Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2w9iaGIxwN2x-hjvNcBLQyxwwHU.roa
File: 2w9iaGIxwN2x-hjvNcBLQyxwwHU.roa (raw, json)
Hash identifier: i68gS1tECAyjk/+TDXp42haAQ/wRyeFNpVvkT9HfqEA=
Subject key identifier: DB:0F:62:68:62:31:C0:DD:B1:FA:18:EF:35:C0:4B:43:2C:70:C0:75
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190BF13F488D1B8B68C585659527040121E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2w9iaGIxwN2x-hjvNcBLQyxwwHU.roa
Signing time: Wed 17 Jul 2024 05:04:34 +0000
ROA not before: Wed 17 Jul 2024 05:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:bf13:bff8/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 17 Jul 2024 05:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:13:f4:88:d1:b8:b6:8c:58:56:59:52:70:40:12:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 17 05:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db0f62686231c0ddb1fa18ef35c04b432c70c075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:cd:59:61:76:0b:76:bb:b9:ae:e3:9b:22:
38:ea:86:f6:01:cf:30:2b:5d:75:af:13:b5:07:43:
37:64:00:d8:55:19:a4:65:8a:9f:d6:23:d0:71:ce:
15:19:29:5f:98:a7:11:04:8b:8e:5a:64:4d:52:86:
45:f6:3a:b7:0b:29:c4:25:cf:ff:73:09:91:ca:52:
ab:a0:90:80:37:cc:75:7e:23:0a:a3:59:e2:4f:1d:
4e:f2:a2:12:b7:ae:17:2d:13:32:a6:42:77:39:19:
51:51:87:3c:db:20:4b:8e:ca:f4:34:1a:c8:70:09:
17:76:c2:d6:b0:63:11:01:d8:1c:61:90:82:88:2d:
c2:f3:66:ef:c1:50:14:2a:11:c7:68:a3:2c:2d:d7:
60:26:de:be:a6:80:fc:fc:3f:25:40:1a:e9:b5:7d:
60:a2:2d:85:68:ef:25:72:c0:1f:76:24:23:75:9d:
fa:f0:c0:1c:e7:1d:b1:ca:4d:dc:8a:78:83:33:73:
7d:2a:fc:b2:c4:5d:f7:ae:7a:74:c2:78:89:3c:18:
dd:ed:90:ef:e9:51:05:e9:5d:fa:b3:4b:13:60:46:
94:17:c6:d8:e4:6a:61:23:ca:55:a1:e8:13:59:95:
bd:52:3e:a7:1f:3a:d9:35:74:c5:5b:f7:d5:95:2d:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0F:62:68:62:31:C0:DD:B1:FA:18:EF:35:C0:4B:43:2C:70:C0:75
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2w9iaGIxwN2x-hjvNcBLQyxwwHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:bf13:bff8/128
Signature Algorithm: sha256WithRSAEncryption
32:55:3f:47:15:01:6c:7b:4e:a8:6e:fc:36:5f:42:20:61:4a:
d7:c2:f0:0f:01:98:fa:cf:1c:f3:c6:f7:cb:40:49:d8:7e:b7:
fb:5e:7c:45:ec:91:f7:59:67:fe:5d:a1:10:1e:7b:bb:1c:1c:
c7:61:9b:2a:66:e7:ff:17:df:13:51:b3:cc:fb:d4:d4:96:90:
85:ef:02:6d:29:b5:c5:e2:4e:f8:f8:17:c4:f5:14:b2:58:34:
b0:35:a0:84:fd:90:1e:5a:a6:a2:9b:f8:32:80:1f:be:3e:8e:
2b:c9:30:41:33:40:e9:60:ab:e8:2c:f9:f2:a5:8e:7a:7a:24:
d4:7b:2e:62:e5:22:60:1b:52:0f:1d:6a:3d:fd:49:41:b1:6d:
31:0d:9b:bf:9e:56:ec:88:ad:60:e2:44:8c:b3:c2:7b:18:9f:
81:c8:d2:56:0d:70:e1:62:41:12:97:5b:58:68:d3:95:59:29:
07:f9:f6:ab:f6:e6:26:90:d0:11:dd:17:89:42:1b:09:e2:e3:
ef:4f:60:a8:d4:02:b6:77:aa:32:a8:57:41:fb:e0:e5:ab:7d:
a9:d1:74:0a:d3:bc:d5:1e:6f:ff:72:28:e5:9b:ad:8a:d5:2a:
0e:19:8f:95:58:0b:64:5a:0a:5f:f3:89:51:5e:b5:46:9f:92:
48:11:34:60
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZC/E/SI0bi2jFhWWVJwQBIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzE3MDUwNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjBmNjI2ODYyMzFjMGRkYjFmYTE4ZWYzNWMwNGI0MzJjNzBjMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlXNWWF2C3a7ua7jmyI46ob2Ac8w
K111rxO1B0M3ZADYVRmkZYqf1iPQcc4VGSlfmKcRBIuOWmRNUoZF9jq3CynEJc//
cwmRylKroJCAN8x1fiMKo1niTx1O8qISt64XLRMypkJ3ORlRUYc82yBLjsr0NBrI
cAkXdsLWsGMRAdgcYZCCiC3C82bvwVAUKhHHaKMsLddgJt6+poD8/D8lQBrptX1g
oi2FaO8lcsAfdiQjdZ368MAc5x2xyk3ciniDM3N9KvyyxF33rnp0wniJPBjd7ZDv
6VEF6V36s0sTYEaUF8bY5GphI8pVoegTWZW9Uj6nHzrZNXTFW/fVlS3DJwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFNsPYmhiMcDdsfoY7zXAS0MscMB1MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMnc5aWFHSXh3TjJ4LWhqdk5jQkxReXh3d0hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQvxO/+DANBgkqhkiG9w0BAQsFAAOCAQEAMlU/RxUBbHtOqG78Nl9CIGFK
18LwDwGY+s8c88b3y0BJ2H63+158ReyR91ln/l2hEB57uxwcx2GbKmbn/xffE1Gz
zPvU1JaQhe8CbSm1xeJO+PgXxPUUslg0sDWghP2QHlqmopv4MoAfvj6OK8kwQTNA
6WCr6Cz58qWOenok1HsuYuUiYBtSDx1qPf1JQbFtMQ2bv55W7IitYOJEjLPCexif
gcjSVg1w4WJBEpdbWGjTlVkpB/n2q/bmJpDQEd0XiUIbCeLj709gqNQCtneqMqhX
Qfvg5at9qdF0CtO81R5v/3Io5ZutitUqDhmPlVgLZFoKX/OJUV61Rp+SSBE0YA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:03 2025 by rpki-client