Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zlhbMN0pr-4MFBb2nmc8WMc0m38.roa
File: zlhbMN0pr-4MFBb2nmc8WMc0m38.roa (raw, json)
Hash identifier: 4ejOOiqHWaW6rYpvYM+ZJsH530H3BOgup/9cElassf8=
Subject key identifier: CE:58:5B:30:DD:29:AF:EE:0C:14:16:F6:9E:67:3C:58:C7:34:9B:7F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01916454A773CEE63443D31C5A90E1FFD3AB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zlhbMN0pr-4MFBb2nmc8WMc0m38.roa
Signing time: Sun 18 Aug 2024 07:12:35 +0000
ROA not before: Sun 18 Aug 2024 07:12:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 18 Aug 2024 08:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:64:54:a7:73:ce:e6:34:43:d3:1c:5a:90:e1:ff:d3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 18 07:12:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce585b30dd29afee0c1416f69e673c58c7349b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:09:25:91:26:c1:5e:d5:61:48:e7:f7:26:
1c:da:f3:c1:cc:6b:76:d0:e8:8b:99:f8:a2:5f:f1:
2b:0e:50:a1:ad:ef:f5:f2:78:b4:69:ba:9d:cf:66:
ba:9d:45:f3:68:6f:cc:ff:94:db:99:02:66:47:67:
e0:ab:d4:ad:52:5c:1b:af:a0:d8:41:d1:de:fb:5b:
4f:9e:1f:5e:fd:68:f2:86:6a:51:b0:f2:09:9f:84:
5b:fc:87:7f:9f:b1:4f:fa:52:9d:ef:68:df:13:29:
f0:6b:10:57:94:8e:80:87:df:9c:e3:80:7f:92:bf:
ff:31:d2:6d:dd:1c:91:45:a7:0c:86:01:ba:98:eb:
53:75:cd:8d:c8:3a:3d:c6:e9:c9:21:82:e4:36:f1:
63:66:94:9e:3e:2c:2f:f8:50:49:53:4d:9b:7e:e6:
04:dd:de:c7:a1:43:ec:c7:19:0f:f7:35:8f:5b:71:
4a:8a:60:2c:38:f3:81:79:bb:35:3d:0e:c2:3f:77:
9f:f4:6a:25:5e:1c:ab:71:f0:76:e2:80:5a:ec:af:
af:1f:ea:dd:e9:ee:c3:90:8c:64:81:ff:b3:0e:ad:
43:34:e1:68:58:2f:5d:e9:82:47:d4:41:34:43:ad:
03:91:d2:57:3c:5e:7b:d6:0d:db:44:f9:5c:be:0e:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:58:5B:30:DD:29:AF:EE:0C:14:16:F6:9E:67:3C:58:C7:34:9B:7F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zlhbMN0pr-4MFBb2nmc8WMc0m38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
5e:b0:02:da:5d:24:bc:81:01:51:d6:7b:88:7a:31:71:3e:d6:
12:9e:0d:c8:7e:35:57:62:54:28:53:f3:7a:59:36:30:c4:74:
57:ac:c8:83:c6:1e:22:10:55:6b:13:1f:74:5f:2d:ec:2a:b0:
b5:f7:60:58:55:cd:e0:5a:70:49:ab:7b:5b:8a:3e:3b:35:52:
21:82:56:2b:2b:1c:21:a0:01:65:09:cc:38:4f:68:72:72:db:
15:25:45:9f:5e:7d:83:bc:55:ee:af:72:2d:8f:1c:e0:bd:01:
79:24:c7:e3:79:a9:61:9d:ff:a4:12:0b:7c:d1:46:28:68:2f:
be:79:8e:0c:3d:90:db:6e:5e:e0:b8:bb:c7:b8:7f:fe:c2:4f:
c9:fb:96:27:f1:ff:53:4c:fd:43:86:14:d4:5d:6e:45:f8:02:
83:e8:eb:fb:70:89:f1:da:82:c4:81:19:71:f2:a6:f6:b6:5c:
40:84:a6:99:f8:89:23:d3:fc:da:f0:c9:a5:b7:83:2b:f3:a3:
52:cf:9f:b6:54:dd:06:e4:60:4e:a4:16:58:6e:6f:33:b8:e5:
58:44:73:f1:ef:3d:a6:81:2a:0b:5d:d6:7a:0a:30:cd:47:d9:
65:18:05:b0:ad:af:a5:5e:4f:c7:ad:91:17:a6:e8:e8:ec:33:
dc:85:48:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:06 2025 by rpki-client