Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ywZE9_7sCGOosP0zsn6X-dIGMfw.roa
File: ywZE9_7sCGOosP0zsn6X-dIGMfw.roa (raw, json)
Hash identifier: emUaXsOxJmm35wjUJB4E06OMaHxsPTpdSJ5Z7tAeeoY=
Subject key identifier: CB:06:44:F7:FE:EC:08:63:A8:B0:FD:33:B2:7E:97:F9:D2:06:31:FC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019147C94B2C9FAF5E161D0095DAACA36AF2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ywZE9_7sCGOosP0zsn6X-dIGMfw.roa
Signing time: Mon 12 Aug 2024 18:10:59 +0000
ROA not before: Mon 12 Aug 2024 18:10:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 12 Aug 2024 19:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:47:c9:4b:2c:9f:af:5e:16:1d:00:95:da:ac:a3:6a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 12 18:10:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb0644f7feec0863a8b0fd33b27e97f9d20631fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:82:54:df:a3:12:3b:08:c7:32:b3:be:94:
70:98:72:6d:dd:92:df:03:f4:fd:10:92:c9:d8:8b:
91:85:b9:65:8f:c5:1a:bc:70:73:90:9e:6e:1a:45:
60:13:7f:ad:ee:0f:f4:c7:e3:85:d9:1e:24:5d:bd:
5e:06:8e:6c:1f:ad:83:c4:50:10:a0:cf:01:be:5c:
d8:3c:13:46:dd:66:69:b7:05:03:de:27:58:eb:3a:
3a:95:b1:01:0f:bb:77:60:70:0f:48:c2:9b:fa:fb:
bc:9a:42:98:b4:55:df:7a:94:44:ff:9c:9e:d1:24:
e0:06:c2:d3:48:0e:9a:7a:e1:ec:35:2a:30:9a:55:
b6:25:df:27:56:60:45:3b:b2:35:80:75:58:55:84:
61:ec:b4:c6:ee:eb:66:41:cd:5f:46:08:4c:ac:f4:
b1:79:fd:cb:31:26:b3:54:b5:22:d7:fb:06:20:45:
1d:2a:c7:f1:ce:75:16:39:e3:58:e6:92:96:0d:9c:
f4:97:6b:7e:2e:f7:3f:e9:1a:17:fe:b3:54:1e:f5:
54:e6:b8:ce:18:d4:13:94:a6:f5:2b:1a:62:5b:59:
20:9e:a0:81:3f:94:a7:eb:9c:a0:44:df:c2:bc:6e:
e0:80:e0:a8:9c:93:a0:a6:d2:b7:ba:46:b9:ae:3b:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:06:44:F7:FE:EC:08:63:A8:B0:FD:33:B2:7E:97:F9:D2:06:31:FC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ywZE9_7sCGOosP0zsn6X-dIGMfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
80:87:5e:e2:48:f4:e2:73:27:6b:08:42:0c:d7:cb:63:bf:3b:
a8:2c:e4:62:9f:d9:cd:da:d7:9c:3b:70:67:20:d3:b5:53:ee:
15:ec:a4:13:62:e2:eb:e1:82:6f:5f:bb:68:d2:25:14:d2:85:
bf:0e:bd:5e:d5:0e:37:75:47:36:70:aa:a8:4d:40:ae:54:03:
2c:7d:bf:fe:76:74:54:4d:5e:4d:63:67:5c:91:2e:40:7b:1b:
b5:62:63:50:dc:a3:9d:b8:60:06:eb:54:67:95:0c:7a:d5:e3:
d5:2d:83:dd:44:47:18:06:83:18:c9:db:f3:02:14:a9:66:e6:
06:2f:f6:ab:6a:89:1e:67:75:b7:a4:3c:0d:29:6c:06:23:1b:
d6:a7:2e:a1:11:d2:00:ca:0c:a6:b0:f2:fb:b0:0c:b1:fc:88:
a5:3c:12:5f:41:1d:c3:b0:31:58:b6:06:b3:28:6d:40:08:70:
f7:f8:55:ef:91:9e:0d:2a:1d:97:bf:65:b8:26:a2:7b:b8:cf:
1b:96:ca:15:e5:27:b4:bc:a4:3f:e8:01:c5:3d:ad:18:ce:a8:
dd:27:75:4b:99:77:b3:26:c8:b5:99:f3:55:3e:dc:4b:01:c6:
1d:40:98:71:15:62:e1:03:b7:4f:5a:46:3b:4e:0a:9e:d1:bf:
a9:d7:5e:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:40 2025 by rpki-client