Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gr1tlIG2oNV-sBGH1tCK9BmiOCY.roa
File: gr1tlIG2oNV-sBGH1tCK9BmiOCY.roa (raw, json)
Hash identifier: CFHMaTrCXnWZvpMtQ3XFNVwlG//lKtEc78QU0hRB/H0=
Subject key identifier: 82:BD:6D:94:81:B6:A0:D5:7E:B0:11:87:D6:D0:8A:F4:19:A2:38:26
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D29F7559D958AF3C5F1CB3F62C083A67
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gr1tlIG2oNV-sBGH1tCK9BmiOCY.roa
Signing time: Sun 08 Sep 2024 17:12:31 +0000
ROA not before: Sun 08 Sep 2024 17:12:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 08 Sep 2024 18:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d2:9f:75:59:d9:58:af:3c:5f:1c:b3:f6:2c:08:3a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 8 17:12:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82bd6d9481b6a0d57eb01187d6d08af419a23826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:04:85:c8:27:6b:d0:eb:96:8e:c4:07:44:
30:c4:19:14:1c:b5:f0:82:ea:86:39:aa:99:0c:7a:
2a:17:8f:96:20:67:87:c5:28:0b:67:98:7b:69:83:
a1:37:2e:6e:3d:95:cc:e6:9f:5c:95:21:91:ee:5d:
d3:c1:22:2c:ff:87:13:f3:ca:08:9c:31:13:4d:95:
58:3d:18:3f:2b:79:a2:95:40:c9:a4:19:26:e8:54:
7f:24:7f:0f:a1:48:0d:2f:99:db:1c:22:8e:1e:bb:
cb:43:25:40:59:bd:f4:e6:02:d9:a1:c8:a2:07:3d:
8f:ac:ac:75:f4:02:dd:d5:c4:75:ef:17:64:d5:61:
a6:a8:fb:d5:10:4d:20:39:58:1b:95:81:19:c8:15:
73:0f:c6:1f:9d:94:5a:d5:4c:87:1c:1a:45:62:8c:
80:fb:21:8f:c0:15:ff:51:75:59:0c:5d:7e:38:92:
06:00:3f:a8:e1:4c:64:44:f4:e2:a5:98:c4:d6:10:
3f:9e:bf:d8:85:39:33:b5:e7:7e:31:1b:38:da:96:
cc:93:e1:c1:6a:65:77:8f:ee:ee:8f:be:38:13:dc:
22:97:4a:e9:76:cf:29:9a:8a:07:f8:4e:96:5f:3c:
6c:09:00:2d:2e:33:bd:76:87:bd:7c:03:2f:c0:19:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BD:6D:94:81:B6:A0:D5:7E:B0:11:87:D6:D0:8A:F4:19:A2:38:26
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gr1tlIG2oNV-sBGH1tCK9BmiOCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
7e:70:b5:e6:0a:38:eb:de:4b:6f:e0:5b:d8:de:02:dc:61:1b:
bc:b3:48:d2:d1:b0:39:1b:9e:c8:ed:a8:47:81:a2:c7:f9:dc:
20:b6:a6:55:f3:72:6f:90:1a:f7:e8:89:2a:e0:be:fc:de:9c:
7c:3f:00:00:11:ef:de:9a:fb:c6:56:76:d8:f7:d4:a9:18:e3:
a5:9e:1d:5d:2a:ac:95:1d:6b:b2:d7:91:3c:b0:85:81:7e:7f:
6d:36:26:1b:0d:0b:b1:74:28:0b:de:c0:55:ca:c5:d1:9f:2e:
a5:85:f1:74:bb:c9:a5:e4:0b:e4:a5:f2:8a:c3:1a:da:82:a0:
7f:f0:ee:e9:90:ba:d4:ed:ab:c7:29:aa:17:14:c2:25:43:8a:
08:1a:d7:6a:4c:a2:d6:bf:99:07:40:1e:c9:9d:68:89:0e:d6:
d6:a7:17:22:3b:81:92:21:8d:d8:5c:0f:be:a3:d0:25:81:6b:
71:68:a1:bb:be:41:cd:62:3b:ad:ae:9d:27:7b:29:82:0c:bd:
5c:bd:38:4b:b1:8b:77:94:e3:d4:8e:e8:ae:06:f9:32:1a:4c:
4f:52:30:6a:7e:ae:3b:69:cb:1d:59:eb:8e:cc:fc:0d:dc:71:
4f:50:ec:ff:16:af:35:60:e1:dd:ad:12:e1:94:44:0c:ab:fb:
9c:e0:f2:70
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZHSn3VZ2VivPF8cs/YsCDpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTA4MTcxMjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmJkNmQ5NDgxYjZhMGQ1N2ViMDExODdkNmQwOGFmNDE5YTIzODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnncEhcgna9Drlo7EB0QwxBkUHLXw
guqGOaqZDHoqF4+WIGeHxSgLZ5h7aYOhNy5uPZXM5p9clSGR7l3TwSIs/4cT88oI
nDETTZVYPRg/K3milUDJpBkm6FR/JH8PoUgNL5nbHCKOHrvLQyVAWb305gLZocii
Bz2PrKx19ALd1cR17xdk1WGmqPvVEE0gOVgblYEZyBVzD8YfnZRa1UyHHBpFYoyA
+yGPwBX/UXVZDF1+OJIGAD+o4UxkRPTipZjE1hA/nr/YhTkzted+MRs42pbMk+HB
amV3j+7uj744E9wil0rpds8pmooH+E6WXzxsCQAtLjO9doe9fAMvwBlkvwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFIK9bZSBtqDVfrARh9bQivQZojgmMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvZ3IxdGxJRzJvTlYtc0JHSDF0Q0s5Qm1pT0NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAfnC15go4695Lb+Bb2N4C3GEb
vLNI0tGwORueyO2oR4Gix/ncILamVfNyb5Aa9+iJKuC+/N6cfD8AABHv3pr7xlZ2
2PfUqRjjpZ4dXSqslR1rsteRPLCFgX5/bTYmGw0LsXQoC97AVcrF0Z8upYXxdLvJ
peQL5KXyisMa2oKgf/Du6ZC61O2rxymqFxTCJUOKCBrXakyi1r+ZB0AeyZ1oiQ7W
1qcXIjuBkiGN2FwPvqPQJYFrcWihu75BzWI7ra6dJ3spggy9XL04S7GLd5Tj1I7o
rgb5MhpMT1Iwan6uO2nLHVnrjsz8DdxxT1Ds/xavNWDh3a0S4ZREDKv7nODycA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:06 2025 by rpki-client