Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vUY7VB-MOcaVLCLfqpGFl792FS0.roa
File: vUY7VB-MOcaVLCLfqpGFl792FS0.roa (raw, json)
Hash identifier: Tppo71/rKCHvR2XQXQgal0g2dekvhGhKp3zLIheSqSU=
Subject key identifier: BD:46:3B:54:1F:8C:39:C6:95:2C:22:DF:AA:91:85:97:BF:76:15:2D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01912506706977D97D0585E4D4AD86AF77CD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vUY7VB-MOcaVLCLfqpGFl792FS0.roa
Signing time: Tue 06 Aug 2024 00:11:04 +0000
ROA not before: Tue 06 Aug 2024 00:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 06 Aug 2024 01:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:25:06:70:69:77:d9:7d:05:85:e4:d4:ad:86:af:77:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 6 00:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd463b541f8c39c6952c22dfaa918597bf76152d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:aa:5f:21:b7:22:f3:4f:17:07:02:35:f3:
63:c7:0f:38:6c:23:e8:e7:3e:d6:8f:9a:6f:c8:1b:
7d:3a:52:4c:a0:3c:a8:fa:0d:67:f5:fc:1c:8f:9c:
50:bd:6a:8d:1d:11:9e:9b:c8:a0:31:28:97:3d:7d:
aa:ba:cb:4f:26:b2:dd:79:cc:df:d0:5d:61:f8:20:
2c:ec:26:10:06:7d:64:a2:64:86:6e:21:2d:e7:56:
5c:a7:5b:d4:9c:2d:28:46:bf:d4:80:6f:48:b3:4c:
b0:15:55:36:a7:e6:d7:01:90:fa:75:43:d3:12:36:
ee:2b:97:01:99:90:83:02:02:e9:db:82:4f:01:44:
6f:5a:fc:a9:47:a4:04:70:49:2f:a4:21:91:20:88:
e7:ea:85:b4:18:23:fb:8a:52:e0:3b:af:ed:e5:9e:
c4:bd:e0:c4:62:67:3f:8d:08:e9:23:94:e4:05:20:
75:ef:20:26:f1:a6:6e:af:38:42:88:36:ac:14:b2:
4a:73:8c:9d:7a:16:1d:19:35:b9:18:d5:1d:51:c6:
a8:20:67:e1:04:17:d4:e0:0a:c1:5c:65:69:6c:97:
98:2a:a3:4a:6a:31:03:32:64:9e:5b:0a:b3:73:76:
11:7c:4d:fe:9b:fc:67:60:b2:97:03:11:ce:29:80:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:46:3B:54:1F:8C:39:C6:95:2C:22:DF:AA:91:85:97:BF:76:15:2D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vUY7VB-MOcaVLCLfqpGFl792FS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
30:ce:02:9b:28:fd:77:68:a0:49:83:4a:00:fd:18:5b:de:12:
ab:61:f4:d3:03:1a:25:98:e8:00:c2:5c:c2:39:26:c4:35:49:
18:8d:fa:e1:c2:1b:8f:d5:51:29:a9:79:49:23:b7:99:77:bd:
0b:9d:20:94:26:ec:55:fd:fd:77:f4:5f:af:d7:ab:ef:d3:26:
57:d5:6a:1f:0e:a8:3a:9d:24:00:1f:6b:f7:3a:c3:97:6e:b9:
c2:c4:e1:67:0e:c7:d9:a1:18:d6:40:1a:70:a5:29:93:76:b1:
73:a3:aa:a9:11:8d:10:aa:9a:69:68:0e:25:77:22:52:79:68:
d9:54:e4:5c:2e:40:74:8b:5a:e0:2c:b4:64:f8:58:ed:ff:f6:
55:ec:7b:47:4c:1c:ff:ac:8e:06:8e:94:4c:90:dc:f5:8f:81:
d5:ea:f2:62:33:74:24:24:d2:e8:3f:46:f2:17:82:14:9a:fe:
8d:e4:da:c1:ba:f7:a1:33:7c:01:63:eb:29:39:c0:40:bf:97:
bf:50:0b:57:0a:58:55:c1:5d:b6:38:ef:7a:27:5c:8d:aa:3f:
d7:95:48:63:44:3a:01:1a:f9:8f:db:00:27:e4:5e:88:94:8f:
d2:bd:9c:05:72:99:5b:c7:71:64:c8:b1:b8:c1:8e:cc:54:85:
0e:a0:ae:bc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZElBnBpd9l9BYXk1K2Gr3fNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODA2MDAxMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDQ2M2I1NDFmOGMzOWM2OTUyYzIyZGZhYTkxODU5N2JmNzYxNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc+qXyG3IvNPFwcCNfNjxw84bCPo
5z7Wj5pvyBt9OlJMoDyo+g1n9fwcj5xQvWqNHRGem8igMSiXPX2qustPJrLdeczf
0F1h+CAs7CYQBn1komSGbiEt51Zcp1vUnC0oRr/UgG9Is0ywFVU2p+bXAZD6dUPT
EjbuK5cBmZCDAgLp24JPAURvWvypR6QEcEkvpCGRIIjn6oW0GCP7ilLgO6/t5Z7E
veDEYmc/jQjpI5TkBSB17yAm8aZurzhCiDasFLJKc4ydehYdGTW5GNUdUcaoIGfh
BBfU4ArBXGVpbJeYKqNKajEDMmSeWwqzc3YRfE3+m/xnYLKXAxHOKYAcEQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFL1GO1QfjDnGlSwi36qRhZe/dhUtMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvdlVZN1ZCLU1PY2FWTENMZnFwR0ZsNzkyRlMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAMM4Cmyj9d2igSYNKAP0YW94S
q2H00wMaJZjoAMJcwjkmxDVJGI364cIbj9VRKal5SSO3mXe9C50glCbsVf39d/Rf
r9er79MmV9VqHw6oOp0kAB9r9zrDl265wsThZw7H2aEY1kAacKUpk3axc6OqqRGN
EKqaaWgOJXciUnlo2VTkXC5AdIta4Cy0ZPhY7f/2Vex7R0wc/6yOBo6UTJDc9Y+B
1eryYjN0JCTS6D9G8heCFJr+jeTawbr3oTN8AWPrKTnAQL+Xv1ALVwpYVcFdtjjv
eidcjao/15VIY0Q6ARr5j9sAJ+ReiJSP0r2cBXKZW8dxZMixuMGOzFSFDqCuvA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:22 2025 by rpki-client