Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yUAt5GFqnUpLMMs75HPvmK96gIk.roa
File: yUAt5GFqnUpLMMs75HPvmK96gIk.roa (raw, json)
Hash identifier: 2t7ry8zpqZ9kigENku7Dr+D9fa8eOy9V7zqrtwCjMG8=
Subject key identifier: C9:40:2D:E4:61:6A:9D:4A:4B:30:CB:3B:E4:73:EF:98:AF:7A:80:89
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918B627B5478796B23B9A79AE4020DD6FE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yUAt5GFqnUpLMMs75HPvmK96gIk.roa
Signing time: Sun 25 Aug 2024 21:12:52 +0000
ROA not before: Sun 25 Aug 2024 21:12:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 Aug 2024 22:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8b:62:7b:54:78:79:6b:23:b9:a7:9a:e4:02:0d:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 25 21:12:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9402de4616a9d4a4b30cb3be473ef98af7a8089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:0c:3b:74:1a:c6:6b:6c:09:c0:47:a7:d5:
e3:1f:77:a3:7d:7a:93:6b:dc:09:28:0a:f1:24:98:
f4:7a:47:9f:f2:8d:2a:0d:2d:6d:34:15:af:12:db:
8e:88:5b:7f:61:dc:b9:19:fe:84:7b:3a:f1:76:fb:
ed:c3:ec:04:d7:42:b6:7b:cd:19:9f:4d:92:68:6b:
e5:20:04:b7:97:45:02:12:b5:74:3f:f4:af:64:95:
27:83:3e:3a:70:be:39:35:a5:d6:b8:87:56:ee:3e:
27:c2:f4:9b:84:20:fa:4c:3c:71:72:cb:3d:69:c0:
48:83:78:a2:6d:29:9f:ea:82:60:a6:b5:c3:83:70:
31:4c:e7:f2:36:2b:5a:ec:f8:8c:f9:4d:67:93:c4:
0b:b0:fe:c8:0b:47:1e:34:a3:7d:3a:0c:50:39:95:
b2:3e:b8:8f:23:59:86:37:19:ff:c8:41:b3:39:40:
8b:8f:51:17:6e:dc:43:d1:e5:2f:1c:5f:85:58:06:
88:10:4a:96:f3:a1:f3:00:b3:79:57:c7:c6:ce:14:
90:62:2e:68:5c:ea:12:12:29:6d:60:8e:ef:17:a4:
d2:98:dc:b7:68:e4:af:4f:72:2c:78:b3:87:0f:71:
fa:52:0d:52:34:1e:f3:a2:95:b1:db:20:94:30:39:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:40:2D:E4:61:6A:9D:4A:4B:30:CB:3B:E4:73:EF:98:AF:7A:80:89
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yUAt5GFqnUpLMMs75HPvmK96gIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
37:17:33:9f:ed:f3:e2:d7:8a:6f:43:b3:9d:d3:91:00:8a:f8:
f3:9a:aa:3a:0d:0e:9b:94:31:3e:c0:94:91:1a:6f:8c:b3:d6:
60:0c:60:e8:56:06:1d:8b:c3:34:cf:75:24:63:64:13:6b:23:
a4:36:b3:d4:e1:f4:27:4d:e0:9d:bf:a0:45:0d:54:06:8e:8f:
cf:c5:6d:42:6c:a5:00:7b:8f:2b:21:bf:c7:8c:a6:ff:cb:71:
f9:b2:a6:7d:86:70:b6:3a:c3:02:cb:20:2d:c5:15:e3:2c:59:
73:62:2a:24:4c:9a:1c:d5:73:d5:c9:f7:96:cc:e6:5c:36:e9:
05:db:e6:76:42:b8:93:14:92:2a:a6:7e:84:6a:f7:b3:55:cf:
69:55:a4:d5:12:42:14:ad:b7:83:19:30:02:62:29:e3:e8:bc:
30:db:62:52:98:4f:ae:0b:a8:ec:49:00:d0:d6:e3:13:f0:83:
56:e4:61:8a:0e:0e:9c:2e:03:e3:6a:68:f0:03:9a:b7:52:8f:
4c:1d:9a:3a:59:55:3b:9d:b3:ff:33:cc:ea:d8:48:48:d2:7f:
c8:6d:d8:64:1b:8e:8c:9e:d1:bc:03:6f:db:78:50:f7:d3:dd:
5d:57:3d:13:ee:5c:e7:e8:f4:2b:5d:3c:28:74:a1:39:3b:56:
e9:25:89:cb
-----BEGIN CERTIFICATE-----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==
Generated at Sun Aug 25 23:33:36 2024 by rpki-client on console-fra.rpki-client.org