Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Y12wtcnYjkhAMDcqmCcqcTZ21i8.roa
File: Y12wtcnYjkhAMDcqmCcqcTZ21i8.roa (raw, json)
Hash identifier: xBD6I1fh4Gcn3CgNkOsQPNa4MW8T4Am0vqXROkMg0Cg=
Subject key identifier: 63:5D:B0:B5:C9:D8:8E:48:40:30:37:2A:98:27:2A:71:36:76:D6:2F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01910B0A383B983BB879E359CABA2C0411BD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Y12wtcnYjkhAMDcqmCcqcTZ21i8.roa
Signing time: Wed 31 Jul 2024 23:05:04 +0000
ROA not before: Wed 31 Jul 2024 23:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:b09:84c2/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 31 Jul 2024 23:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0b:0a:38:3b:98:3b:b8:79:e3:59:ca:ba:2c:04:11:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 31 23:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=635db0b5c9d88e484030372a98272a713676d62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:37:24:62:0c:77:d3:c2:5a:0c:91:09:d0:
16:64:e8:fa:f4:c4:9b:47:fc:e1:69:27:01:a0:06:
d6:ce:51:f1:1f:a9:19:e3:96:1a:3e:1e:7e:95:ad:
f4:87:6e:7e:e1:1a:ab:c6:2a:b8:5a:bb:a7:f1:6b:
e6:f9:46:29:a9:32:51:83:8d:3b:1b:b5:69:bb:57:
98:45:0d:01:2f:1d:7c:88:9e:44:cc:3c:ef:f4:40:
8c:35:5c:4e:49:76:42:7a:4f:87:2f:15:94:40:53:
92:b7:fc:90:a6:13:38:8a:3b:81:52:e3:2b:d2:35:
aa:4f:c3:6d:17:a0:eb:39:66:8f:97:90:b2:67:0f:
2a:92:0e:3a:04:c7:40:98:d5:43:b2:95:32:4a:57:
2f:91:2d:90:a2:5b:2e:40:21:d9:2a:5b:de:be:a4:
f7:fe:ca:8e:28:20:9b:e3:90:51:e2:0a:62:b8:71:
b1:a7:39:a9:c8:09:5b:c0:ad:a0:6b:0f:76:02:42:
8d:95:cc:9a:ba:d8:8e:94:ea:49:a6:49:02:20:31:
13:64:8c:5c:c3:a4:79:44:9c:0c:e3:6f:b4:65:ab:
53:10:fb:51:94:9e:6f:ab:1e:85:ee:ed:1e:b3:9c:
77:17:49:6b:96:01:f1:d9:1f:5c:82:31:f0:4a:7b:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5D:B0:B5:C9:D8:8E:48:40:30:37:2A:98:27:2A:71:36:76:D6:2F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Y12wtcnYjkhAMDcqmCcqcTZ21i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:b09:84c2/128
Signature Algorithm: sha256WithRSAEncryption
2d:ab:66:a9:64:dd:97:28:03:e7:33:a0:5b:b6:03:3e:3e:1a:
73:7a:b2:fb:86:37:c2:3d:f3:11:8a:af:57:d3:1c:40:c7:1d:
17:77:2b:01:20:22:5c:31:72:c9:84:1a:5d:37:50:ed:ce:62:
a9:84:ca:85:57:84:42:9e:0b:e5:9f:5e:2d:71:83:18:0e:46:
c1:d8:1a:46:04:f7:4c:86:4d:4a:fd:b5:3f:57:c5:92:cf:d1:
e7:31:cb:32:9f:09:96:3e:dd:46:52:62:58:07:38:19:a9:50:
6d:d3:57:93:88:a8:eb:6c:64:2a:1f:36:9c:a7:1e:e0:73:7b:
17:cb:af:c2:f4:6f:d8:4a:a3:34:ee:14:ba:31:19:c8:dc:51:
2b:f6:4c:02:e7:cf:47:ce:6c:e7:f9:48:f2:11:cb:a4:69:f4:
73:b5:cb:08:08:62:43:34:f6:1f:cf:e5:ef:82:ea:aa:f8:55:
4b:ab:67:67:f7:ea:94:9e:d7:6f:2c:bb:a2:03:b6:f8:45:36:
df:40:e8:da:b2:8b:3a:ba:9a:14:38:b6:41:99:8e:4f:af:14:
a0:70:75:80:5a:e4:57:67:3b:37:b1:d5:85:e1:b3:53:2c:ff:
2d:b8:f5:66:2b:a5:d7:f1:10:09:8d:b6:77:eb:26:cd:0f:18:
dd:d7:e3:40
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZELCjg7mDu4eeNZyrosBBG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzMxMjMwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzVkYjBiNWM5ZDg4ZTQ4NDAzMDM3MmE5ODI3MmE3MTM2NzZkNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB43JGIMd9PCWgyRCdAWZOj69MSb
R/zhaScBoAbWzlHxH6kZ45YaPh5+la30h25+4Rqrxiq4Wrun8Wvm+UYpqTJRg407
G7Vpu1eYRQ0BLx18iJ5EzDzv9ECMNVxOSXZCek+HLxWUQFOSt/yQphM4ijuBUuMr
0jWqT8NtF6DrOWaPl5CyZw8qkg46BMdAmNVDspUySlcvkS2QolsuQCHZKlvevqT3
/sqOKCCb45BR4gpiuHGxpzmpyAlbwK2gaw92AkKNlcyautiOlOpJpkkCIDETZIxc
w6R5RJwM42+0ZatTEPtRlJ5vqx6F7u0es5x3F0lrlgHx2R9cgjHwSnvpTwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGNdsLXJ2I5IQDA3KpgnKnE2dtYvMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvWTEyd3Rjbllqa2hBTURjcW1DY3FjVFoyMWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGQ/fLzAgMRACABBnwAZP//AAABkQsJhMIwDQYJKoZIhvcNAQELBQADggEB
AC2rZqlk3ZcoA+czoFu2Az4+GnN6svuGN8I98xGKr1fTHEDHHRd3KwEgIlwxcsmE
Gl03UO3OYqmEyoVXhEKeC+WfXi1xgxgORsHYGkYE90yGTUr9tT9XxZLP0ecxyzKf
CZY+3UZSYlgHOBmpUG3TV5OIqOtsZCofNpynHuBzexfLr8L0b9hKozTuFLoxGcjc
USv2TALnz0fObOf5SPIRy6Rp9HO1ywgIYkM09h/P5e+C6qr4VUurZ2f36pSe128s
u6IDtvhFNt9A6Nqyizq6mhQ4tkGZjk+vFKBwdYBa5FdnOzex1YXhs1Ms/y249WYr
pdfxEAmNtnfrJs0PGN3X40A=
-----END CERTIFICATE-----
Generated at Thu Aug 1 02:12:40 2024 by rpki-client on console-fra.rpki-client.org