Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EVgDPb5ezcSkdP3r1qwOcna2Zp8.roa
File: EVgDPb5ezcSkdP3r1qwOcna2Zp8.roa (raw, json)
Hash identifier: 0h+sHbY9uKGipqzUcMEXMyexX0XGJF39k9mOFI6WvqI=
Subject key identifier: 11:58:03:3D:BE:5E:CD:C4:A4:74:FD:EB:D6:AC:0E:72:76:B6:66:9F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191419191A63216F78E92E8F90E745FAB89
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EVgDPb5ezcSkdP3r1qwOcna2Zp8.roa
Signing time: Sun 11 Aug 2024 13:12:24 +0000
ROA not before: Sun 11 Aug 2024 13:12:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 11 Aug 2024 14:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:91:91:a6:32:16:f7:8e:92:e8:f9:0e:74:5f:ab:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 11 13:12:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1158033dbe5ecdc4a474fdebd6ac0e7276b6669f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:47:30:2e:5c:bb:02:83:21:2a:22:32:c7:
d0:a6:f9:49:9d:68:ae:87:c9:b5:c9:9a:74:7a:a0:
6e:ac:29:d2:00:ab:f9:53:c1:25:31:19:c2:6d:3d:
46:45:76:cc:a6:a2:3c:ec:f6:99:b5:7b:d0:70:24:
74:e0:f0:43:40:de:bc:00:3d:bf:3c:96:a9:c5:c5:
b7:e0:14:8f:c6:bc:1c:a7:bf:e5:9b:42:bf:0f:b2:
ed:fd:aa:f1:40:a3:e0:3d:14:84:b3:bf:1e:30:f5:
91:fa:0f:3b:85:64:56:a4:ac:77:74:97:51:95:7c:
ab:34:45:e3:27:0d:6d:31:cb:fa:68:14:46:22:c7:
f5:46:91:8c:8c:93:c8:9d:17:a6:12:e5:f8:2a:0b:
20:49:cd:6a:f5:9d:ac:ac:4b:cf:cb:a7:ac:4e:7f:
f4:a5:a3:02:f0:8d:8a:53:52:8a:88:ef:c5:ab:1c:
78:f6:ed:c0:3c:85:05:42:97:2c:41:da:83:db:5d:
1f:ea:df:af:14:c1:1d:53:29:d5:75:0b:a2:77:bc:
85:da:e7:6e:c9:61:7a:ce:1c:c6:ef:bb:cc:78:52:
f6:5a:3f:5f:17:24:0d:c7:44:01:5b:82:21:55:50:
07:4a:43:e9:3f:a6:73:f4:2e:79:d0:94:fd:2a:20:
f2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:03:3D:BE:5E:CD:C4:A4:74:FD:EB:D6:AC:0E:72:76:B6:66:9F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EVgDPb5ezcSkdP3r1qwOcna2Zp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
2e:43:d5:d5:15:7f:e2:cd:ff:a6:7d:6e:1c:6f:5d:1a:ed:82:
83:97:9e:57:6b:ca:91:6b:20:48:d1:c5:f6:68:ae:2d:bf:b7:
2c:bf:69:19:64:8e:fd:83:f2:d0:5c:74:12:23:89:7b:18:12:
20:bc:db:70:ae:38:3b:43:5c:02:44:32:eb:c2:23:cb:01:8d:
78:d9:ea:28:b7:b0:26:8f:b5:d6:1d:58:9f:a4:94:97:52:49:
29:d2:8f:78:76:ad:82:7c:3a:b7:38:a5:0a:06:e7:f9:b5:63:
77:d8:e1:33:67:88:28:d5:b0:e8:07:61:57:af:52:14:ac:b4:
c8:ce:6e:77:f4:d4:ec:ac:2e:1d:9a:4a:e8:b0:07:79:7c:a5:
8b:a5:1f:cc:d1:ce:f8:0b:7e:6f:8e:90:fa:8a:4f:7f:18:1a:
6a:f6:8f:82:bd:3e:13:0b:b1:06:c9:cd:d1:ca:58:86:12:83:
40:46:07:6b:c9:a5:6f:57:fb:1c:f0:b8:ee:d5:fc:b6:ac:92:
51:9a:77:e8:f7:6f:58:83:ac:1e:a1:04:cb:4a:8a:a2:03:a5:
c8:1e:47:33:69:e6:12:12:8b:2b:84:8f:7d:07:37:54:8e:35:
44:ae:43:35:0a:86:c4:db:29:d7:49:4d:8a:85:08:04:e1:22:
5b:b7:4b:a0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZFBkZGmMhb3jpLo+Q50X6uJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODExMTMxMjI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTU4MDMzZGJlNWVjZGM0YTQ3NGZkZWJkNmFjMGU3Mjc2YjY2NjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+JHMC5cuwKDISoiMsfQpvlJnWiu
h8m1yZp0eqBurCnSAKv5U8ElMRnCbT1GRXbMpqI87PaZtXvQcCR04PBDQN68AD2/
PJapxcW34BSPxrwcp7/lm0K/D7Lt/arxQKPgPRSEs78eMPWR+g87hWRWpKx3dJdR
lXyrNEXjJw1tMcv6aBRGIsf1RpGMjJPInRemEuX4KgsgSc1q9Z2srEvPy6esTn/0
paMC8I2KU1KKiO/Fqxx49u3APIUFQpcsQdqD210f6t+vFMEdUynVdQuid7yF2udu
yWF6zhzG77vMeFL2Wj9fFyQNx0QBW4IhVVAHSkPpP6Zz9C550JT9KiDycQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFBFYAz2+Xs3EpHT969asDnJ2tmafMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRVZnRFBiNWV6Y1NrZFAzcjFxd09jbmEyWnA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEALkPV1RV/4s3/pn1uHG9dGu2C
g5eeV2vKkWsgSNHF9miuLb+3LL9pGWSO/YPy0Fx0EiOJexgSILzbcK44O0NcAkQy
68IjywGNeNnqKLewJo+11h1Yn6SUl1JJKdKPeHatgnw6tzilCgbn+bVjd9jhM2eI
KNWw6AdhV69SFKy0yM5ud/TU7KwuHZpK6LAHeXyli6UfzNHO+At+b46Q+opPfxga
avaPgr0+EwuxBsnN0cpYhhKDQEYHa8mlb1f7HPC47tX8tqySUZp36PdvWIOsHqEE
y0qKogOlyB5HM2nmEhKLK4SPfQc3VI41RK5DNQqGxNsp10lNioUIBOEiW7dLoA==
-----END CERTIFICATE-----
Generated at Sun Aug 11 17:36:01 2024 by rpki-client on console-ams.rpki-client.org