Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/miGnAhcTZ76y5CZD0h7jnriaxUA.roa
File: miGnAhcTZ76y5CZD0h7jnriaxUA.roa (raw, json)
Hash identifier: bmzfmjjf7K/WXVnruom81zO8DStlyl38dtJd5wTJiVY=
Subject key identifier: 9A:21:A7:02:17:13:67:BE:B2:E4:26:43:D2:1E:E3:9E:B8:9A:C5:40
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190F6DEA467BC318B332DE7D7D4ED80A765
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/miGnAhcTZ76y5CZD0h7jnriaxUA.roa
Signing time: Sun 28 Jul 2024 01:05:04 +0000
ROA not before: Sun 28 Jul 2024 01:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:f6dd:ee3f/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 28 Jul 2024 01:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f6:de:a4:67:bc:31:8b:33:2d:e7:d7:d4:ed:80:a7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 28 01:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a21a702171367beb2e42643d21ee39eb89ac540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:38:0a:9c:8b:4e:f3:8e:01:55:c9:04:a3:
2a:91:0a:8b:d0:38:49:c0:8d:ef:02:f9:f3:04:e5:
38:32:d8:40:c5:cd:b8:5a:68:be:75:69:24:bc:be:
c8:fc:2a:3e:13:c5:5a:41:51:dd:03:c6:31:21:8c:
63:2a:af:b8:73:13:b9:f8:2c:c9:34:7c:bd:ae:8c:
5e:fd:19:77:fe:6b:00:42:9e:27:b1:aa:32:00:66:
d6:6e:cc:80:c6:e4:3b:6a:6e:df:b8:e1:38:3a:0b:
5b:9b:ab:39:7d:02:10:a2:9a:73:25:12:73:16:1b:
4b:e4:47:81:e8:67:1e:ae:e7:92:3c:29:cd:94:e1:
aa:78:7d:a9:aa:07:11:07:e3:5d:40:66:8d:23:51:
03:02:3c:2e:72:2f:f4:27:6a:42:bd:5f:6c:12:91:
eb:d7:56:6b:52:54:2a:e3:b3:0c:63:52:2b:51:36:
eb:b0:9b:d6:2c:e5:57:d6:53:b5:9c:6e:fa:b4:24:
f5:80:0a:b4:64:79:41:c4:32:c1:f9:45:81:ee:14:
69:c2:92:7e:dc:64:09:c2:23:17:4d:36:8a:bb:f6:
9f:ac:72:72:2b:eb:54:69:93:09:65:68:d6:1f:f7:
3c:e1:d2:ce:45:cd:38:79:9f:c1:33:de:57:05:74:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:21:A7:02:17:13:67:BE:B2:E4:26:43:D2:1E:E3:9E:B8:9A:C5:40
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/miGnAhcTZ76y5CZD0h7jnriaxUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:f6dd:ee3f/128
Signature Algorithm: sha256WithRSAEncryption
82:2b:e7:5d:18:16:34:16:3d:f0:3c:2a:ca:46:da:83:5e:a4:
35:a7:16:66:f0:b6:40:bf:cc:1a:6d:ce:4a:ca:50:a0:b5:ec:
e3:f6:ab:8f:f6:4f:00:d9:d0:33:de:af:c7:2a:2b:c4:89:53:
27:ff:06:14:b7:b7:96:e3:da:53:8a:77:60:7a:1d:3b:59:de:
ea:64:48:46:76:b1:21:a1:f6:a6:5f:6e:ef:1d:7d:74:bf:b1:
77:20:51:a3:3e:4f:de:44:72:d9:bd:cc:29:37:f2:5a:63:c0:
08:5a:e7:ff:fd:ab:13:67:b0:08:d4:d5:83:6c:c7:17:70:bf:
a0:56:1c:71:62:c1:da:49:f2:42:95:a6:13:0b:81:ee:b4:a5:
f4:7c:0e:cb:7a:93:01:a9:97:c6:c1:73:b1:64:c6:ed:5a:90:
c3:73:1c:b7:12:a4:27:ca:b7:c1:60:c6:e0:b4:c1:c4:f7:19:
a3:90:98:91:34:83:ae:d1:b6:84:f6:2d:c7:32:d4:3c:78:fd:
fb:9c:22:90:49:10:1d:ea:a0:b9:b2:73:39:6f:ed:a4:8b:75:
a8:13:b4:38:47:9b:39:cc:40:0e:b5:3c:16:09:f5:2e:c6:fb:
c2:3c:60:40:c0:d9:7d:72:48:6d:6d:ad:87:b7:7e:8c:a9:36:
e4:f0:6c:fa
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZD23qRnvDGLMy3n19TtgKdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzI4MDEwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTIxYTcwMjE3MTM2N2JlYjJlNDI2NDNkMjFlZTM5ZWI4OWFjNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGM4CpyLTvOOAVXJBKMqkQqL0DhJ
wI3vAvnzBOU4MthAxc24Wmi+dWkkvL7I/Co+E8VaQVHdA8YxIYxjKq+4cxO5+CzJ
NHy9roxe/Rl3/msAQp4nsaoyAGbWbsyAxuQ7am7fuOE4Ogtbm6s5fQIQoppzJRJz
FhtL5EeB6GcerueSPCnNlOGqeH2pqgcRB+NdQGaNI1EDAjwuci/0J2pCvV9sEpHr
11ZrUlQq47MMY1IrUTbrsJvWLOVX1lO1nG76tCT1gAq0ZHlBxDLB+UWB7hRpwpJ+
3GQJwiMXTTaKu/afrHJyK+tUaZMJZWjWH/c84dLORc04eZ/BM95XBXSv9wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFJohpwIXE2e+suQmQ9Ie4564msVAMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvbWlHbkFoY1RaNzZ5NUNaRDBoN2pucmlheFVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ9t3uPzANBgkqhkiG9w0BAQsFAAOCAQEAgivnXRgWNBY98Dwqykbag16k
NacWZvC2QL/MGm3OSspQoLXs4/arj/ZPANnQM96vxyorxIlTJ/8GFLe3luPaU4p3
YHodO1ne6mRIRnaxIaH2pl9u7x19dL+xdyBRoz5P3kRy2b3MKTfyWmPACFrn//2r
E2ewCNTVg2zHF3C/oFYccWLB2knyQpWmEwuB7rSl9HwOy3qTAamXxsFzsWTG7VqQ
w3MctxKkJ8q3wWDG4LTBxPcZo5CYkTSDrtG2hPYtxzLUPHj9+5wikEkQHeqgubJz
OW/tpIt1qBO0OEebOcxADrU8Fgn1Lsb7wjxgQMDZfXJIbW2th7d+jKk25PBs+g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:11 2025 by rpki-client