Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yjkKAiZv5j9FbApeRo30ZwNLRGE.roa
File: yjkKAiZv5j9FbApeRo30ZwNLRGE.roa (raw, json)
Hash identifier: GJi/ZPgwK3ic6RQtA7ZohMYjhha8x30IsjIq4SX9JE8=
Subject key identifier: CA:39:0A:02:26:6F:E6:3F:45:6C:0A:5E:46:8D:F4:67:03:4B:44:61
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01917BE8894CF99A751CBB14A3CCD6C4C111
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yjkKAiZv5j9FbApeRo30ZwNLRGE.roa
Signing time: Thu 22 Aug 2024 21:05:22 +0000
ROA not before: Thu 22 Aug 2024 21:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:7be7:ad1e/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 Aug 2024 21:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7b:e8:89:4c:f9:9a:75:1c:bb:14:a3:cc:d6:c4:c1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 22 21:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca390a02266fe63f456c0a5e468df467034b4461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:11:d0:37:c2:66:2a:52:28:ba:e9:3f:00:
ad:59:be:9f:29:0a:ab:ea:31:8f:a2:c7:cc:0d:42:
04:27:ea:76:fb:c9:a3:8d:c3:ce:d1:6a:c5:f0:66:
7a:41:e6:67:cb:a0:9a:fe:70:ff:22:ae:34:fd:66:
fb:56:bb:15:aa:50:90:fd:dc:5a:3a:05:db:ac:82:
4e:41:84:da:d3:34:13:75:9c:da:8c:5b:b5:22:22:
0c:58:fa:db:fa:6c:aa:16:2e:05:c4:11:7b:45:7e:
5f:3b:2e:c2:dc:33:7b:9f:56:ae:1e:bd:7c:ff:2a:
17:5a:98:f7:81:b6:0d:04:9a:35:57:26:99:a9:f5:
50:20:c7:7c:fb:70:5b:3d:1f:de:c9:4c:f4:b5:28:
65:5d:e0:39:dc:16:97:5e:1f:1d:f7:48:f0:1b:7b:
8c:98:8a:3c:7f:cc:cb:79:c1:2f:84:18:64:f4:88:
e6:0b:d1:15:79:76:a8:46:63:e9:fc:1e:6d:5e:98:
0a:96:a6:35:16:47:a6:46:6f:7a:4d:61:1e:4b:50:
9d:fb:d8:df:a0:2d:88:42:53:b1:a1:79:d7:2b:ce:
ca:d9:1d:8f:eb:d0:9f:97:97:cc:94:cf:b7:6d:ca:
91:fe:36:50:be:6c:71:5a:db:04:37:09:47:33:83:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:39:0A:02:26:6F:E6:3F:45:6C:0A:5E:46:8D:F4:67:03:4B:44:61
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yjkKAiZv5j9FbApeRo30ZwNLRGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:7be7:ad1e/128
Signature Algorithm: sha256WithRSAEncryption
08:ac:1a:41:8f:a2:2d:6a:c0:d5:06:50:d4:cd:81:bc:cf:72:
3e:b4:29:9e:b7:24:50:b5:09:3a:23:a7:1c:89:fd:12:92:16:
b8:40:ea:2e:37:07:30:82:79:d3:18:04:9b:4d:b1:3c:47:7c:
3f:ca:1e:b2:0d:17:85:51:b0:bf:35:1b:43:ce:ad:28:93:1a:
89:15:2a:5e:8d:94:6e:c1:8e:a8:02:7e:c6:4a:f4:a2:85:ae:
bb:7f:3e:7b:25:f7:60:b3:dd:44:d1:4d:9c:46:98:33:9f:76:
0d:d4:c9:48:75:60:55:de:00:d2:6a:87:e6:84:0b:94:e9:e3:
70:d0:8b:c8:e4:3f:9d:d7:4a:c3:28:ad:fa:b1:fd:ca:59:73:
9a:97:06:20:e9:d4:39:df:94:ed:9f:f4:45:e0:67:8d:ad:72:
5d:a6:7b:50:da:10:0a:f7:21:c5:5d:d1:f7:59:50:44:1c:5e:
58:b6:e1:1f:01:81:13:5e:c4:40:d1:6f:33:2b:7e:11:2c:b3:
50:bd:e9:ff:d8:01:ee:91:9c:d1:7c:6a:7c:b7:4d:d6:2e:e0:
4b:9f:78:61:d6:5f:ac:89:eb:39:38:81:ed:75:0a:9f:2b:9a:
12:3d:c0:17:47:21:85:b8:d2:d4:5d:f8:54:b4:4d:ec:3f:37:
89:b1:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:41 2025 by rpki-client