Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4Xhxzzp6yQ2nWvsM842gi6yZnYg.roa
File: 4Xhxzzp6yQ2nWvsM842gi6yZnYg.roa (raw, json)
Hash identifier: CIKoCjbunAy90Mg8abvVWkw45Z+d+lIN+7u4XLviaKA=
Subject key identifier: E1:78:71:CF:3A:7A:C9:0D:A7:5A:FB:0C:F3:8D:A0:8B:AC:99:9D:88
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191DFEC925BDBE36861C423CDFB1469915C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4Xhxzzp6yQ2nWvsM842gi6yZnYg.roa
Signing time: Wed 11 Sep 2024 07:11:48 +0000
ROA not before: Wed 11 Sep 2024 07:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128
2001:67c:64:ffff:0:191:d82c:371b/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 11 Sep 2024 08:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:ec:92:5b:db:e3:68:61:c4:23:cd:fb:14:69:91:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 11 07:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e17871cf3a7ac90da75afb0cf38da08bac999d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:58:b6:8a:83:a3:5e:49:55:e2:6b:fd:62:
95:5c:02:9c:2e:d1:8f:f8:19:f7:cf:c9:53:7f:c7:
74:07:08:8a:1e:24:49:5a:55:42:09:e4:b6:1d:64:
94:8c:05:41:7a:44:a3:f5:23:6a:42:6a:93:09:c3:
1a:8b:87:4a:21:92:f2:09:54:e3:c9:9e:7d:38:18:
81:91:53:4e:c4:55:10:78:d5:11:19:b1:31:db:e9:
96:88:71:00:9d:a8:1c:2f:f4:28:57:f1:29:b6:2f:
8f:6f:f0:f7:7a:65:ed:3a:1c:11:f1:83:cb:e2:0b:
67:66:20:a1:cd:a2:6b:1a:94:5d:57:c1:af:e6:fa:
0e:ee:44:08:06:19:06:bb:21:e4:35:07:aa:c4:a6:
a2:2d:44:be:cf:6a:5b:23:e8:c7:35:74:39:6c:e3:
53:2a:68:ae:00:d5:89:89:fa:89:06:e4:d7:a4:58:
12:b7:09:c5:c1:98:c9:7a:ab:96:5b:75:e3:ed:a0:
64:fb:09:b4:45:5a:e8:88:15:69:43:47:b9:00:49:
df:ee:a6:c4:0a:19:84:2f:f2:d8:13:92:19:2a:d3:
55:17:ed:d0:67:6f:56:c1:76:74:6b:7a:f7:e5:ce:
66:e8:a7:c5:31:ec:d6:1e:32:f5:47:df:af:39:97:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:78:71:CF:3A:7A:C9:0D:A7:5A:FB:0C:F3:8D:A0:8B:AC:99:9D:88
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4Xhxzzp6yQ2nWvsM842gi6yZnYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:d606:d79c/128
2001:67c:64:ffff:0:191:d82c:371b/128
Signature Algorithm: sha256WithRSAEncryption
20:47:91:31:0c:dd:93:7e:c3:88:c3:67:82:ea:c5:82:a1:a1:
bb:22:43:c5:ce:b3:6a:ab:66:76:d9:6b:fe:a7:ea:97:ed:f8:
6b:1d:fc:79:b4:69:ac:20:28:2c:dc:1e:d4:52:3f:fc:b7:81:
36:7a:01:ec:6e:cd:cb:75:6c:f4:d1:5c:9e:57:63:18:06:6b:
bd:6d:eb:cf:a7:55:cc:35:eb:a1:17:44:fe:a1:b9:c2:30:0e:
c7:90:aa:22:8f:19:53:0b:18:49:48:9e:20:39:1e:bc:b3:ac:
7a:ae:13:1b:5c:5a:ae:10:64:b4:1e:35:54:40:25:4e:c4:ee:
1b:c1:06:80:e0:97:13:b4:eb:be:ef:65:c7:ec:45:d6:cb:c5:
38:72:1a:8f:d1:25:05:5f:4f:f2:d5:a8:57:38:31:68:58:cc:
b0:a9:cb:10:d2:18:63:d2:97:83:df:ff:c8:ce:78:b8:4f:e1:
37:16:3e:a4:dc:be:fa:54:5c:8e:02:1b:39:bf:c1:38:a4:dc:
87:51:3c:89:04:a8:52:1f:eb:2c:72:4e:e2:26:6d:03:7d:65:
11:a0:2d:a5:d9:d1:d9:2b:81:1d:84:b3:7e:a5:9e:51:0c:0f:
26:f1:fe:2b:69:1d:ff:93:7a:27:84:8a:7a:4b:58:b5:95:24:
95:43:51:cd
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZHf7JJb2+NoYcQjzfsUaZFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTExMDcxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTc4NzFjZjNhN2FjOTBkYTc1YWZiMGNmMzhkYTA4YmFjOTk5ZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt5YtoqDo15JVeJr/WKVXAKcLtGP
+Bn3z8lTf8d0BwiKHiRJWlVCCeS2HWSUjAVBekSj9SNqQmqTCcMai4dKIZLyCVTj
yZ59OBiBkVNOxFUQeNURGbEx2+mWiHEAnagcL/QoV/Epti+Pb/D3emXtOhwR8YPL
4gtnZiChzaJrGpRdV8Gv5voO7kQIBhkGuyHkNQeqxKaiLUS+z2pbI+jHNXQ5bONT
KmiuANWJifqJBuTXpFgStwnFwZjJequWW3Xj7aBk+wm0RVroiBVpQ0e5AEnf7qbE
ChmEL/LYE5IZKtNVF+3QZ29WwXZ0a3r35c5m6KfFMezWHjL1R9+vOZc8+QIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFOF4cc86eskNp1r7DPONoIusmZ2IMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvNFhoeHp6cDZ5UTJuV3ZzTTg0MmdpNnlabllnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk
//8AAAGQ/fLzAgMRACABBnwAZP//AAABkdYG15wDEQAgAQZ8AGT//wAAAZHYLDcb
MA0GCSqGSIb3DQEBCwUAA4IBAQAgR5ExDN2TfsOIw2eC6sWCoaG7IkPFzrNqq2Z2
2Wv+p+qX7fhrHfx5tGmsICgs3B7UUj/8t4E2egHsbs3LdWz00VyeV2MYBmu9bevP
p1XMNeuhF0T+obnCMA7HkKoijxlTCxhJSJ4gOR68s6x6rhMbXFquEGS0HjVUQCVO
xO4bwQaA4JcTtOu+72XH7EXWy8U4chqP0SUFX0/y1ahXODFoWMywqcsQ0hhj0peD
3//Izni4T+E3Fj6k3L76VFyOAhs5v8E4pNyHUTyJBKhSH+ssck7iJm0DfWURoC2l
2dHZK4EdhLN+pZ5RDA8m8f4raR3/k3onhIp6S1i1lSSVQ1HN
-----END CERTIFICATE-----
Generated at Wed Sep 11 10:41:59 2024 by rpki-client on console-ams.rpki-client.org