Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DgcZ7gUVDSmSBky-0juMekVWa0E.roa
File: DgcZ7gUVDSmSBky-0juMekVWa0E.roa (raw, json)
Hash identifier: x5i1u9xKpyUpR0uKfRKAVC0TVRCleSvWgQIk2LLzmG8=
Subject key identifier: 0E:07:19:EE:05:15:0D:29:92:06:4C:BE:D2:3B:8C:7A:45:56:6B:41
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019289D77657AD7CB4493EA89BFDD254889D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DgcZ7gUVDSmSBky-0juMekVWa0E.roa
Signing time: Mon 14 Oct 2024 07:04:11 +0000
ROA not before: Mon 14 Oct 2024 07:04:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:89d7:707d/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 14 Oct 2024 07:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:d7:76:57:ad:7c:b4:49:3e:a8:9b:fd:d2:54:88:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 14 07:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e0719ee05150d2992064cbed23b8c7a45566b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:d8:fd:13:50:a8:ac:93:9e:6a:26:41:bb:
7d:e6:51:25:be:77:da:78:00:a7:c0:cd:43:cb:6f:
9f:7e:13:33:93:bd:1b:77:b9:27:fa:14:69:c7:7d:
3c:01:75:2a:d8:cf:9b:f3:0e:cb:1d:01:04:29:a6:
77:5b:9a:6f:79:6a:2e:97:6e:d6:9a:ca:ff:f1:ea:
83:40:5c:d0:c7:85:ef:15:e9:2d:e8:89:c0:ed:2d:
a8:a2:28:59:94:b9:ca:c1:54:79:8f:6f:c5:fc:5f:
80:83:18:a6:e7:95:42:68:50:3e:71:f3:e9:9a:73:
01:a8:07:45:96:74:77:45:7e:dc:a7:53:bb:16:8a:
5c:c9:38:7f:10:c8:af:6e:af:33:a7:71:03:f4:9b:
21:13:73:03:b1:21:32:70:b7:f1:c0:f9:83:1e:e5:
86:ab:ee:83:16:51:2e:37:3a:00:58:22:55:96:51:
57:c4:62:b9:ba:e2:c9:92:ff:ef:6e:4d:21:9f:83:
41:b7:44:f2:c8:26:24:2d:0a:d5:21:90:35:89:51:
dd:86:56:f3:bf:43:52:cf:ce:c1:94:d8:9a:b4:7f:
74:e9:7f:53:10:b0:4f:b2:ef:a1:f9:c7:4a:16:bf:
1a:f0:d4:46:9c:b5:de:92:4d:93:64:19:b0:42:81:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:07:19:EE:05:15:0D:29:92:06:4C:BE:D2:3B:8C:7A:45:56:6B:41
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DgcZ7gUVDSmSBky-0juMekVWa0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:89d7:707d/128
Signature Algorithm: sha256WithRSAEncryption
5f:3b:51:20:69:45:5f:37:38:86:e2:a5:3a:d2:2c:52:58:41:
5b:15:4c:e8:f2:f2:c2:0a:c8:1a:3e:db:94:ed:d6:7f:44:b8:
b7:c8:7b:0e:6a:c5:37:e3:a8:62:57:c8:2f:b7:b6:27:03:2e:
02:4a:5c:81:26:7d:1c:a0:a7:9f:78:4a:a7:ef:08:ad:cc:d1:
8c:8c:00:86:9a:62:45:d8:d1:4a:9d:73:3a:80:d9:a5:3a:ea:
f7:e6:33:87:02:3a:45:80:4a:07:c4:cf:07:8e:53:90:42:fe:
d2:3c:8f:ad:dc:f7:29:74:2d:81:9a:7a:d7:2e:30:39:41:9f:
51:70:f9:72:72:b9:07:1c:fe:c2:a7:4a:07:28:62:41:83:2f:
80:5b:d0:ef:3b:1c:db:d1:db:9d:ea:c7:8f:35:5a:f4:08:8a:
c3:d5:19:04:4e:6a:7e:c2:b8:a8:4a:6e:00:bc:e9:c2:25:c1:
37:31:6e:85:dd:d2:5d:e4:21:8f:8d:80:91:76:bc:1d:71:a0:
40:05:66:3d:1f:09:47:76:61:89:15:42:55:9f:96:30:df:33:
62:07:6e:1d:4d:9f:08:68:31:d0:d1:3d:36:1d:2d:0a:45:c2:
6c:0d:a7:39:e5:e1:c9:e8:05:0f:c3:5a:fb:8e:82:04:b9:66:
ab:74:e4:80
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZKJ13ZXrXy0ST6om/3SVIidMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQxMDE0MDcwNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTA3MTllZTA1MTUwZDI5OTIwNjRjYmVkMjNiOGM3YTQ1NTY2YjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvLY/RNQqKyTnmomQbt95lElvnfa
eACnwM1Dy2+ffhMzk70bd7kn+hRpx308AXUq2M+b8w7LHQEEKaZ3W5pveWoul27W
msr/8eqDQFzQx4XvFekt6InA7S2ooihZlLnKwVR5j2/F/F+Agxim55VCaFA+cfPp
mnMBqAdFlnR3RX7cp1O7FopcyTh/EMivbq8zp3ED9JshE3MDsSEycLfxwPmDHuWG
q+6DFlEuNzoAWCJVllFXxGK5uuLJkv/vbk0hn4NBt0TyyCYkLQrVIZA1iVHdhlbz
v0NSz87BlNiatH906X9TELBPsu+h+cdKFr8a8NRGnLXekk2TZBmwQoGt9QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFA4HGe4FFQ0pkgZMvtI7jHpFVmtBMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRGdjWjdnVVZEU21TQmt5LTBqdU1la1ZXYTBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGSiddwfTANBgkqhkiG9w0BAQsFAAOCAQEAXztRIGlFXzc4huKlOtIsUlhB
WxVM6PLywgrIGj7blO3Wf0S4t8h7DmrFN+OoYlfIL7e2JwMuAkpcgSZ9HKCnn3hK
p+8IrczRjIwAhppiRdjRSp1zOoDZpTrq9+YzhwI6RYBKB8TPB45TkEL+0jyPrdz3
KXQtgZp61y4wOUGfUXD5cnK5Bxz+wqdKByhiQYMvgFvQ7zsc29HbnerHjzVa9AiK
w9UZBE5qfsK4qEpuALzpwiXBNzFuhd3SXeQhj42AkXa8HXGgQAVmPR8JR3ZhiRVC
VZ+WMN8zYgduHU2fCGgx0NE9Nh0tCkXCbA2nOeXhyegFD8Na+46CBLlmq3TkgA==
-----END CERTIFICATE-----
Generated at Mon Oct 14 09:30:35 2024 by rpki-client on console-fra.rpki-client.org