Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FRVcXhqgS2MDICSoORwrPOD7xwo.roa
File: FRVcXhqgS2MDICSoORwrPOD7xwo.roa (raw, json)
Hash identifier: okESsXQlsUg5J0wa4jh5HfH2YzAqT7ISyxYnDX9EsGY=
Subject key identifier: 15:15:5C:5E:1A:A0:4B:63:03:20:24:A8:39:1C:2B:3C:E0:FB:C7:0A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019162D3F24C5826086319A0C7544A903962
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FRVcXhqgS2MDICSoORwrPOD7xwo.roa
Signing time: Sun 18 Aug 2024 00:12:22 +0000
ROA not before: Sun 18 Aug 2024 00:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 18 Aug 2024 01:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:62:d3:f2:4c:58:26:08:63:19:a0:c7:54:4a:90:39:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 18 00:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15155c5e1aa04b63032024a8391c2b3ce0fbc70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:de:64:2f:5a:c0:99:96:8c:77:67:8e:94:
a3:c1:e4:20:2c:a1:dd:ab:70:b2:4e:5a:ac:d6:3c:
96:46:41:8a:bd:1e:59:94:37:08:2b:70:04:1a:be:
d4:9e:d7:78:5f:3d:6c:52:f3:f9:fb:a0:40:44:5a:
1d:c0:34:53:ca:1a:84:6f:de:03:3b:ba:51:47:37:
89:6f:6c:c5:f0:9c:a4:01:59:fa:56:43:16:ed:c3:
17:5f:8b:05:b4:95:e6:e2:5c:7f:56:b2:17:08:69:
03:0b:e8:60:da:ba:e1:df:83:40:21:68:6d:d6:ee:
f3:22:ad:20:33:24:d8:8f:a8:69:98:4c:6a:e3:fc:
e0:43:14:ab:ac:c6:7c:fe:2b:f8:49:1b:eb:61:7c:
b9:2b:4d:d2:73:50:d1:85:f5:e1:a4:2d:3b:db:7b:
82:ec:59:34:5d:fc:1e:65:a5:de:07:f8:cd:1c:2d:
76:ed:1a:03:53:f0:37:73:8a:3d:71:7a:ec:40:62:
11:a2:69:46:87:76:e7:e9:b2:86:46:00:03:06:23:
9f:47:22:da:44:5e:24:2e:9b:91:76:6d:1a:aa:6d:
af:f9:30:be:90:73:98:e3:c6:45:b6:25:34:bf:e0:
ed:b0:3e:28:cc:d8:94:2d:c7:f9:c9:1b:f9:c8:3c:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:15:5C:5E:1A:A0:4B:63:03:20:24:A8:39:1C:2B:3C:E0:FB:C7:0A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FRVcXhqgS2MDICSoORwrPOD7xwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
8f:a8:44:dc:58:12:d6:18:f3:b1:69:f8:0c:4f:80:35:c2:b4:
14:56:2c:a9:8e:34:ff:af:b1:c9:0a:7a:62:1a:f6:e1:f6:98:
87:07:e2:25:2b:2e:52:e2:36:9d:90:f5:3a:f3:4f:ce:a1:39:
91:9b:d7:84:d1:01:8f:1d:a7:e1:53:ef:28:e5:de:7e:e3:14:
f0:a4:13:a8:6b:1e:68:6e:e4:78:3d:58:10:f1:ec:5d:37:82:
61:7c:2f:75:5c:5f:b9:b3:c7:06:52:a4:bb:72:44:59:7c:ce:
53:e7:e3:e7:43:08:19:89:32:34:d6:49:36:ac:1d:13:5a:0a:
86:4e:b8:20:9e:c8:5e:d6:5d:d6:2e:d0:54:71:64:a7:b7:37:
5a:d8:5c:9c:34:b1:0b:cd:e5:21:ff:30:d0:31:df:e4:4e:be:
20:31:b4:b2:f9:13:09:96:3b:2a:ee:7a:7e:51:6b:91:91:89:
db:91:b4:51:32:82:75:ec:87:47:78:f1:70:32:e4:f2:9f:e5:
f0:72:03:15:e0:96:99:83:04:2d:b2:ec:27:b2:44:e4:67:33:
62:b7:ae:da:0c:26:33:38:9a:a5:be:bb:80:37:e1:7e:d9:77:
58:97:f8:de:c3:4f:29:70:04:1d:e8:bb:0a:b8:d6:9e:f8:bb:
5f:36:c0:33
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZFi0/JMWCYIYxmgx1RKkDliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODE4MDAxMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTE1NWM1ZTFhYTA0YjYzMDMyMDI0YTgzOTFjMmIzY2UwZmJjNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDveZC9awJmWjHdnjpSjweQgLKHd
q3CyTlqs1jyWRkGKvR5ZlDcIK3AEGr7Untd4Xz1sUvP5+6BARFodwDRTyhqEb94D
O7pRRzeJb2zF8JykAVn6VkMW7cMXX4sFtJXm4lx/VrIXCGkDC+hg2rrh34NAIWht
1u7zIq0gMyTYj6hpmExq4/zgQxSrrMZ8/iv4SRvrYXy5K03Sc1DRhfXhpC0723uC
7Fk0XfweZaXeB/jNHC127RoDU/A3c4o9cXrsQGIRomlGh3bn6bKGRgADBiOfRyLa
RF4kLpuRdm0aqm2v+TC+kHOY48ZFtiU0v+DtsD4ozNiULcf5yRv5yDySEwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFBUVXF4aoEtjAyAkqDkcKzzg+8cKMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRlJWY1hocWdTMk1ESUNTb09Sd3JQT0Q3eHdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAj6hE3FgS1hjzsWn4DE+ANcK0
FFYsqY40/6+xyQp6Yhr24faYhwfiJSsuUuI2nZD1OvNPzqE5kZvXhNEBjx2n4VPv
KOXefuMU8KQTqGseaG7keD1YEPHsXTeCYXwvdVxfubPHBlKku3JEWXzOU+fj50MI
GYkyNNZJNqwdE1oKhk64IJ7IXtZd1i7QVHFkp7c3WthcnDSxC83lIf8w0DHf5E6+
IDG0svkTCZY7Ku56flFrkZGJ25G0UTKCdeyHR3jxcDLk8p/l8HIDFeCWmYMELbLs
J7JE5GczYreu2gwmMziapb67gDfhftl3WJf43sNPKXAEHei7CrjWnvi7XzbAMw==
Generated at Sun Aug 18 05:04:50 2024 by rpki-client on console-fra.rpki-client.org