Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0K63NDTiVJWGrwpo-fudBXFcBsw.roa
File: 0K63NDTiVJWGrwpo-fudBXFcBsw.roa (raw, json)
Hash identifier: 5gJ2a8NmzeurWkITLRSF6rppEU+82NcJO+vfP5AIHpY=
Subject key identifier: D0:AE:B7:34:34:E2:54:95:86:AF:0A:68:F9:FB:9D:05:71:5C:06:CC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191AAB6468154CF4622D19C2AA0E23F8FCC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0K63NDTiVJWGrwpo-fudBXFcBsw.roa
Signing time: Sat 31 Aug 2024 23:12:37 +0000
ROA not before: Sat 31 Aug 2024 23:12:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 01 Sep 2024 00:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:aa:b6:46:81:54:cf:46:22:d1:9c:2a:a0:e2:3f:8f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 31 23:12:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0aeb73434e2549586af0a68f9fb9d05715c06cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:62:d5:12:37:50:29:55:6b:0a:c0:09:f2:
d1:e8:d2:85:a3:21:e6:0f:92:e9:1a:9f:66:ef:85:
d7:94:af:5b:b6:dc:5e:19:b8:12:f2:f2:08:42:57:
e1:79:49:eb:44:2f:0c:1b:b3:bc:9c:82:7d:f1:0d:
f5:47:cc:bd:2d:43:e6:90:76:e0:7c:0b:1e:8c:eb:
1b:d7:9c:c5:d0:a6:19:29:ba:72:2d:90:3e:74:55:
e9:d5:3d:6a:3e:cd:01:3f:61:66:34:f3:89:4d:c0:
27:d7:7e:16:fb:37:ef:f5:33:49:83:9e:4a:d6:c5:
bb:77:09:50:d0:79:b1:33:c1:d5:6b:0a:b1:3d:4b:
9c:42:e1:6b:83:bf:86:7a:a9:91:1c:55:92:8d:30:
16:22:77:2d:3d:4e:00:49:8e:5a:0a:21:61:2a:bd:
c7:db:5f:04:5e:ad:be:61:59:56:b1:23:01:82:21:
24:5a:f8:b0:e2:b1:44:2e:f8:df:ce:62:f5:d4:f3:
13:e5:9a:89:fd:be:70:20:19:da:f2:dd:2d:86:3c:
17:64:80:26:dd:90:da:9c:c6:c2:65:0d:ca:7b:70:
41:60:93:86:39:54:7f:d3:4d:61:9f:27:e8:62:4c:
6a:e1:d1:8d:b0:89:36:01:90:34:b9:ca:29:d5:22:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:B7:34:34:E2:54:95:86:AF:0A:68:F9:FB:9D:05:71:5C:06:CC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0K63NDTiVJWGrwpo-fudBXFcBsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
5c:96:61:fd:0c:5e:a8:2b:36:eb:b0:cb:67:d8:8c:48:38:19:
37:7b:53:36:99:aa:ec:4a:b4:77:a7:ab:8f:c6:9a:cd:4b:dc:
75:ae:39:63:4a:16:b5:d0:a9:5c:f6:5f:01:38:92:b1:70:8b:
2d:f1:a8:ab:f6:da:4e:1b:dd:f6:ec:9d:c2:81:69:a1:9d:96:
5c:41:82:ec:52:39:af:bc:fa:8a:f8:61:1e:9a:25:bc:49:15:
85:f3:ca:eb:28:16:9e:35:e7:8d:a1:c2:0e:7f:e5:21:f8:22:
97:ab:0f:df:d9:42:e5:ba:67:6f:94:88:95:42:af:ef:01:a8:
4c:a5:b2:ef:fb:6b:e9:ed:aa:7f:cc:69:6b:ac:5a:0c:e1:5e:
6d:f1:64:cd:0a:f7:27:e2:1e:3e:a3:62:85:5d:96:0d:dc:c7:
5c:2a:c8:25:b7:5e:e8:1e:d4:d4:fd:e3:b5:9f:60:64:77:8f:
ce:f2:7d:ec:47:03:58:40:c5:88:38:80:b4:9d:17:34:cd:f9:
6f:23:fc:40:1f:1f:f4:93:a7:1e:46:eb:4b:e6:17:f5:2d:24:
48:5e:44:1c:e9:1c:5a:e8:0d:94:31:25:d8:53:90:6d:d7:11:
2d:19:01:7b:ac:b3:1e:b2:13:6b:bb:f4:c7:18:61:b9:c9:bf:
f5:4c:23:dc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZGqtkaBVM9GItGcKqDiP4/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODMxMjMxMjM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGFlYjczNDM0ZTI1NDk1ODZhZjBhNjhmOWZiOWQwNTcxNWMwNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JVi1RI3UClVawrACfLR6NKFoyHm
D5LpGp9m74XXlK9bttxeGbgS8vIIQlfheUnrRC8MG7O8nIJ98Q31R8y9LUPmkHbg
fAsejOsb15zF0KYZKbpyLZA+dFXp1T1qPs0BP2FmNPOJTcAn134W+zfv9TNJg55K
1sW7dwlQ0HmxM8HVawqxPUucQuFrg7+GeqmRHFWSjTAWInctPU4ASY5aCiFhKr3H
218EXq2+YVlWsSMBgiEkWviw4rFELvjfzmL11PMT5ZqJ/b5wIBna8t0thjwXZIAm
3ZDanMbCZQ3Ke3BBYJOGOVR/001hnyfoYkxq4dGNsIk2AZA0ucop1SIrgwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFNCutzQ04lSVhq8KaPn7nQVxXAbMMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMEs2M05EVGlWSldHcndwby1mdWRCWEZjQnN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAXJZh/QxeqCs267DLZ9iMSDgZ
N3tTNpmq7Eq0d6erj8aazUvcda45Y0oWtdCpXPZfATiSsXCLLfGoq/baThvd9uyd
woFpoZ2WXEGC7FI5r7z6ivhhHpolvEkVhfPK6ygWnjXnjaHCDn/lIfgil6sP39lC
5bpnb5SIlUKv7wGoTKWy7/tr6e2qf8xpa6xaDOFebfFkzQr3J+IePqNihV2WDdzH
XCrIJbde6B7U1P3jtZ9gZHePzvJ97EcDWEDFiDiAtJ0XNM35byP8QB8f9JOnHkbr
S+YX9S0kSF5EHOkcWugNlDEl2FOQbdcRLRkBe6yzHrITa7v0xxhhucm/9Uwj3A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:36 2025 by rpki-client