Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NG0ZmM5CIonygya1ZZC6NaJ5d_s.roa
File: NG0ZmM5CIonygya1ZZC6NaJ5d_s.roa (raw, json)
Hash identifier: zH2WWbXJeuhALj3f66NubNsANoHxtiyuUhpE3urQMxU=
Subject key identifier: 34:6D:19:98:CE:42:22:89:F2:83:26:B5:65:90:BA:35:A2:79:77:FB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193004A7B491F0074FC568309C9BB81E2DD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NG0ZmM5CIonygya1ZZC6NaJ5d_s.roa
Signing time: Wed 06 Nov 2024 07:05:01 +0000
ROA not before: Wed 06 Nov 2024 07:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:49:f94c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 06 Nov 2024 07:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:4a:7b:49:1f:00:74:fc:56:83:09:c9:bb:81:e2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 6 07:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=346d1998ce422289f28326b56590ba35a27977fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:25:e9:2c:04:29:b9:f6:3f:00:68:78:f4:
60:2d:00:30:d5:1e:04:83:61:e1:b2:77:69:59:dd:
59:d9:e8:f2:f0:1d:3b:5e:98:de:59:17:9a:f2:8f:
c1:6d:45:43:18:3f:e7:f6:7a:36:0f:c2:75:76:20:
4e:b1:1b:eb:1e:ee:2e:1e:7c:b5:cf:43:0d:d2:da:
4a:9e:f4:18:b8:0f:03:ce:3d:1e:1a:3e:b5:87:81:
4b:06:8e:81:fa:d4:5d:5a:87:0c:39:17:53:a5:70:
d6:46:d5:b2:c6:41:70:55:00:6f:50:eb:0a:98:75:
b3:62:61:73:66:25:3a:a1:cf:61:08:0f:67:7e:cc:
f0:55:10:d4:7f:a8:4e:1c:4d:36:3e:ca:64:31:a8:
15:de:c3:79:17:1a:8e:c2:eb:82:77:5f:63:d3:50:
c8:63:d6:d5:6a:b5:86:d4:67:96:da:60:84:f9:80:
83:01:4a:ee:52:38:20:53:03:4a:46:ae:4d:aa:9c:
45:49:bd:96:ba:ec:4c:d7:9f:18:8d:43:5b:2c:7d:
9a:39:e7:21:69:bf:e5:04:4b:45:a2:d3:c8:e5:26:
2a:d0:4b:d2:06:6c:c7:cb:f8:05:3b:6d:a9:ac:d0:
9e:b3:98:f0:8f:98:f4:26:6c:a3:41:2a:4a:9e:a3:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:19:98:CE:42:22:89:F2:83:26:B5:65:90:BA:35:A2:79:77:FB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NG0ZmM5CIonygya1ZZC6NaJ5d_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:49:f94c/128
Signature Algorithm: sha256WithRSAEncryption
6e:a5:a6:52:65:42:d3:24:e6:f1:7b:51:ac:8e:34:bd:94:c8:
ff:8d:fc:4c:d3:ba:93:2f:9e:77:b7:b3:02:e1:84:b7:0b:6c:
c6:0c:cd:16:c4:b7:84:c4:24:32:29:6a:47:73:f3:cf:41:7b:
ff:5a:ef:d0:50:f9:f2:83:0d:5b:c0:20:f0:18:a2:23:40:84:
1f:c4:6c:98:d8:c7:a7:cf:42:5d:0e:43:71:09:69:33:bf:3b:
cb:4e:12:f2:4e:c4:bc:f8:3b:a1:91:8b:fa:5b:dd:4f:4a:10:
2d:b8:d6:43:40:8a:ca:09:98:90:78:67:aa:38:62:11:8b:66:
97:13:52:ae:f4:d0:d4:23:71:8c:88:a2:70:55:f5:68:ae:14:
25:d6:40:a3:07:db:5d:b9:9b:a5:e3:64:fb:fa:8a:e1:72:21:
46:0a:60:dd:3e:99:0c:fe:4e:65:2d:4d:72:fa:e0:87:35:a9:
22:c2:11:84:08:00:91:c1:2a:7b:bf:1e:95:9b:02:1d:7e:93:
ef:5c:97:97:ec:4f:12:e5:7a:de:c6:44:9f:b3:9c:63:e7:07:
f8:0c:fb:52:b7:26:3d:21:1a:9a:23:65:46:7b:a6:f4:5f:ae:
d2:62:4e:e9:75:b0:f6:e0:e5:01:3c:77:cd:f1:1b:f4:a1:cd:
0c:c4:9a:ae
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZMASntJHwB0/FaDCcm7geLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQxMTA2MDcwNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDZkMTk5OGNlNDIyMjg5ZjI4MzI2YjU2NTkwYmEzNWEyNzk3N2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36gl6SwEKbn2PwBoePRgLQAw1R4E
g2HhsndpWd1Z2ejy8B07XpjeWRea8o/BbUVDGD/n9no2D8J1diBOsRvrHu4uHny1
z0MN0tpKnvQYuA8Dzj0eGj61h4FLBo6B+tRdWocMORdTpXDWRtWyxkFwVQBvUOsK
mHWzYmFzZiU6oc9hCA9nfszwVRDUf6hOHE02PspkMagV3sN5FxqOwuuCd19j01DI
Y9bVarWG1GeW2mCE+YCDAUruUjggUwNKRq5NqpxFSb2WuuxM158YjUNbLH2aOech
ab/lBEtFotPI5SYq0EvSBmzHy/gFO22prNCes5jwj5j0JmyjQSpKnqOruwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFDRtGZjOQiKJ8oMmtWWQujWieXf7MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvTkcwWm1NNUNJb255Z3lhMVpaQzZOYUo1ZF9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGTAEn5TDANBgkqhkiG9w0BAQsFAAOCAQEAbqWmUmVC0yTm8XtRrI40vZTI
/438TNO6ky+ed7ezAuGEtwtsxgzNFsS3hMQkMilqR3Pzz0F7/1rv0FD58oMNW8Ag
8BiiI0CEH8RsmNjHp89CXQ5DcQlpM787y04S8k7EvPg7oZGL+lvdT0oQLbjWQ0CK
ygmYkHhnqjhiEYtmlxNSrvTQ1CNxjIiicFX1aK4UJdZAowfbXbmbpeNk+/qK4XIh
Rgpg3T6ZDP5OZS1NcvrghzWpIsIRhAgAkcEqe78elZsCHX6T71yXl+xPEuV63sZE
n7OcY+cH+Az7UrcmPSEamiNlRnum9F+u0mJO6XWw9uDlATx3zfEb9KHNDMSarg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:02 2025 by rpki-client