Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sgYSOKdAkJweBMTHJ21HJJjLSaM.roa
File: sgYSOKdAkJweBMTHJ21HJJjLSaM.roa (raw, json)
Hash identifier: V3/tJ8x+f+CVXXovnwRFr56cnxdoQcgr6R0rUlTB8eA=
Subject key identifier: B2:06:12:38:A7:40:90:9C:1E:04:C4:C7:27:6D:47:24:98:CB:49:A3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019131418B1931E14E489A51A7C563C7BB76
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sgYSOKdAkJweBMTHJ21HJJjLSaM.roa
Signing time: Thu 08 Aug 2024 09:11:04 +0000
ROA not before: Thu 08 Aug 2024 09:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 08 Aug 2024 10:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:41:8b:19:31:e1:4e:48:9a:51:a7:c5:63:c7:bb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 8 09:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2061238a740909c1e04c4c7276d472498cb49a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:4c:d9:27:ff:ce:ce:a5:58:0a:cd:80:2c:
84:06:02:93:08:b2:3e:25:5d:e2:d7:1a:fb:cb:86:
b9:62:8e:34:6a:2c:3b:9f:c7:67:4a:78:95:f5:29:
00:7d:2f:42:05:3a:8a:c4:89:47:c4:04:13:a1:f7:
17:05:df:63:08:68:41:7c:cf:da:cb:bf:99:bb:ae:
2f:4a:04:1d:1a:d5:93:83:59:7f:fd:56:11:6d:21:
f2:fc:a8:5f:74:32:0c:bd:4a:2b:86:64:da:84:58:
39:fa:dd:18:62:55:35:f9:b0:17:4a:a0:40:c7:80:
d7:f6:46:22:16:eb:c9:58:15:57:b2:de:0a:93:18:
16:d7:4f:55:68:f1:cf:39:26:e4:60:a6:66:c0:95:
82:df:c0:9d:ec:12:ab:d9:29:ed:98:d7:60:82:c2:
45:b2:8c:39:39:09:04:c8:d9:6e:d8:19:5c:72:10:
4a:64:34:fd:af:45:f4:85:dc:6b:0a:27:8c:45:45:
5b:5d:cc:67:07:1f:ce:72:94:76:f2:90:60:ae:f2:
04:56:cf:e4:d4:19:3e:12:2a:63:55:e0:b9:91:28:
fa:95:30:8f:1c:21:12:82:18:7f:8f:4e:ce:79:92:
36:c2:eb:9b:0f:b5:c3:82:dd:c7:53:7d:c2:20:03:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:06:12:38:A7:40:90:9C:1E:04:C4:C7:27:6D:47:24:98:CB:49:A3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sgYSOKdAkJweBMTHJ21HJJjLSaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
2e:f4:cf:d6:97:46:18:cc:de:83:af:3e:df:c1:e4:6c:be:7f:
44:6d:e0:24:fe:2a:59:d7:56:a9:f8:8d:a8:87:ed:5e:14:bb:
9e:82:b8:6a:b4:4f:df:16:5a:93:86:0f:24:b3:1b:1d:d1:50:
50:fe:ad:0d:fb:c6:a7:e5:fe:28:ac:10:07:b5:0d:d1:5c:70:
37:e0:36:da:a5:80:65:8b:f5:a1:9c:a1:69:fb:ad:c4:43:ec:
20:0b:f3:d9:c8:4c:38:35:f5:b9:72:b5:82:c8:4b:23:fe:35:
81:99:ec:3a:41:ab:74:25:02:43:ed:8c:10:48:1f:9d:1d:d0:
4e:e4:64:77:6d:13:86:9c:e4:2b:4b:0d:46:21:92:9c:95:9a:
df:75:44:ee:77:be:8c:bf:d9:e9:d0:52:2a:58:d2:eb:d0:1b:
1d:69:42:8e:db:8c:18:c1:e6:92:bb:a7:57:5f:5d:6b:d9:90:
19:19:33:87:0c:bf:6f:fb:4d:d2:2b:1d:90:35:ce:6d:3d:26:
45:11:93:88:2f:f0:28:8b:82:93:e1:71:d9:7d:a0:b0:2f:65:
cb:90:d2:b9:95:87:38:fd:86:82:19:d5:c5:45:cf:ed:a4:98:
51:45:b0:2b:70:f7:86:1b:95:fa:da:0b:5c:a6:50:78:c6:a5:
b5:41:49:05
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZExQYsZMeFOSJpRp8Vjx7t2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODA4MDkxMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjA2MTIzOGE3NDA5MDljMWUwNGM0YzcyNzZkNDcyNDk4Y2I0OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnChM2Sf/zs6lWArNgCyEBgKTCLI+
JV3i1xr7y4a5Yo40aiw7n8dnSniV9SkAfS9CBTqKxIlHxAQTofcXBd9jCGhBfM/a
y7+Zu64vSgQdGtWTg1l//VYRbSHy/KhfdDIMvUorhmTahFg5+t0YYlU1+bAXSqBA
x4DX9kYiFuvJWBVXst4KkxgW109VaPHPOSbkYKZmwJWC38Cd7BKr2SntmNdggsJF
sow5OQkEyNlu2BlcchBKZDT9r0X0hdxrCieMRUVbXcxnBx/OcpR28pBgrvIEVs/k
1Bk+EipjVeC5kSj6lTCPHCESghh/j07OeZI2wuubD7XDgt3HU33CIAMbGQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLIGEjinQJCcHgTExydtRySYy0mjMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvc2dZU09LZEFrSndlQk1USEoyMUhKSmpMU2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEALvTP1pdGGMzeg68+38HkbL5/
RG3gJP4qWddWqfiNqIftXhS7noK4arRP3xZak4YPJLMbHdFQUP6tDfvGp+X+KKwQ
B7UN0VxwN+A22qWAZYv1oZyhafutxEPsIAvz2chMODX1uXK1gshLI/41gZnsOkGr
dCUCQ+2MEEgfnR3QTuRkd20ThpzkK0sNRiGSnJWa33VE7ne+jL/Z6dBSKljS69Ab
HWlCjtuMGMHmkrunV19da9mQGRkzhwy/b/tN0isdkDXObT0mRRGTiC/wKIuCk+Fx
2X2gsC9ly5DSuZWHOP2GghnVxUXP7aSYUUWwK3D3hhuV+toLXKZQeMaltUFJBQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:39 2025 by rpki-client