Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wy4kR5CC1Ouko3dlUGNeiilrj8k.roa
File: wy4kR5CC1Ouko3dlUGNeiilrj8k.roa (raw, json)
Hash identifier: Vbsu6K9cR9lHsaX9LsrpJQaCqZx6LwHakApqeQHGsNQ=
Subject key identifier: C3:2E:24:47:90:82:D4:EB:A4:A3:77:65:50:63:5E:8A:29:6B:8F:C9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01912E76841887A33725CBE71CEC9BC3BCAF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wy4kR5CC1Ouko3dlUGNeiilrj8k.roa
Signing time: Wed 07 Aug 2024 20:10:04 +0000
ROA not before: Wed 07 Aug 2024 20:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 07 Aug 2024 21:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2e:76:84:18:87:a3:37:25:cb:e7:1c:ec:9b:c3:bc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 7 20:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c32e24479082d4eba4a3776550635e8a296b8fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:4d:6b:37:e4:50:27:cc:70:d5:49:ac:ae:
c4:c2:f8:83:b2:00:58:1b:9b:f6:ca:a4:57:a9:9f:
0f:67:26:32:72:80:87:5b:3b:ad:e7:c8:9b:75:95:
ab:fc:15:ad:01:db:a6:21:1b:f0:7f:d3:41:f7:90:
e0:2c:0f:50:f6:97:16:f0:6f:ef:bd:dc:bc:5a:35:
db:ad:b1:b0:16:d4:a4:db:c6:73:b1:c4:b9:32:cd:
e9:2f:f2:72:0d:9f:25:d0:55:43:6b:b9:7c:51:af:
36:ad:84:4d:14:ad:ea:b8:df:34:46:c5:7f:c0:65:
b5:0f:f3:b1:cd:ab:cb:32:f1:fe:24:da:b9:39:d3:
66:a7:5b:d0:8a:62:16:8a:1a:66:f7:8a:0d:d0:43:
d9:2b:f0:c9:fb:5a:60:ef:47:5c:ac:d9:67:39:ed:
2d:25:ad:25:45:de:07:d4:56:f1:4a:95:b6:d3:65:
1f:39:fd:ae:88:13:5e:5a:08:58:17:a4:c1:1c:2b:
17:02:ca:7f:69:a1:91:68:e9:ea:b4:35:ea:4d:99:
6f:74:26:52:b3:5c:68:e0:75:cd:91:f0:23:c3:93:
03:2c:b5:c9:78:94:e9:fa:64:9a:85:ae:e3:75:54:
3c:be:0d:93:fc:b5:3a:f3:0a:a4:65:20:bb:cd:9b:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:24:47:90:82:D4:EB:A4:A3:77:65:50:63:5E:8A:29:6B:8F:C9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wy4kR5CC1Ouko3dlUGNeiilrj8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
50:eb:c6:fa:08:48:2e:1a:dc:ad:38:a0:37:c7:df:e2:fb:ba:
47:57:0a:76:69:79:53:9f:49:ff:ba:df:d2:d5:63:08:15:62:
f4:99:fd:51:54:49:ca:7a:27:ed:f7:6b:b9:b9:8d:4e:22:4b:
37:36:3f:ca:94:25:e7:e9:8b:99:45:d1:cc:52:42:84:b2:81:
45:53:88:81:4e:7f:80:5b:50:d5:f7:9e:0f:21:68:6b:99:ae:
2e:3a:44:61:b0:25:d9:3e:f2:40:2d:3c:6b:53:37:28:d2:19:
c6:93:8a:a9:fc:13:bb:41:94:c1:53:ee:83:38:6f:fc:89:85:
94:d1:4f:5f:f2:ac:59:48:3e:a6:19:f6:08:1f:f9:08:7f:db:
ff:5f:2d:ac:fa:36:20:db:c3:26:45:0b:73:0c:54:97:2b:8b:
6a:1d:b0:0c:62:e5:bd:88:3b:c2:ca:a5:0b:84:c4:b9:23:ee:
96:df:09:7a:8e:5b:41:9c:87:4d:44:3c:ba:2e:ea:33:92:71:
f8:13:7f:9d:d7:51:16:5b:72:e6:49:6c:36:dd:cd:d5:1f:f2:
00:40:00:43:28:77:f7:df:d3:47:2e:a2:f9:27:af:b1:bf:d7:
3b:74:0c:a3:37:49:bc:8b:b3:8c:16:38:30:b0:4f:12:c2:40:
3d:69:f3:93
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZEudoQYh6M3JcvnHOybw7yvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODA3MjAxMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzJlMjQ0NzkwODJkNGViYTRhMzc3NjU1MDYzNWU4YTI5NmI4ZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyZNazfkUCfMcNVJrK7EwviDsgBY
G5v2yqRXqZ8PZyYycoCHWzut58ibdZWr/BWtAdumIRvwf9NB95DgLA9Q9pcW8G/v
vdy8WjXbrbGwFtSk28ZzscS5Ms3pL/JyDZ8l0FVDa7l8Ua82rYRNFK3quN80RsV/
wGW1D/OxzavLMvH+JNq5OdNmp1vQimIWihpm94oN0EPZK/DJ+1pg70dcrNlnOe0t
Ja0lRd4H1FbxSpW202UfOf2uiBNeWghYF6TBHCsXAsp/aaGRaOnqtDXqTZlvdCZS
s1xo4HXNkfAjw5MDLLXJeJTp+mSaha7jdVQ8vg2T/LU68wqkZSC7zZtyowIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFMMuJEeQgtTrpKN3ZVBjXoopa4/JMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvd3k0a1I1Q0MxT3VrbzNkbFVHTmVpaWxyajhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAUOvG+ghILhrcrTigN8ff4vu6
R1cKdml5U59J/7rf0tVjCBVi9Jn9UVRJynon7fdrubmNTiJLNzY/ypQl5+mLmUXR
zFJChLKBRVOIgU5/gFtQ1feeDyFoa5muLjpEYbAl2T7yQC08a1M3KNIZxpOKqfwT
u0GUwVPugzhv/ImFlNFPX/KsWUg+phn2CB/5CH/b/18trPo2INvDJkULcwxUlyuL
ah2wDGLlvYg7wsqlC4TEuSPult8Jeo5bQZyHTUQ8ui7qM5Jx+BN/nddRFlty5kls
Nt3N1R/yAEAAQyh399/TRy6i+Sevsb/XO3QMozdJvIuzjBY4MLBPEsJAPWnzkw==
-----END CERTIFICATE-----
Generated at Wed Aug 7 23:33:37 2024 by rpki-client on console-fra.rpki-client.org