Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MpQGPulLwfbVg3uA2qDv3xF3iEU.roa
File: MpQGPulLwfbVg3uA2qDv3xF3iEU.roa (raw, json)
Hash identifier: d5I3mZDg/4m8rz2JqNDevJTR9VmM4cKvjLwtctxhm20=
Subject key identifier: 32:94:06:3E:E9:4B:C1:F6:D5:83:7B:80:DA:A0:EF:DF:11:77:88:45
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913630F8999EF4A0BB86FFA8BF067B3078
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MpQGPulLwfbVg3uA2qDv3xF3iEU.roa
Signing time: Fri 09 Aug 2024 08:11:04 +0000
ROA not before: Fri 09 Aug 2024 08:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 09 Aug 2024 09:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:30:f8:99:9e:f4:a0:bb:86:ff:a8:bf:06:7b:30:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 9 08:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3294063ee94bc1f6d5837b80daa0efdf11778845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9f:cf:c6:86:de:c0:0b:51:b2:6a:c3:47:d8:
84:22:8e:eb:d1:2c:70:f6:db:81:5b:ec:f6:2e:e5:
5a:6d:84:07:5a:d2:c8:2e:9a:9e:14:5f:eb:a5:43:
19:83:e6:2b:97:75:20:f7:fb:f9:c9:9e:5e:1e:ca:
52:d9:9a:02:ad:2a:e5:6c:27:44:ba:ad:8c:5e:cf:
0c:29:44:33:c3:8d:ac:0c:66:1d:3d:6f:c1:6f:c1:
39:89:3d:05:8e:89:11:0b:26:4a:ed:ca:c6:f5:b9:
3e:c0:14:d8:03:23:0b:6f:99:48:5e:e7:29:8e:ac:
29:b8:4d:19:41:06:94:7f:d6:ec:1e:8e:27:c1:2e:
2d:69:84:aa:9f:48:f6:ce:fc:e3:89:5c:c6:3b:4d:
50:14:4a:46:fd:ac:31:83:7f:91:34:6c:62:21:ff:
19:46:54:51:59:bf:39:f7:44:14:8c:b8:58:4f:82:
40:9e:7f:56:c6:4d:94:1e:0f:d7:c3:30:f1:79:6c:
ff:e9:ea:6f:cc:8e:b8:46:68:29:90:b7:68:e3:a2:
fd:32:6c:92:8a:ed:32:42:97:c4:e3:8a:2c:e9:07:
70:af:99:0e:30:f5:4d:d1:13:a7:6c:34:8d:bb:e9:
79:e9:66:09:bb:7c:dd:ee:99:dc:7b:cc:3a:f3:01:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:94:06:3E:E9:4B:C1:F6:D5:83:7B:80:DA:A0:EF:DF:11:77:88:45
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MpQGPulLwfbVg3uA2qDv3xF3iEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3e:4e:72:72:cb:64:e6:5a:2e:a4:f7:ef:40:78:83:c0:46:b7:
c3:2e:41:2f:66:65:82:cf:83:01:0d:0b:b6:88:85:ff:44:6b:
29:6a:b4:c2:bf:26:66:97:4b:25:a4:4a:b3:39:0f:72:a9:22:
7f:54:de:6f:bc:c7:a9:19:d8:86:32:0d:f3:fa:33:2b:3b:c1:
5b:67:28:9f:bb:17:9c:65:0c:98:7a:03:01:07:6a:49:a7:e6:
3a:2d:29:94:bc:33:01:11:29:07:4f:40:f0:63:77:3b:3d:15:
da:a7:37:26:54:90:b0:cd:df:4c:0e:14:65:1b:94:ad:fb:17:
65:cf:a9:7f:29:3f:47:f1:43:15:1b:46:ae:15:6f:ee:50:b5:
bc:ff:7d:f6:f0:7a:1e:91:38:a6:73:48:3c:ba:c4:fe:df:37:
c0:75:8f:1d:21:e0:23:61:7a:e9:b8:77:27:13:15:c0:72:fa:
94:e3:8f:af:01:90:0c:af:6a:76:64:6e:9a:ce:61:7c:91:ad:
21:93:da:82:d5:58:39:d8:ee:e4:e4:f2:e4:3c:27:13:25:a0:
db:9e:0a:9d:c0:11:a2:aa:01:39:6b:56:c4:d1:85:33:62:f9:
4b:e9:5b:56:9b:47:2f:21:80:27:c1:37:8f:5f:35:1c:40:96:
da:2c:fa:d2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZE2MPiZnvSgu4b/qL8GezB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODA5MDgxMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjk0MDYzZWU5NGJjMWY2ZDU4MzdiODBkYWEwZWZkZjExNzc4ODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7p/PxobewAtRsmrDR9iEIo7r0Sxw
9tuBW+z2LuVabYQHWtLILpqeFF/rpUMZg+Yrl3Ug9/v5yZ5eHspS2ZoCrSrlbCdE
uq2MXs8MKUQzw42sDGYdPW/Bb8E5iT0FjokRCyZK7crG9bk+wBTYAyMLb5lIXucp
jqwpuE0ZQQaUf9bsHo4nwS4taYSqn0j2zvzjiVzGO01QFEpG/awxg3+RNGxiIf8Z
RlRRWb8590QUjLhYT4JAnn9Wxk2UHg/XwzDxeWz/6epvzI64RmgpkLdo46L9MmyS
iu0yQpfE44os6Qdwr5kOMPVN0ROnbDSNu+l56WYJu3zd7pnce8w68wGSIQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFDKUBj7pS8H21YN7gNqg798Rd4hFMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvTXBRR1B1bEx3ZmJWZzN1QTJxRHYzeEYzaUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAPk5ycstk5loupPfvQHiDwEa3
wy5BL2Zlgs+DAQ0LtoiF/0RrKWq0wr8mZpdLJaRKszkPcqkif1Teb7zHqRnYhjIN
8/ozKzvBW2con7sXnGUMmHoDAQdqSafmOi0plLwzAREpB09A8GN3Oz0V2qc3JlSQ
sM3fTA4UZRuUrfsXZc+pfyk/R/FDFRtGrhVv7lC1vP999vB6HpE4pnNIPLrE/t83
wHWPHSHgI2F66bh3JxMVwHL6lOOPrwGQDK9qdmRums5hfJGtIZPagtVYOdju5OTy
5DwnEyWg254KncARoqoBOWtWxNGFM2L5S+lbVptHLyGAJ8E3j181HECW2iz60g==
-----END CERTIFICATE-----
Generated at Fri Aug 9 12:13:07 2024 by rpki-client on console-fra.rpki-client.org