Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2tXsSH2oZi-LshDwyLAdzS-Xmes.roa
File: 2tXsSH2oZi-LshDwyLAdzS-Xmes.roa (raw, json)
Hash identifier: p4y2YGNDa+bVFOFHO781zrHkCWDJF4mZrmZDnZsqnTc=
Subject key identifier: DA:D5:EC:48:7D:A8:66:2F:8B:B2:10:F0:C8:B0:1D:CD:2F:97:99:EB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191CD7940E9E826E498E1941E4B4CB1800B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2tXsSH2oZi-LshDwyLAdzS-Xmes.roa
Signing time: Sat 07 Sep 2024 17:12:41 +0000
ROA not before: Sat 07 Sep 2024 17:12:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 07 Sep 2024 18:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cd:79:40:e9:e8:26:e4:98:e1:94:1e:4b:4c:b1:80:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 7 17:12:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dad5ec487da8662f8bb210f0c8b01dcd2f9799eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:2c:a9:33:b6:42:05:f6:c5:b6:c7:56:2a:
f8:54:73:45:b9:15:0d:f6:23:4a:bc:8d:c1:c7:ef:
f1:5c:7d:ad:8b:13:d4:48:28:e8:f6:a9:ef:03:6f:
31:cc:59:87:fd:d1:56:eb:3f:92:95:4a:41:2e:bb:
20:6c:68:2b:86:f4:83:82:e7:58:2f:4f:ef:5d:8a:
f6:c8:10:d4:36:f1:b5:66:dd:b7:fa:59:45:5a:12:
c6:70:77:9e:a1:5b:8f:48:07:ec:85:cd:60:a4:b2:
89:2a:08:cd:c0:ff:75:6c:bd:68:d2:18:54:44:ff:
ca:fa:7b:05:9f:22:61:60:49:e6:af:e7:17:de:ab:
5b:3e:3c:d9:d4:35:02:cb:7b:40:56:eb:bc:9e:8f:
5e:c8:32:a0:d4:3e:d0:ae:f8:0f:07:30:26:58:c3:
d0:2d:e6:8c:4c:af:5c:58:1c:75:80:f8:d1:67:58:
07:26:13:7c:fe:3e:22:bd:8e:f3:95:8c:0d:43:0e:
fe:5e:ab:50:bc:4e:c1:2b:fc:72:9f:6a:10:1b:09:
58:9b:14:0b:e2:bb:4d:75:a4:48:3f:e9:32:22:98:
3d:24:a5:f9:fc:ae:26:16:75:9b:79:f4:b4:79:1b:
d1:b0:0b:c8:4d:a2:e7:45:0f:f8:da:df:44:a5:90:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D5:EC:48:7D:A8:66:2F:8B:B2:10:F0:C8:B0:1D:CD:2F:97:99:EB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2tXsSH2oZi-LshDwyLAdzS-Xmes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
39:b3:51:a2:80:5d:03:32:94:f4:63:82:f9:a6:30:4a:7f:89:
6a:c7:18:b0:53:0b:f2:f8:65:c3:72:40:79:61:7f:b8:e3:58:
fc:12:5f:84:8a:05:d0:04:28:0e:e9:37:7f:91:25:74:49:a6:
80:66:3d:54:fe:1f:8d:38:2c:bc:fa:22:9d:1d:57:31:44:07:
31:c9:59:78:05:be:51:ba:e8:21:02:60:61:9b:ef:b1:f3:77:
a6:24:7c:fe:43:ac:b8:8f:07:aa:1f:71:00:d9:3e:5f:39:14:
03:69:ee:0b:20:0c:83:50:34:e2:ec:fd:12:90:c0:9f:cc:eb:
85:35:ee:bb:b7:14:d9:11:f5:20:a5:d7:03:de:35:e2:78:f8:
78:99:91:af:ed:aa:e8:9b:87:cc:77:03:56:91:dd:94:e9:10:
5e:47:5a:4b:4f:c4:c0:4a:73:41:87:62:b7:d7:0c:3f:53:c1:
7d:49:44:43:7e:a9:09:39:0e:56:3f:63:b0:6e:6f:8f:0d:57:
4a:ce:83:95:b4:45:96:90:f2:7c:74:60:4b:fd:9f:41:29:31:
23:3b:0d:17:4a:2a:9e:3b:85:0f:9b:d0:fe:8d:bd:05:7d:da:
7e:d2:86:94:6d:12:7f:e5:66:1e:2f:5c:cc:2a:d3:da:6e:ab:
04:11:5d:45
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZHNeUDp6CbkmOGUHktMsYALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTA3MTcxMjQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWQ1ZWM0ODdkYTg2NjJmOGJiMjEwZjBjOGIwMWRjZDJmOTc5OWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIMsqTO2QgX2xbbHVir4VHNFuRUN
9iNKvI3Bx+/xXH2tixPUSCjo9qnvA28xzFmH/dFW6z+SlUpBLrsgbGgrhvSDgudY
L0/vXYr2yBDUNvG1Zt23+llFWhLGcHeeoVuPSAfshc1gpLKJKgjNwP91bL1o0hhU
RP/K+nsFnyJhYEnmr+cX3qtbPjzZ1DUCy3tAVuu8no9eyDKg1D7QrvgPBzAmWMPQ
LeaMTK9cWBx1gPjRZ1gHJhN8/j4ivY7zlYwNQw7+XqtQvE7BK/xyn2oQGwlYmxQL
4rtNdaRIP+kyIpg9JKX5/K4mFnWbefS0eRvRsAvITaLnRQ/42t9EpZAOIwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFNrV7Eh9qGYvi7IQ8MiwHc0vl5nrMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMnRYc1NIMm9aaS1Mc2hEd3lMQWR6Uy1YbWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAObNRooBdAzKU9GOC+aYwSn+J
ascYsFML8vhlw3JAeWF/uONY/BJfhIoF0AQoDuk3f5EldEmmgGY9VP4fjTgsvPoi
nR1XMUQHMclZeAW+UbroIQJgYZvvsfN3piR8/kOsuI8Hqh9xANk+XzkUA2nuCyAM
g1A04uz9EpDAn8zrhTXuu7cU2RH1IKXXA9414nj4eJmRr+2q6JuHzHcDVpHdlOkQ
XkdaS0/EwEpzQYdit9cMP1PBfUlEQ36pCTkOVj9jsG5vjw1XSs6DlbRFlpDyfHRg
S/2fQSkxIzsNF0oqnjuFD5vQ/o29BX3aftKGlG0Sf+VmHi9czCrT2m6rBBFdRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:54 2025 by rpki-client