6f:3a:ab:fa:8f:53:59:
96:1d:fb:d5:5e:e7:a0:c4:14:d2:3f:78:0b:d4:c1:d1:ba:29:
a0:67:0f:15:f8:6d:36:7a:87:d7:2b:80:b0:ee:17:69:d6:8a:
9e:66:43:29:89:aa:cb:56:4d:de:43:ed:2f:01:93:62:47:0c:
e3:75:c2:56:88:17:56:ce:af:e6:20:d4:3f:de:e0:7e:f0:63:
ba:18:a5:09:98:86:37:78:fb:ba:8f:22:73:e0:7c:b8:ad:db:
9f:3a:fc:78:70:8d:cb:d7:e1:c4:6e:a8:0a:a6:ef:67:2a:51:
71:6c:a0:55:38:62:8e:65:48:c0:f1:cb:c5:75:8f:55:b2:9d:
af:ce:6b:e9:67:85:74:35:8a:06:b1:67:70:bb:45:fe:47:af:
22:6e:9f:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 3 06:03:55 2024 by rpki-client on console-fra.rpki-client.org