Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VV_8QD2cdW41-936L59JOag8sGE.roa
File: VV_8QD2cdW41-936L59JOag8sGE.roa (raw, json)
Hash identifier: 4SENywExRaCuiMnnn64n5QDJaMI7pxJC3yJhLQdLxmw=
Subject key identifier: 55:5F:FC:40:3D:9C:75:6E:35:FB:DD:FA:2F:9F:49:39:A8:3C:B0:61
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019198E6B7A17F1A193F687512B69A2E41A0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VV_8QD2cdW41-936L59JOag8sGE.roa
Signing time: Wed 28 Aug 2024 12:12:22 +0000
ROA not before: Wed 28 Aug 2024 12:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 28 Aug 2024 13:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:e6:b7:a1:7f:1a:19:3f:68:75:12:b6:9a:2e:41:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 28 12:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=555ffc403d9c756e35fbddfa2f9f4939a83cb061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:96:88:e7:4d:e7:db:35:31:02:29:a2:b0:
4c:0f:20:d0:79:fc:bf:c6:49:5d:4e:df:44:bb:75:
8d:a3:c1:9f:c7:f1:dd:47:96:5b:da:01:65:7e:65:
59:6a:b5:2d:14:28:12:1e:2a:ca:76:ff:d0:ba:10:
79:70:d3:59:e8:7d:2c:5a:bd:dd:18:7c:b8:8b:f3:
39:af:f8:52:be:6b:6a:7b:9a:5e:4a:45:fa:27:75:
cd:fc:7d:b4:55:e3:7d:7c:33:75:29:57:46:82:d7:
eb:cb:b2:41:bc:7e:ab:da:94:9c:1a:0c:48:54:2c:
72:b9:aa:a8:a3:47:bb:be:b8:47:ef:4c:98:e4:a5:
49:3d:b7:36:73:c1:d0:54:e3:32:2a:fb:31:c0:3a:
2a:0c:94:94:fa:9b:5f:9a:c8:27:11:39:aa:3b:4c:
5e:6d:4a:09:79:6a:c3:19:cd:ab:82:83:bf:df:92:
dd:a4:ca:7e:84:4a:2a:fc:57:29:a1:43:75:b0:42:
de:33:ab:e0:13:9d:fe:b7:62:14:95:3e:5c:15:37:
37:b6:e8:f0:5e:cc:59:8e:7b:97:92:1c:9c:95:18:
ba:cb:3d:f9:9d:b3:68:7d:9d:77:41:8f:9f:54:6e:
51:6f:0d:27:3a:e0:59:70:cb:90:58:e0:5e:4e:8b:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5F:FC:40:3D:9C:75:6E:35:FB:DD:FA:2F:9F:49:39:A8:3C:B0:61
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VV_8QD2cdW41-936L59JOag8sGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
46:4d:93:d3:1a:67:3b:e7:aa:8b:36:93:cd:dc:93:a9:4f:6a:
3a:0a:1b:90:60:4e:fe:71:d3:0f:fb:b4:42:70:11:0c:f8:d4:
cc:8d:af:a9:01:0b:e1:66:4c:c7:24:62:70:92:64:d8:f4:c3:
38:d3:0a:f6:2d:30:db:ff:7c:89:72:ec:d0:68:27:fa:05:4d:
46:fa:d5:57:71:17:4a:1b:58:0a:5c:64:3f:51:ae:37:f9:30:
e7:1d:42:31:ac:5e:cd:03:e2:6e:61:36:ad:3b:32:0d:1c:ee:
1c:41:6a:cb:88:6b:73:b6:6b:da:f8:cd:70:74:73:b1:b5:27:
30:d4:b2:dc:a6:3e:b4:7e:ea:d7:fe:ea:65:99:24:34:18:61:
b7:eb:8f:26:70:b7:21:97:d4:1f:51:fd:97:a3:59:df:e0:54:
63:f6:de:0a:96:1e:f0:4e:d9:35:3b:9b:95:95:29:6d:8a:d2:
b4:27:fc:de:86:8f:3f:ef:cd:aa:0a:5c:d6:53:0c:5b:77:4d:
96:9d:ec:64:f0:4e:69:dc:f2:66:16:82:c8:83:c3:47:3e:8f:
42:e2:c1:00:48:f3:75:5c:50:38:b0:4e:c9:96:e3:44:e6:31:
5e:f0:2b:77:1b:d4:19:5d:7d:a0:c8:82:80:33:c7:4b:2f:cc:
0d:9d:de:9e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZGY5rehfxoZP2h1EraaLkGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODI4MTIxMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTVmZmM0MDNkOWM3NTZlMzVmYmRkZmEyZjlmNDkzOWE4M2NiMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdGWiOdN59s1MQIporBMDyDQefy/
xkldTt9Eu3WNo8Gfx/HdR5Zb2gFlfmVZarUtFCgSHirKdv/QuhB5cNNZ6H0sWr3d
GHy4i/M5r/hSvmtqe5peSkX6J3XN/H20VeN9fDN1KVdGgtfry7JBvH6r2pScGgxI
VCxyuaqoo0e7vrhH70yY5KVJPbc2c8HQVOMyKvsxwDoqDJSU+ptfmsgnETmqO0xe
bUoJeWrDGc2rgoO/35LdpMp+hEoq/FcpoUN1sELeM6vgE53+t2IUlT5cFTc3tujw
XsxZjnuXkhyclRi6yz35nbNofZ13QY+fVG5Rbw0nOuBZcMuQWOBeTotsowIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFFVf/EA9nHVuNfvd+i+fSTmoPLBhMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvVlZfOFFEMmNkVzQxLTkzNkw1OUpPYWc4c0dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEARk2T0xpnO+eqizaTzdyTqU9q
OgobkGBO/nHTD/u0QnARDPjUzI2vqQEL4WZMxyRicJJk2PTDONMK9i0w2/98iXLs
0Ggn+gVNRvrVV3EXShtYClxkP1GuN/kw5x1CMaxezQPibmE2rTsyDRzuHEFqy4hr
c7Zr2vjNcHRzsbUnMNSy3KY+tH7q1/7qZZkkNBhht+uPJnC3IZfUH1H9l6NZ3+BU
Y/beCpYe8E7ZNTublZUpbYrStCf83oaPP+/Nqgpc1lMMW3dNlp3sZPBOadzyZhaC
yIPDRz6PQuLBAEjzdVxQOLBOyZbjROYxXvArdxvUGV19oMiCgDPHSy/MDZ3eng==
-----END CERTIFICATE-----
Generated at Wed Aug 28 16:05:30 2024 by rpki-client on console-fra.rpki-client.org