Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bodl1Nm8gK3Z2meoOh39D1CuTF4.roa
File: bodl1Nm8gK3Z2meoOh39D1CuTF4.roa (raw, json)
Hash identifier: 46Qb/S4aIcnz10lmIwsZIZ8/X581pgA5bsSSIIZ0QyE=
Subject key identifier: 6E:87:65:D4:D9:BC:80:AD:D9:DA:67:A8:3A:1D:FD:0F:50:AE:4C:5E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191CDAE112D59772F6DA73DA465ECF7B038
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bodl1Nm8gK3Z2meoOh39D1CuTF4.roa
Signing time: Sat 07 Sep 2024 18:10:22 +0000
ROA not before: Sat 07 Sep 2024 18:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 07 Sep 2024 19:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cd:ae:11:2d:59:77:2f:6d:a7:3d:a4:65:ec:f7:b0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 7 18:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e8765d4d9bc80add9da67a83a1dfd0f50ae4c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:d0:29:d3:1a:ca:4d:6a:1b:47:0a:38:11:
13:1a:17:8a:a3:d7:f5:df:6f:89:0e:f4:cf:61:eb:
9c:77:94:aa:82:09:e7:69:74:0c:dc:19:de:0f:f1:
c2:e2:6f:4c:d4:d3:a2:12:31:4e:66:68:7b:d8:0f:
a0:8f:20:bd:0e:8a:bd:34:17:56:4d:bd:47:54:1d:
78:c9:4c:ad:b4:9c:b8:ab:7e:2e:d5:32:52:0c:94:
e6:67:60:12:15:8b:09:13:8c:e7:f6:e0:b8:15:b2:
86:58:3b:1b:02:4b:5b:d9:90:d1:ca:38:75:ae:5a:
50:9b:1f:33:f5:1c:59:af:d1:f9:48:cd:4e:9a:3a:
50:f3:16:0e:40:fd:d7:4d:de:58:16:02:77:32:82:
f8:5b:db:cf:d4:af:0e:25:53:57:ad:2b:c1:85:f6:
95:50:ec:10:26:97:0d:0c:ee:f7:c8:86:55:5a:e6:
d4:c1:0a:bf:e6:2f:a0:ac:4f:3d:0a:bc:09:f8:39:
00:1e:31:e7:0e:35:08:12:22:9e:c6:c1:4c:cf:0a:
ad:de:4c:6f:0a:45:ab:3d:00:dc:55:13:4e:31:c7:
5f:56:81:a8:b2:a4:a3:4e:51:c3:e4:64:c7:13:c3:
23:53:db:51:ce:ad:d3:d1:04:4b:2b:9a:bc:32:5d:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:65:D4:D9:BC:80:AD:D9:DA:67:A8:3A:1D:FD:0F:50:AE:4C:5E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bodl1Nm8gK3Z2meoOh39D1CuTF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
14:9c:8e:77:5c:38:09:9f:ec:4b:be:52:27:05:f8:5a:f0:94:
e7:f7:d7:df:f3:8e:ab:17:c7:1c:be:39:a8:79:a5:ce:88:07:
f0:7b:24:9c:2c:48:bc:4f:b5:8e:dc:b8:f6:ee:fe:e9:59:a9:
0b:b3:bd:92:27:68:18:59:93:32:27:fa:6b:88:5e:2d:4e:8a:
7b:d5:f4:39:17:b4:81:40:67:13:e1:0d:37:c3:be:04:cc:28:
d3:bc:57:e8:3d:c2:44:06:aa:b0:f7:a6:d8:a8:e8:cc:ad:d3:
22:19:e9:70:c6:d5:bd:74:7f:46:fe:a8:d8:bf:e5:71:25:e2:
b0:dd:51:a8:94:aa:9e:00:9e:13:e0:a4:ed:a3:b9:03:22:5c:
13:3c:af:62:76:be:c5:ef:50:57:40:4b:2d:39:56:b6:45:5a:
b2:ea:6c:7e:54:0c:86:52:e6:10:ca:7f:38:f1:88:7b:bd:e8:
39:22:e3:42:47:4e:0e:3c:ae:98:b5:e6:4b:58:9d:ac:89:87:
d4:a4:a0:87:e6:0e:7a:05:d9:bd:58:0a:92:80:fd:b4:8e:5a:
e0:9f:53:b2:48:bb:2d:d7:a4:c8:6e:61:06:7f:a5:be:64:a7:
f7:4b:5b:5d:ab:17:85:6f:cc:af:18:89:df:70:79:38:07:0e:
63:b4:a0:ac
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZHNrhEtWXcvbac9pGXs97A4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTA3MTgxMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTg3NjVkNGQ5YmM4MGFkZDlkYTY3YTgzYTFkZmQwZjUwYWU0YzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8XQKdMayk1qG0cKOBETGheKo9f1
32+JDvTPYeucd5SqggnnaXQM3BneD/HC4m9M1NOiEjFOZmh72A+gjyC9Doq9NBdW
Tb1HVB14yUyttJy4q34u1TJSDJTmZ2ASFYsJE4zn9uC4FbKGWDsbAktb2ZDRyjh1
rlpQmx8z9RxZr9H5SM1OmjpQ8xYOQP3XTd5YFgJ3MoL4W9vP1K8OJVNXrSvBhfaV
UOwQJpcNDO73yIZVWubUwQq/5i+grE89CrwJ+DkAHjHnDjUIEiKexsFMzwqt3kxv
CkWrPQDcVRNOMcdfVoGosqSjTlHD5GTHE8MjU9tRzq3T0QRLK5q8Ml1T6wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFG6HZdTZvICt2dpnqDod/Q9QrkxeMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvYm9kbDFObThnSzNaMm1lb09oMzlEMUN1VEY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAFJyOd1w4CZ/sS75SJwX4WvCU
5/fX3/OOqxfHHL45qHmlzogH8HsknCxIvE+1jty49u7+6VmpC7O9kidoGFmTMif6
a4heLU6Ke9X0ORe0gUBnE+ENN8O+BMwo07xX6D3CRAaqsPem2KjozK3TIhnpcMbV
vXR/Rv6o2L/lcSXisN1RqJSqngCeE+Ck7aO5AyJcEzyvYna+xe9QV0BLLTlWtkVa
supsflQMhlLmEMp/OPGIe73oOSLjQkdODjyumLXmS1idrImH1KSgh+YOegXZvVgK
koD9tI5a4J9Tski7LdekyG5hBn+lvmSn90tbXasXhW/MrxiJ33B5OAcOY7SgrA==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:23:41 2024 by rpki-client on console-ams.rpki-client.org