Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yuhEa3wOa9K3UJ5NkBRJRGxOiDM.roa
File: yuhEa3wOa9K3UJ5NkBRJRGxOiDM.roa (raw, json)
Hash identifier: GPau0hI1SmRe96n/tjgsspw/X66EbxBfj20O/QiRI1w=
Subject key identifier: CA:E8:44:6B:7C:0E:6B:D2:B7:50:9E:4D:90:14:49:44:6C:4E:88:33
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01910CFE18C2FC494DF3DA576ED3B0060FEA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yuhEa3wOa9K3UJ5NkBRJRGxOiDM.roa
Signing time: Thu 01 Aug 2024 08:11:04 +0000
ROA not before: Thu 01 Aug 2024 08:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 01 Aug 2024 09:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:fe:18:c2:fc:49:4d:f3:da:57:6e:d3:b0:06:0f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 1 08:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cae8446b7c0e6bd2b7509e4d901449446c4e8833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:64:e1:0d:a9:df:d5:7b:a7:02:f6:89:6c:
ff:ab:89:67:3b:80:02:23:3b:0f:82:0a:b8:74:3a:
32:82:d1:e4:31:87:84:ae:04:32:87:88:d9:40:d2:
c2:4c:54:4d:0d:b0:df:97:13:cb:c1:ac:90:d7:7c:
46:6f:15:f3:0c:20:fb:80:b5:70:74:89:8a:8b:ac:
3d:5b:85:15:a3:74:9a:44:87:82:a9:2a:8b:7c:e4:
9a:6c:25:08:ec:29:e8:76:23:ce:b9:5e:1e:9a:0d:
d5:5e:3c:a4:e2:3d:3d:4f:20:f3:3b:50:bf:03:7c:
15:d4:3e:aa:09:f7:d2:08:b5:be:3a:d8:ec:f7:17:
48:52:8a:94:f3:bf:c0:b0:34:44:ea:16:03:27:c0:
e5:39:3d:50:b0:24:6f:d7:88:92:84:75:bb:c1:b3:
d9:ed:1d:2d:42:9b:70:65:41:7a:d3:af:3c:27:85:
97:19:c7:9a:12:e4:ec:c0:c9:64:0d:0e:8f:15:ad:
e6:5f:30:b6:94:bd:72:d1:a7:5d:7b:8b:a1:61:4e:
94:47:26:15:75:38:eb:89:1c:e8:ef:d0:8a:0f:ea:
54:31:6e:8e:9e:f6:8a:e4:33:0c:aa:45:cf:ce:69:
a2:31:f3:6c:cb:44:17:e0:86:79:6e:d3:73:58:d5:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E8:44:6B:7C:0E:6B:D2:B7:50:9E:4D:90:14:49:44:6C:4E:88:33
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yuhEa3wOa9K3UJ5NkBRJRGxOiDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
52:4b:f7:1d:02:c3:e9:2a:77:b0:e2:66:e1:82:e3:70:5a:23:
d4:42:f2:42:f4:32:c7:b7:89:78:b7:b8:60:14:15:9f:2c:43:
2c:dc:f5:1d:62:8c:ba:43:9a:17:b7:7e:67:61:4e:95:d7:cc:
3e:ac:f6:98:8f:33:80:f2:32:b3:b3:71:bb:0d:15:b7:b0:59:
ac:80:dd:3d:6e:bf:41:99:b4:30:88:6b:ed:bb:ca:b4:60:9d:
ed:e6:3a:35:7d:d9:a7:cf:6b:47:2f:9a:ee:1c:af:c2:11:55:
cf:34:b9:94:10:18:be:dd:e3:87:fc:c2:98:db:ab:9f:32:c0:
ed:5b:b4:93:da:a7:b0:2a:8c:e0:28:ec:a9:b9:10:07:6e:4e:
b9:8b:56:5e:fe:6f:ca:f6:e5:dd:6c:22:74:cb:3e:a0:5f:47:
b0:f1:e5:73:e3:48:ef:60:4e:43:cb:97:f9:06:64:59:5c:74:
a1:cb:b3:a0:91:db:f0:f1:55:18:f1:60:05:93:1f:6a:a5:77:
9a:e5:76:fa:90:4d:9e:b2:7d:92:13:ed:9a:b5:04:51:dc:2c:
97:e2:84:49:81:2d:63:8c:b0:4c:db:93:f5:4d:61:33:fd:c6:
f0:a6:42:1d:57:d9:6a:1a:3f:ed:c4:45:e8:0f:ed:62:06:37:
3f:17:b2:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:09 2025 by rpki-client