Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gdgkIvLRZnYhh69VGg3wiIoA4Y8.roa
File: gdgkIvLRZnYhh69VGg3wiIoA4Y8.roa (raw, json)
Hash identifier: D0mo6ef4YEXVhtDjGI1aTiavAw+F8UwAUVNHmdBxCqs=
Subject key identifier: 81:D8:24:22:F2:D1:66:76:21:87:AF:55:1A:0D:F0:88:8A:00:E1:8F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019291FF78A778B979ABAD053C5F94671863
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gdgkIvLRZnYhh69VGg3wiIoA4Y8.roa
Signing time: Tue 15 Oct 2024 21:04:51 +0000
ROA not before: Tue 15 Oct 2024 21:04:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:91ff:609/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 15 Oct 2024 21:09:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:91:ff:78:a7:78:b9:79:ab:ad:05:3c:5f:94:67:18:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 15 21:04:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81d82422f2d166762187af551a0df0888a00e18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:8a:50:7d:1d:82:4c:cf:78:70:48:ff:4d:
b4:bc:71:bc:90:33:dd:0f:cb:64:5e:ef:8e:d3:c4:
bd:94:42:d0:e5:f2:b5:35:4d:8b:36:ad:35:9d:47:
03:ba:30:e4:fc:a9:04:26:e7:a2:1b:6e:95:99:05:
6d:d5:a1:dd:3d:5d:3f:bf:2f:55:6a:51:10:2b:1b:
11:61:ec:7b:bc:d8:9d:88:df:ec:52:53:0b:49:9c:
ea:fc:0c:ec:d4:8f:4e:a5:13:b4:1c:a3:2f:5c:58:
4e:45:67:59:99:4a:c6:37:43:b8:ad:e9:37:40:02:
60:0d:1d:c7:da:72:65:be:e9:ac:d1:c8:94:83:99:
95:f3:9f:68:28:df:bf:2f:ed:ad:39:16:c5:b2:97:
44:32:45:7d:a7:f8:5a:2a:ab:18:5f:01:b5:72:f2:
c0:24:cc:f2:3c:66:2d:59:17:ff:1e:1b:b2:7d:c4:
4d:96:1f:bc:2d:87:d4:bf:cf:ea:b1:82:e2:5d:17:
60:66:7b:8f:98:24:c5:74:5d:0d:19:c0:85:d4:d2:
cd:ba:d0:cb:89:cb:2b:53:93:ef:9c:25:05:29:d9:
e1:12:1e:40:fc:05:15:ed:7a:d0:20:3a:c4:63:30:
e1:6d:c7:f6:33:e0:4c:87:80:cd:91:98:30:45:52:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:24:22:F2:D1:66:76:21:87:AF:55:1A:0D:F0:88:8A:00:E1:8F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gdgkIvLRZnYhh69VGg3wiIoA4Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:91ff:609/128
Signature Algorithm: sha256WithRSAEncryption
57:e6:cc:a6:89:6d:6c:0c:ca:89:eb:c7:c1:12:a2:c0:09:4a:
93:99:8f:cc:d4:fb:a2:82:47:e9:b6:f5:cf:da:a9:70:55:ec:
32:5c:e0:0f:ac:f4:f0:24:37:bf:aa:7b:4d:65:5d:45:8b:d8:
d6:8d:8f:99:1a:bf:18:76:b4:53:b8:fa:a7:f0:be:6c:e3:21:
e3:f8:3a:a4:f7:83:8f:f4:dc:7f:e1:0b:8c:aa:5c:20:2c:69:
5c:9a:3f:a0:e6:5c:87:1e:f7:51:89:84:52:61:49:00:05:bf:
ad:0b:a6:f6:88:e0:04:ce:2f:d1:08:e2:1d:d1:7b:6a:49:41:
f5:3b:2c:10:92:5b:db:47:74:9a:f3:2c:df:db:73:25:9b:29:
01:6c:6f:31:8e:a7:ce:76:8d:29:48:a8:77:a6:50:08:b7:eb:
0e:f9:fb:3f:64:ad:c8:02:e5:b0:8e:4d:0b:79:48:f9:1d:67:
45:71:a3:36:ff:1b:55:05:8e:b0:a7:bc:f5:47:cc:dc:58:dd:
dc:b8:5a:7c:fb:d1:ad:9e:66:1b:82:7e:82:2e:bf:6a:07:09:
62:63:82:14:15:a0:de:36:8f:6a:ea:66:a3:10:86:5e:b0:f1:
0b:5e:5c:37:99:68:e0:8e:0e:c6:7a:a9:8f:23:85:b5:49:f1:
cd:d1:77:0c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZKR/3ineLl5q60FPF+UZxhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQxMDE1MjEwNDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWQ4MjQyMmYyZDE2Njc2MjE4N2FmNTUxYTBkZjA4ODhhMDBlMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqKKUH0dgkzPeHBI/020vHG8kDPd
D8tkXu+O08S9lELQ5fK1NU2LNq01nUcDujDk/KkEJueiG26VmQVt1aHdPV0/vy9V
alEQKxsRYex7vNidiN/sUlMLSZzq/Azs1I9OpRO0HKMvXFhORWdZmUrGN0O4rek3
QAJgDR3H2nJlvums0ciUg5mV859oKN+/L+2tORbFspdEMkV9p/haKqsYXwG1cvLA
JMzyPGYtWRf/HhuyfcRNlh+8LYfUv8/qsYLiXRdgZnuPmCTFdF0NGcCF1NLNutDL
icsrU5PvnCUFKdnhEh5A/AUV7XrQIDrEYzDhbcf2M+BMh4DNkZgwRVJpzQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFIHYJCLy0WZ2IYevVRoN8IiKAOGPMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvZ2Rna0l2TFJablloaDY5VkdnM3dpSW9BNFk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGSkf8GCTANBgkqhkiG9w0BAQsFAAOCAQEAV+bMpoltbAzKievHwRKiwAlK
k5mPzNT7ooJH6bb1z9qpcFXsMlzgD6z08CQ3v6p7TWVdRYvY1o2PmRq/GHa0U7j6
p/C+bOMh4/g6pPeDj/Tcf+ELjKpcICxpXJo/oOZchx73UYmEUmFJAAW/rQum9ojg
BM4v0QjiHdF7aklB9TssEJJb20d0mvMs39tzJZspAWxvMY6nznaNKUiod6ZQCLfr
Dvn7P2StyALlsI5NC3lI+R1nRXGjNv8bVQWOsKe89UfM3Fjd3LhafPvRrZ5mG4J+
gi6/agcJYmOCFBWg3jaPaupmoxCGXrDxC15cN5lo4I4OxnqpjyOFtUnxzdF3DA==
-----END CERTIFICATE-----
Generated at Tue Oct 15 23:26:16 2024 by rpki-client on console-fra.rpki-client.org