Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VwEgRndo2jwvv-cjxpnaicKv5cQ.roa
File: VwEgRndo2jwvv-cjxpnaicKv5cQ.roa (raw, json)
Hash identifier: oXKyGQeQjHWMbOis1txdkgaVIk9M1o8Jb/lKbK6C1Ok=
Subject key identifier: 57:01:20:46:77:68:DA:3C:2F:BF:E7:23:C6:99:DA:89:C2:AF:E5:C4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191287642E3C193567F888868D7667B5967
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VwEgRndo2jwvv-cjxpnaicKv5cQ.roa
Signing time: Tue 06 Aug 2024 16:12:04 +0000
ROA not before: Tue 06 Aug 2024 16:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 06 Aug 2024 17:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:76:42:e3:c1:93:56:7f:88:88:68:d7:66:7b:59:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 6 16:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=570120467768da3c2fbfe723c699da89c2afe5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:1f:e7:2b:48:4d:8a:2c:81:0c:72:b2:68:
b8:1f:84:0f:cc:eb:63:4f:68:49:56:6d:fd:04:f1:
2e:74:75:0c:18:56:aa:9d:57:11:89:a5:63:a0:d3:
6c:7c:a8:70:20:b6:67:25:42:5e:39:1b:1b:7c:50:
31:00:b6:61:d0:ec:09:32:fe:53:cc:01:89:61:0b:
0a:33:dd:23:8e:28:bc:f2:f6:d1:9f:ee:eb:55:49:
f7:b4:80:f0:38:d7:ca:41:c7:2f:09:a6:2f:cc:50:
a1:d2:b2:77:41:2d:13:5b:86:ac:f8:2a:1d:67:fd:
85:bd:fc:d7:29:46:9c:2f:d8:c0:9a:a6:1e:24:0f:
fb:24:a2:88:c5:6b:cc:bc:14:ff:a8:5f:77:e9:d4:
0d:c4:05:ec:0e:6d:8f:0a:27:97:3c:3e:bc:c4:23:
b1:d2:67:ad:bd:27:74:87:51:8f:5f:de:17:5f:c9:
7d:ee:40:cc:0d:c9:41:94:e5:0d:b8:ca:b2:69:02:
ae:f0:38:53:94:82:26:c5:ce:66:d2:13:1e:e6:77:
a2:b7:99:7d:35:40:7c:4b:c8:09:d5:35:e4:0e:74:
83:38:1a:e4:49:44:52:73:35:8f:ba:97:f3:4e:86:
2c:f1:8e:6e:05:39:49:f3:3a:77:f9:b0:01:ed:74:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:20:46:77:68:DA:3C:2F:BF:E7:23:C6:99:DA:89:C2:AF:E5:C4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VwEgRndo2jwvv-cjxpnaicKv5cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
60:ac:b6:15:5a:2d:69:ab:11:a6:e4:91:d2:14:3e:d0:69:05:
7b:17:6b:a3:93:d4:a3:4d:f6:9b:28:5c:c7:f1:33:aa:35:b9:
73:c6:39:4c:c9:7d:39:b5:1e:0a:22:bf:e0:9b:e2:58:87:93:
19:a0:a8:b8:73:2f:60:a9:8b:36:0b:7f:6c:ce:d9:b4:c6:a5:
b8:ca:d9:b4:a3:4d:a9:57:33:9a:60:67:fa:5b:82:ea:b1:f1:
46:7e:a2:79:51:2a:00:13:bc:f0:77:43:03:92:82:12:c5:49:
b3:60:c4:93:52:43:68:c6:7f:5c:f3:49:aa:53:47:db:39:3c:
ca:55:d1:ac:64:13:c5:ba:ef:5c:0d:30:7c:51:5a:9f:54:62:
c6:f8:fe:7f:e6:fb:b7:3a:e7:2e:cf:81:09:c1:4d:18:30:00:
3a:1c:4d:56:3b:3f:f4:ba:65:01:d2:54:79:72:87:b8:ea:85:
40:f5:14:be:97:14:44:fa:28:c4:f1:90:23:1d:95:89:cc:2d:
7b:dd:d3:a0:e8:52:71:b6:c1:ee:ec:2d:f9:46:9e:64:2d:2a:
5c:bf:13:10:48:5d:a0:d4:a2:41:c6:69:91:a0:4c:c2:ac:8b:
96:2f:62:89:9d:c2:f5:de:2a:42:da:34:fc:b6:00:79:f5:93:
7f:5a:90:19
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZEodkLjwZNWf4iIaNdme1lnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODA2MTYxMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzAxMjA0Njc3NjhkYTNjMmZiZmU3MjNjNjk5ZGE4OWMyYWZlNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36Mf5ytITYosgQxysmi4H4QPzOtj
T2hJVm39BPEudHUMGFaqnVcRiaVjoNNsfKhwILZnJUJeORsbfFAxALZh0OwJMv5T
zAGJYQsKM90jjii88vbRn+7rVUn3tIDwONfKQccvCaYvzFCh0rJ3QS0TW4as+Cod
Z/2FvfzXKUacL9jAmqYeJA/7JKKIxWvMvBT/qF936dQNxAXsDm2PCieXPD68xCOx
0metvSd0h1GPX94XX8l97kDMDclBlOUNuMqyaQKu8DhTlIImxc5m0hMe5neit5l9
NUB8S8gJ1TXkDnSDOBrkSURSczWPupfzToYs8Y5uBTlJ8zp3+bAB7XTl+wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFFcBIEZ3aNo8L7/nI8aZ2onCr+XEMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvVndFZ1JuZG8yand2di1janhwbmFpY0t2NWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAYKy2FVotaasRpuSR0hQ+0GkF
exdro5PUo032myhcx/EzqjW5c8Y5TMl9ObUeCiK/4JviWIeTGaCouHMvYKmLNgt/
bM7ZtMaluMrZtKNNqVczmmBn+luC6rHxRn6ieVEqABO88HdDA5KCEsVJs2DEk1JD
aMZ/XPNJqlNH2zk8ylXRrGQTxbrvXA0wfFFan1Rixvj+f+b7tzrnLs+BCcFNGDAA
OhxNVjs/9LplAdJUeXKHuOqFQPUUvpcURPooxPGQIx2Vicwte93ToOhScbbB7uwt
+UaeZC0qXL8TEEhdoNSiQcZpkaBMwqyLli9iiZ3C9d4qQto0/LYAefWTf1qQGQ==
-----END CERTIFICATE-----
Generated at Tue Aug 6 20:53:02 2024 by rpki-client on console-fra.rpki-client.org