Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yrYrJhZ5XpesDTOWadxgGcB9cVY.roa
File: yrYrJhZ5XpesDTOWadxgGcB9cVY.roa (raw, json)
Hash identifier: 5H+Jueu43rcBy2ClkRF8a17cbDAAebo70PqS4ruOOeU=
Subject key identifier: CA:B6:2B:26:16:79:5E:97:AC:0D:33:96:69:DC:60:19:C0:7D:71:56
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019136A1E3CB01FB91482E701642976A41B1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yrYrJhZ5XpesDTOWadxgGcB9cVY.roa
Signing time: Fri 09 Aug 2024 10:14:24 +0000
ROA not before: Fri 09 Aug 2024 10:14:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 09 Aug 2024 11:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:a1:e3:cb:01:fb:91:48:2e:70:16:42:97:6a:41:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 9 10:14:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cab62b2616795e97ac0d339669dc6019c07d7156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6a:db:61:c4:06:d3:8a:bf:9b:4e:a7:ea:fb:
2c:f7:83:83:27:da:43:fd:d9:81:10:5a:e0:e2:99:
61:93:11:20:22:6d:49:c3:13:bf:bb:01:27:53:5d:
41:95:03:52:80:ba:b0:b7:56:3a:d0:ed:13:0a:63:
71:1f:da:7c:66:e7:5b:85:ca:81:db:1a:54:ca:c1:
07:fe:18:dd:33:7c:c7:c9:9d:dd:16:8e:2a:80:23:
de:9b:0d:9b:14:dd:9c:27:c6:c9:aa:6e:64:62:7e:
61:01:76:fa:d3:73:f2:4f:ce:59:2a:03:1b:2c:35:
f9:af:ec:41:8b:1c:c8:44:b6:c9:d5:09:07:27:1c:
22:54:7b:e0:60:21:f2:c1:3d:04:0c:0d:dc:f2:fd:
77:22:d7:77:bd:25:56:5f:07:5f:da:73:73:3a:bf:
fa:30:db:2e:5e:2f:4d:fd:f4:88:4b:53:e5:7b:bc:
e3:8c:69:6d:66:12:57:fc:91:85:f1:e5:cc:91:e8:
a9:29:90:3b:83:c8:db:59:2b:a2:7d:62:bd:74:5c:
0c:24:47:ce:9f:bf:be:6a:f1:5f:d8:46:60:d8:6b:
f0:d4:04:56:49:f8:1d:4f:ff:6e:2e:ea:35:ca:b9:
c8:1c:85:0d:e1:4d:3b:2b:ff:ad:ac:dd:c0:70:1f:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:2B:26:16:79:5E:97:AC:0D:33:96:69:DC:60:19:C0:7D:71:56
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yrYrJhZ5XpesDTOWadxgGcB9cVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
7e:f0:98:4c:bf:a8:8c:34:13:28:5a:c0:62:96:e0:62:25:2d:
e5:0d:56:63:c1:b8:f4:bb:1f:44:5f:72:a8:e5:e3:8c:3f:d1:
d5:9d:11:f8:86:75:62:a8:09:83:29:c6:c3:5a:5c:6e:04:ff:
56:ad:64:a4:53:bc:3f:da:1f:e9:9b:ee:fa:e7:fd:d2:b0:cc:
aa:8c:97:fb:0c:60:f3:13:55:66:6f:4e:4b:60:26:f0:6b:f8:
2d:41:49:34:ee:05:69:34:91:55:b5:61:aa:b1:64:c4:94:93:
69:45:1f:cd:a1:e5:41:e1:23:f7:3e:e6:f4:54:46:89:5c:e6:
0d:45:38:bd:2a:02:fb:76:98:6e:06:6a:ce:a3:34:8b:d5:f0:
e3:81:dd:07:42:ba:a0:29:ac:fd:a8:5b:76:64:04:ac:e4:f2:
eb:33:30:af:56:64:9e:ec:44:7c:6b:0b:c6:8a:42:e2:f2:2c:
a4:b1:6c:67:49:83:d0:11:05:bc:cb:cb:64:ea:18:d0:ae:68:
2e:4e:f3:92:c6:12:f4:56:42:c0:e9:e4:2b:65:b6:af:3f:aa:
fe:8b:70:9b:50:54:2b:7e:dc:5d:96:a9:2f:00:c5:7a:3e:49:
e2:3c:cf:0e:0f:66:60:93:ed:b8:6a:0f:95:ef:76:ea:18:97:
16:30:d3:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 9 13:56:30 2024 by rpki-client on console-fra.rpki-client.org