Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R-beeoZymk0as7dTiPMj9LL7M8k.roa
File: R-beeoZymk0as7dTiPMj9LL7M8k.roa (raw, json)
Hash identifier: q7+A91pn+5ToiujEaX7VNMYpMDJQ7SV1Wu0lmrfuqnA=
Subject key identifier: 47:E6:DE:7A:86:72:9A:4D:1A:B3:B7:53:88:F3:23:F4:B2:FB:33:C9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191788037D8E1FF34A966236CC741F31C56
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R-beeoZymk0as7dTiPMj9LL7M8k.roa
Signing time: Thu 22 Aug 2024 05:12:34 +0000
ROA not before: Thu 22 Aug 2024 05:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 Aug 2024 06:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:80:37:d8:e1:ff:34:a9:66:23:6c:c7:41:f3:1c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 22 05:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47e6de7a86729a4d1ab3b75388f323f4b2fb33c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:8d:18:65:8f:72:d7:94:c3:9f:66:be:43:
50:b9:91:2e:59:ee:56:e4:3f:3d:c8:a2:e0:a8:af:
6a:44:5c:82:27:e4:37:d3:34:cf:14:a7:1d:74:cf:
e4:d8:18:f5:b3:13:17:87:5b:d0:f9:b5:91:33:62:
40:b0:d7:20:28:a0:d7:26:fa:94:98:70:5d:99:02:
4b:f4:f0:65:d5:83:e4:f2:42:b3:8c:23:88:56:96:
e2:5b:27:f7:e4:23:8d:6c:72:fd:7f:97:bb:9c:69:
54:df:0a:3a:33:8e:67:3f:84:68:44:25:df:0d:c9:
93:29:9b:2b:87:41:57:bb:26:99:8d:e2:c2:8a:62:
6b:75:c1:c8:89:68:d5:5a:72:44:ce:6f:e5:fb:29:
cc:9c:4e:7e:b1:02:cb:f6:91:90:68:36:c6:6f:71:
95:ac:00:c6:67:7e:70:5f:fe:0f:c9:87:07:09:3a:
a8:87:c4:48:da:d6:35:30:e9:85:ea:20:3d:8c:42:
12:4b:a5:98:65:ab:46:08:b7:e7:db:b6:f9:b9:c8:
f8:a8:c6:9a:12:a9:be:94:ec:05:73:a8:03:67:c7:
9f:ab:f7:16:02:43:f4:cd:3b:ae:2e:91:2a:e2:1f:
68:97:e9:d1:28:50:74:99:a0:07:ab:d1:8c:f3:e7:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E6:DE:7A:86:72:9A:4D:1A:B3:B7:53:88:F3:23:F4:B2:FB:33:C9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R-beeoZymk0as7dTiPMj9LL7M8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
7a:be:c6:6f:90:60:81:2a:6f:3e:9b:ae:8d:7c:8b:21:52:eb:
b2:9d:e9:99:44:2e:fa:71:31:4c:d9:70:46:7e:5a:23:b3:75:
cc:58:c1:56:dd:be:f3:4d:1b:c0:2f:e6:50:8b:c0:09:4a:f9:
1c:8c:42:2f:99:d6:be:a9:0a:44:66:ee:bf:32:d8:6e:8b:24:
c8:0e:a1:a1:52:54:6f:63:4c:62:d3:69:55:72:f9:83:26:0c:
0b:e0:7e:1b:ad:b6:fc:6d:32:ce:6c:92:1e:32:ca:2a:ca:47:
6e:ee:97:f8:22:04:f4:1f:3b:b5:82:6c:46:3b:89:72:56:77:
d4:6c:c2:4d:23:83:f5:68:59:e3:ee:04:6f:91:ad:8e:95:28:
f6:87:45:1a:ad:1b:bc:ae:3d:18:cc:16:3e:1b:7d:4f:0e:8c:
11:86:b5:9c:b8:73:75:c0:b2:60:87:aa:79:b2:81:32:f3:5b:
b6:40:58:ec:99:94:d8:37:60:9c:b6:f3:e5:26:7d:ee:75:d9:
f3:f0:f2:12:69:5b:d8:5d:d3:e3:1c:aa:3c:2d:75:aa:f3:e6:
28:68:64:4b:ef:eb:a0:a2:98:82:82:5f:68:8c:84:ad:27:28:
9e:41:c6:41:e3:1c:c7:76:f4:4a:49:a8:15:ac:45:14:21:0a:
96:30:c5:d5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZF4gDfY4f80qWYjbMdB8xxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODIyMDUxMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2U2ZGU3YTg2NzI5YTRkMWFiM2I3NTM4OGYzMjNmNGIyZmIzM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu86NGGWPcteUw59mvkNQuZEuWe5W
5D89yKLgqK9qRFyCJ+Q30zTPFKcddM/k2Bj1sxMXh1vQ+bWRM2JAsNcgKKDXJvqU
mHBdmQJL9PBl1YPk8kKzjCOIVpbiWyf35CONbHL9f5e7nGlU3wo6M45nP4RoRCXf
DcmTKZsrh0FXuyaZjeLCimJrdcHIiWjVWnJEzm/l+ynMnE5+sQLL9pGQaDbGb3GV
rADGZ35wX/4PyYcHCTqoh8RI2tY1MOmF6iA9jEISS6WYZatGCLfn27b5ucj4qMaa
Eqm+lOwFc6gDZ8efq/cWAkP0zTuuLpEq4h9ol+nRKFB0maAHq9GM8+eJYwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEfm3nqGcppNGrO3U4jzI/Sy+zPJMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvUi1iZWVvWnltazBhczdkVGlQTWo5TEw3TThrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAer7Gb5BggSpvPpuujXyLIVLr
sp3pmUQu+nExTNlwRn5aI7N1zFjBVt2+800bwC/mUIvACUr5HIxCL5nWvqkKRGbu
vzLYboskyA6hoVJUb2NMYtNpVXL5gyYMC+B+G622/G0yzmySHjLKKspHbu6X+CIE
9B87tYJsRjuJclZ31GzCTSOD9WhZ4+4Eb5GtjpUo9odFGq0bvK49GMwWPht9Tw6M
EYa1nLhzdcCyYIeqebKBMvNbtkBY7JmU2DdgnLbz5SZ97nXZ8/DyEmlb2F3T4xyq
PC11qvPmKGhkS+/roKKYgoJfaIyErSconkHGQeMcx3b0SkmoFaxFFCEKljDF1Q==
Generated at Thu Aug 22 09:45:30 2024 by rpki-client on console-ams.rpki-client.org