Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_U1o916WhFweriYeZ5LwWzjuDKo.roa
File: _U1o916WhFweriYeZ5LwWzjuDKo.roa (raw, json)
Hash identifier: F7Ig2KPVbi/PAStI37qfW22pAh1tniIUehN6aMGXAqY=
Subject key identifier: FD:4D:68:F7:5E:96:84:5C:1E:AE:26:1E:67:92:F0:5B:38:EE:0C:AA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01912CF6E915BEAC696BA08B33EA9558C2CD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_U1o916WhFweriYeZ5LwWzjuDKo.roa
Signing time: Wed 07 Aug 2024 13:11:04 +0000
ROA not before: Wed 07 Aug 2024 13:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 07 Aug 2024 14:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:f6:e9:15:be:ac:69:6b:a0:8b:33:ea:95:58:c2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 7 13:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd4d68f75e96845c1eae261e6792f05b38ee0caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:22:91:d0:c9:59:b2:9e:44:d9:ce:29:1f:
03:7c:de:ac:3e:67:fb:3b:ce:d1:f4:72:3b:3f:da:
ec:cb:ad:da:30:dd:29:d3:a7:7f:d4:0f:bd:e3:b6:
d7:ff:95:a2:16:51:3e:33:fb:f6:b2:e2:1a:4e:11:
df:ed:ca:64:8b:d3:dd:72:a0:e3:9b:f8:20:11:91:
76:0a:75:dd:8d:d0:33:ba:d6:82:55:26:e4:34:70:
5d:d6:99:a6:ed:f0:7d:38:aa:74:57:e0:23:21:47:
eb:1e:9c:27:7e:ff:df:bc:73:a2:c4:41:c1:c5:c4:
f0:65:68:66:34:18:f5:50:d3:ce:8d:a3:00:e1:8b:
1f:7b:f7:f4:6f:c4:27:4d:c8:25:90:63:20:92:6b:
7c:00:4e:1b:bd:c5:29:09:30:22:d6:06:60:81:e9:
48:02:fe:c3:2e:32:c0:54:b8:ed:0e:74:5f:98:18:
48:2b:59:9c:dd:63:8b:f1:ce:d4:a9:e9:47:96:d4:
a5:1d:c8:41:f0:ad:d5:dc:38:0b:74:ca:a1:b3:e4:
3e:65:4b:8f:2a:e1:c8:12:18:36:0b:bb:e7:de:02:
bc:9f:7b:7d:5b:b1:eb:3c:f2:db:62:48:f9:3d:49:
0b:ea:bd:12:50:0c:5b:36:60:b0:1b:0e:63:00:0e:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4D:68:F7:5E:96:84:5C:1E:AE:26:1E:67:92:F0:5B:38:EE:0C:AA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_U1o916WhFweriYeZ5LwWzjuDKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
93:c5:09:78:96:c2:14:cd:fd:ad:37:6e:e7:b4:53:13:bf:55:
ea:7e:ce:a5:b0:71:d4:d3:64:e7:cb:fb:97:cb:49:38:89:32:
f5:4a:d3:b8:b2:25:2d:3c:d2:d4:6b:86:02:b2:f1:fd:c5:27:
5f:4d:8d:a5:c1:da:95:40:b3:dc:25:57:e7:99:29:1d:18:9b:
3f:b7:79:30:dc:88:2b:8c:71:1b:16:65:90:7a:67:b0:6d:cd:
69:03:fa:9f:6f:ec:f6:10:23:d2:6a:ca:7f:b1:44:2b:75:66:
3a:8a:05:3a:fd:e5:3b:0e:b7:e5:a4:4d:a4:7f:a0:f6:f5:68:
2d:71:be:db:1a:16:07:48:e5:6e:59:6c:08:28:4f:a5:a2:6d:
42:d7:16:9e:37:65:7c:70:0d:f5:82:ce:ca:de:12:c6:ce:a3:
1b:84:09:6d:f3:90:8d:f7:0e:81:4c:eb:f3:03:86:d8:5e:17:
1a:2d:74:f0:ff:f6:a6:dd:e9:57:4e:e3:42:94:07:c8:ac:75:
09:ad:02:3f:4e:72:b1:43:d1:3a:44:e1:6e:e1:15:df:43:86:
9f:0e:7f:2c:82:c6:3a:8e:e7:ce:c4:d1:b0:fe:46:42:1c:05:
31:a6:c1:d2:fc:9a:b1:ae:48:40:b6:3e:37:db:bb:47:42:03:
a4:e4:d5:be
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZEs9ukVvqxpa6CLM+qVWMLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODA3MTMxMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDRkNjhmNzVlOTY4NDVjMWVhZTI2MWU2NzkyZjA1YjM4ZWUwY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOwikdDJWbKeRNnOKR8DfN6sPmf7
O87R9HI7P9rsy63aMN0p06d/1A+947bX/5WiFlE+M/v2suIaThHf7cpki9PdcqDj
m/ggEZF2CnXdjdAzutaCVSbkNHBd1pmm7fB9OKp0V+AjIUfrHpwnfv/fvHOixEHB
xcTwZWhmNBj1UNPOjaMA4Ysfe/f0b8QnTcglkGMgkmt8AE4bvcUpCTAi1gZggelI
Av7DLjLAVLjtDnRfmBhIK1mc3WOL8c7UqelHltSlHchB8K3V3DgLdMqhs+Q+ZUuP
KuHIEhg2C7vn3gK8n3t9W7HrPPLbYkj5PUkL6r0SUAxbNmCwGw5jAA7U1QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFP1NaPdeloRcHq4mHmeS8Fs47gyqMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvX1UxbzkxNldoRndlcmlZZVo1THdXemp1REtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAk8UJeJbCFM39rTdu57RTE79V
6n7OpbBx1NNk58v7l8tJOIky9UrTuLIlLTzS1GuGArLx/cUnX02NpcHalUCz3CVX
55kpHRibP7d5MNyIK4xxGxZlkHpnsG3NaQP6n2/s9hAj0mrKf7FEK3VmOooFOv3l
Ow635aRNpH+g9vVoLXG+2xoWB0jlbllsCChPpaJtQtcWnjdlfHAN9YLOyt4Sxs6j
G4QJbfOQjfcOgUzr8wOG2F4XGi108P/2pt3pV07jQpQHyKx1Ca0CP05ysUPROkTh
buEV30OGnw5/LILGOo7nzsTRsP5GQhwFMabB0vyasa5IQLY+N9u7R0IDpOTVvg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:00 2025 by rpki-client