Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nIcYlxHR83yBg9xpJ6Ss0F413dk.roa
File: nIcYlxHR83yBg9xpJ6Ss0F413dk.roa (raw, json)
Hash identifier: IPfEaBumv7I0IVA6U6nJVlYNpZpE5o0JsLvb0R5BjLo=
Subject key identifier: 9C:87:18:97:11:D1:F3:7C:81:83:DC:69:27:A4:AC:D0:5E:35:DD:D9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194836A90A64BB33CE23A34E6A7DC160E98
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nIcYlxHR83yBg9xpJ6Ss0F413dk.roa
Signing time: Mon 20 Jan 2025 11:13:06 +0000
ROA not before: Mon 20 Jan 2025 11:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 20 Jan 2025 12:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:6a:90:a6:4b:b3:3c:e2:3a:34:e6:a7:dc:16:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 20 11:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c87189711d1f37c8183dc6927a4acd05e35ddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:2f:ea:58:0e:11:b7:69:49:34:4d:a5:c8:
54:1e:c2:8b:2b:39:32:87:7d:33:52:91:ec:fe:de:
95:a5:2b:04:ff:98:4d:5e:47:96:00:96:1c:5d:80:
35:06:be:9c:03:6a:be:0c:e5:08:54:18:54:d9:df:
fe:02:8d:e3:ff:a9:87:20:99:e0:91:0a:63:c5:d3:
a5:76:e0:ea:de:07:67:b0:a6:c3:be:df:96:f4:b3:
b6:23:ab:c9:7e:64:fb:11:d7:59:47:c3:29:e3:48:
a2:06:3f:97:06:af:73:cf:a8:79:3b:90:38:38:0b:
e3:94:59:48:b7:8c:1d:3e:d9:b1:2d:3d:27:ac:22:
fc:37:89:90:c6:e9:d1:5c:15:3c:ed:c7:e6:26:d6:
88:59:0a:44:2f:60:33:de:a9:f1:38:5e:16:45:2e:
8e:2c:5d:03:a7:27:36:eb:0a:45:01:3e:be:51:f0:
6f:d2:a1:b3:26:7a:49:02:d9:5a:7f:37:f1:a6:73:
f5:01:13:dd:84:47:84:be:d9:0e:9b:c8:88:0c:a8:
5c:d3:64:52:73:8c:94:7e:32:ef:31:04:1f:c7:e7:
d5:5d:75:68:24:04:55:81:e6:35:cd:64:69:0f:71:
62:b6:1b:a6:28:c0:48:5e:d5:77:13:a2:9b:2e:2f:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:18:97:11:D1:F3:7C:81:83:DC:69:27:A4:AC:D0:5E:35:DD:D9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nIcYlxHR83yBg9xpJ6Ss0F413dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
87:02:6a:36:23:9b:b7:d9:79:23:d9:c1:09:b3:37:43:39:53:
5c:b1:0e:09:01:65:58:4e:f3:f7:28:88:7c:b4:5c:28:f1:eb:
77:eb:3b:cd:14:c5:e3:f8:82:a3:7f:a8:03:cd:63:e5:b2:e0:
26:44:64:8b:c7:54:fd:a4:86:11:3d:55:ef:21:4c:c2:b9:f9:
72:80:7e:d3:9d:b1:a0:47:a8:d5:1c:cd:4e:a0:fd:3d:34:cb:
6f:56:b2:86:88:5c:ef:62:37:b3:76:8b:cc:2d:0b:6f:de:57:
b6:90:0a:4f:e6:e0:f3:0a:86:0f:ff:60:2c:4f:1f:56:4b:d2:
41:06:d9:21:29:07:73:86:40:6e:1e:4e:76:55:98:e7:fd:57:
3e:83:ee:5e:19:60:0c:e7:af:f3:e3:08:f9:3e:7f:d3:77:ca:
bf:48:93:22:c5:03:e9:5a:c8:7f:b6:ff:75:10:69:74:79:98:
da:a1:9c:5a:13:c2:e7:92:76:bb:28:60:98:db:e2:d6:0d:16:
88:8c:07:4c:5e:23:10:f9:ee:c5:f5:f6:1c:27:e4:81:1c:b8:
b0:7d:98:ab:a8:2f:c2:9a:fd:89:f4:00:56:7b:67:d8:4c:c7:
b2:67:4c:da:5f:aa:d8:ed:dd:fd:61:e0:62:8b:1d:97:59:3b:
f6:3b:1f:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 20 19:38:50 2025 by rpki-client on console.sobornost.net