Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MqQlztWTiW1dP0Z3HtBOKWeRv-Y.roa
File: MqQlztWTiW1dP0Z3HtBOKWeRv-Y.roa (raw, json)
Hash identifier: BwT40Pvte9LBKhWvDN437l9bU2FCkDpovBlkl5ff3do=
Subject key identifier: 32:A4:25:CE:D5:93:89:6D:5D:3F:46:77:1E:D0:4E:29:67:91:BF:E6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01917EF02BE4D5DC990FE510D8F4ACF5B2ED
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MqQlztWTiW1dP0Z3HtBOKWeRv-Y.roa
Signing time: Fri 23 Aug 2024 11:12:34 +0000
ROA not before: Fri 23 Aug 2024 11:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 23 Aug 2024 12:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:f0:2b:e4:d5:dc:99:0f:e5:10:d8:f4:ac:f5:b2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 23 11:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32a425ced593896d5d3f46771ed04e296791bfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:4f:30:13:0f:e2:38:ed:1b:59:2a:aa:df:
2b:37:2e:bd:62:95:39:09:87:c7:d4:aa:8c:31:43:
4a:a3:70:72:a5:c4:b9:f8:cf:5b:1c:d2:3b:40:67:
f3:4d:87:4c:db:01:69:48:86:08:73:f1:65:64:e4:
18:1a:6d:00:70:4b:fb:c2:b7:d5:c4:c7:6f:ae:7f:
0f:9a:2e:40:a8:37:20:42:9d:ac:49:33:26:65:13:
ea:82:a5:b9:ed:fa:f6:f2:ce:5f:e5:52:8c:11:e0:
43:5d:c0:22:06:ce:5b:a9:00:d3:ad:e4:c4:84:67:
94:1a:41:ec:70:f3:16:d1:8d:19:3a:09:bd:a2:06:
fb:fc:c4:70:8c:84:6c:fc:7d:88:88:6d:10:f0:a1:
2f:7f:43:5b:f1:40:10:e0:6c:af:bb:3c:4c:c2:3a:
e1:12:dc:26:97:e2:93:77:7c:b7:6b:8a:38:02:c5:
b7:0d:d6:f8:4d:9f:98:06:76:4c:aa:80:5c:eb:fe:
ac:41:b8:ed:69:bd:e9:76:e8:7f:15:72:68:a2:e7:
b7:dc:5c:da:ff:f5:0b:ee:36:c8:bc:7e:40:2f:00:
67:fd:ba:c5:c8:80:7a:4f:36:c5:68:7d:fc:19:5f:
5c:4d:32:14:7e:35:64:f7:f8:ff:60:8a:3a:cf:0c:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A4:25:CE:D5:93:89:6D:5D:3F:46:77:1E:D0:4E:29:67:91:BF:E6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MqQlztWTiW1dP0Z3HtBOKWeRv-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
41:8d:65:4d:0c:a1:2a:c6:af:ea:a4:fb:f5:38:a7:5a:a4:6e:
8b:75:d5:0a:0c:3e:a3:3e:b8:88:93:d6:0a:58:fb:0d:e8:7c:
62:ac:d2:6c:83:b0:9e:ca:30:bb:16:4a:38:6f:2c:bb:99:5f:
07:5f:96:21:f7:64:6e:ae:10:88:51:69:28:06:fc:1d:47:96:
d3:14:74:52:cb:8f:84:fe:4a:98:b2:02:43:00:bc:d9:06:3a:
76:ae:94:5b:01:a6:21:9b:5d:ba:ad:35:ed:6b:df:9d:d9:9c:
e5:89:0d:99:40:d5:b5:5b:92:d9:ba:93:4d:ec:c2:b7:7b:3c:
66:0f:2e:4a:0e:35:63:3c:e9:a8:39:4a:68:10:46:8b:65:57:
ce:80:fd:2c:01:df:2a:da:3e:43:93:54:41:a8:5f:34:fb:94:
73:7b:54:64:53:7d:2d:ba:75:bf:b7:92:29:1d:c9:dc:69:19:
80:ca:d3:e8:f6:58:b9:74:bc:01:80:23:ff:8f:87:0d:b4:1f:
5b:62:5c:0d:0c:e5:a7:ae:60:36:c5:39:9e:f5:1b:82:0e:ad:
1d:51:09:1e:75:15:87:5d:b1:56:54:55:5f:87:bd:cc:17:de:
c1:02:df:21:b1:8a:88:31:ef:d3:96:f3:de:79:e7:f9:e4:f3:
13:e8:6e:9f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZF+8Cvk1dyZD+UQ2PSs9bLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODIzMTExMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmE0MjVjZWQ1OTM4OTZkNWQzZjQ2NzcxZWQwNGUyOTY3OTFiZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB9PMBMP4jjtG1kqqt8rNy69YpU5
CYfH1KqMMUNKo3BypcS5+M9bHNI7QGfzTYdM2wFpSIYIc/FlZOQYGm0AcEv7wrfV
xMdvrn8Pmi5AqDcgQp2sSTMmZRPqgqW57fr28s5f5VKMEeBDXcAiBs5bqQDTreTE
hGeUGkHscPMW0Y0ZOgm9ogb7/MRwjIRs/H2IiG0Q8KEvf0Nb8UAQ4GyvuzxMwjrh
Etwml+KTd3y3a4o4AsW3Ddb4TZ+YBnZMqoBc6/6sQbjtab3pduh/FXJooue33Fza
//UL7jbIvH5ALwBn/brFyIB6TzbFaH38GV9cTTIUfjVk9/j/YIo6zwyJ8QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFDKkJc7Vk4ltXT9Gdx7QTilnkb/mMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvTXFRbHp0V1RpVzFkUDBaM0h0Qk9LV2VSdi1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAQY1lTQyhKsav6qT79TinWqRu
i3XVCgw+oz64iJPWClj7Deh8YqzSbIOwnsowuxZKOG8su5lfB1+WIfdkbq4QiFFp
KAb8HUeW0xR0UsuPhP5KmLICQwC82QY6dq6UWwGmIZtduq017Wvfndmc5YkNmUDV
tVuS2bqTTezCt3s8Zg8uSg41YzzpqDlKaBBGi2VXzoD9LAHfKto+Q5NUQahfNPuU
c3tUZFN9Lbp1v7eSKR3J3GkZgMrT6PZYuXS8AYAj/4+HDbQfW2JcDQzlp65gNsU5
nvUbgg6tHVEJHnUVh12xVlRVX4e9zBfewQLfIbGKiDHv05bz3nnn+eTzE+hunw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:03 2025 by rpki-client