Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/XzTUY9Wnv57ojH2k5MQT_ryvQ20.roa
File: XzTUY9Wnv57ojH2k5MQT_ryvQ20.roa (raw, json)
Hash identifier: amPminaUael0CpNfCC6HkMo0+n0XHOnEvLsPQJTE1G4=
Subject key identifier: 5F:34:D4:63:D5:A7:BF:9E:E8:8C:7D:A4:E4:C4:13:FE:BC:AF:43:6D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191A558C03F8FA9618F3EC4FE3A1AB1C8C1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/XzTUY9Wnv57ojH2k5MQT_ryvQ20.roa
Signing time: Fri 30 Aug 2024 22:12:22 +0000
ROA not before: Fri 30 Aug 2024 22:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 30 Aug 2024 23:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a5:58:c0:3f:8f:a9:61:8f:3e:c4:fe:3a:1a:b1:c8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 30 22:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f34d463d5a7bf9ee88c7da4e4c413febcaf436d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:d1:3e:2f:4d:86:d2:d7:7c:9c:5c:8f:c5:
6f:66:2d:09:08:fa:7e:cd:36:19:9b:4b:7b:94:b8:
51:e4:a6:b8:44:6a:12:d4:ef:42:34:4e:40:17:7c:
7c:f4:c2:5c:a5:e5:66:ab:59:35:80:bb:09:a6:c0:
8e:5d:97:01:71:a3:fc:fe:34:b1:6e:d2:be:3e:6f:
95:07:56:cf:3a:13:1b:8a:de:d4:ea:56:26:cc:92:
fb:2d:90:6b:5f:6d:b5:a3:13:ef:95:df:d7:e4:21:
42:ae:41:83:1e:0d:45:58:5c:d3:10:32:0d:94:68:
11:6b:37:ed:5d:e0:6a:86:81:56:9f:b2:00:5d:67:
61:23:e6:8a:00:07:ab:48:fa:8a:7f:22:4a:20:63:
da:8d:4c:97:77:10:82:4f:46:a5:ef:48:1d:0a:29:
36:7e:9f:29:35:ef:9e:b3:ba:7a:43:25:de:d2:d0:
8d:4a:32:0b:49:a4:c5:e7:06:6b:73:2e:ac:2e:06:
d7:81:d4:eb:8b:f8:f8:3d:7e:4b:a3:dc:da:ae:e2:
05:66:64:fc:83:c0:cd:06:48:56:61:f4:64:6c:f9:
cc:a6:68:75:f5:01:11:23:9b:ad:0e:9f:15:7a:02:
af:a4:38:ab:35:1d:13:b8:64:a1:4a:00:98:ca:e6:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:34:D4:63:D5:A7:BF:9E:E8:8C:7D:A4:E4:C4:13:FE:BC:AF:43:6D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/XzTUY9Wnv57ojH2k5MQT_ryvQ20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
42:23:e1:fa:24:c5:69:d8:e0:0c:47:ea:91:1b:20:a6:0b:ee:
2a:e3:0f:48:6f:45:e9:52:2e:4d:ad:fb:81:d4:9a:37:89:3b:
0a:d1:11:17:2f:cc:d7:f9:10:ec:3c:09:ac:13:e7:29:c0:49:
91:ce:5d:3f:53:b9:ef:32:7a:8b:6a:cc:4f:a8:ce:f8:d1:ed:
90:05:c6:eb:cc:fd:ad:18:24:ff:b6:06:ed:cd:0e:d7:ad:79:
0a:be:0d:dd:56:1c:d2:4b:1e:da:c8:47:f8:89:a9:ea:a7:88:
fc:12:81:a3:70:f3:f0:68:44:5e:82:9d:d3:2c:83:38:07:ac:
55:9d:1a:7e:89:00:70:8f:98:f2:79:4e:eb:6b:2e:5f:e9:6b:
dd:03:65:3e:a0:32:ca:53:69:72:ae:c0:b2:40:e3:60:f9:4a:
9c:4f:d7:7c:fc:f2:3d:91:fa:ee:6b:f6:1d:08:c0:d2:5b:5b:
15:0c:a6:9a:30:b9:0b:6c:6c:d2:d0:6e:81:9f:8b:21:59:e9:
c3:6a:ed:8b:74:98:d6:98:56:a3:dc:cd:3c:e9:5b:5f:e8:ab:
ca:5c:29:74:40:67:83:4c:d0:76:72:8e:3a:3f:01:c2:3b:3c:
fa:b2:7f:37:27:5b:73:8c:23:fa:17:61:c0:db:2e:ae:29:f7:
e1:e6:bd:15
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZGlWMA/j6lhjz7E/joascjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODMwMjIxMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjM0ZDQ2M2Q1YTdiZjllZTg4YzdkYTRlNGM0MTNmZWJjYWY0MzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx07RPi9NhtLXfJxcj8VvZi0JCPp+
zTYZm0t7lLhR5Ka4RGoS1O9CNE5AF3x89MJcpeVmq1k1gLsJpsCOXZcBcaP8/jSx
btK+Pm+VB1bPOhMbit7U6lYmzJL7LZBrX221oxPvld/X5CFCrkGDHg1FWFzTEDIN
lGgRazftXeBqhoFWn7IAXWdhI+aKAAerSPqKfyJKIGPajUyXdxCCT0al70gdCik2
fp8pNe+es7p6QyXe0tCNSjILSaTF5wZrcy6sLgbXgdTri/j4PX5Lo9zaruIFZmT8
g8DNBkhWYfRkbPnMpmh19QERI5utDp8VegKvpDirNR0TuGShSgCYyua0KQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFF801GPVp7+e6Ix9pOTEE/68r0NtMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvWHpUVVk5V252NTdvakgyazVNUVRfcnl2UTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAQiPh+iTFadjgDEfqkRsgpgvu
KuMPSG9F6VIuTa37gdSaN4k7CtERFy/M1/kQ7DwJrBPnKcBJkc5dP1O57zJ6i2rM
T6jO+NHtkAXG68z9rRgk/7YG7c0O1615Cr4N3VYc0kse2shH+Imp6qeI/BKBo3Dz
8GhEXoKd0yyDOAesVZ0afokAcI+Y8nlO62suX+lr3QNlPqAyylNpcq7AskDjYPlK
nE/XfPzyPZH67mv2HQjA0ltbFQymmjC5C2xs0tBugZ+LIVnpw2rti3SY1phWo9zN
POlbX+irylwpdEBng0zQdnKOOj8Bwjs8+rJ/Nydbc4wj+hdhwNsurin34ea9FQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:01 2025 by rpki-client