Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ygHgWh1DLYUlJx_MOjvMxoKfH4c.roa
File: ygHgWh1DLYUlJx_MOjvMxoKfH4c.roa (raw, json)
Hash identifier: a4rLbRm3wkC2IWijwy5LIROY17G2YL6WE6DFZaqp0WY=
Subject key identifier: CA:01:E0:5A:1D:43:2D:85:25:27:1F:CC:3A:3B:CC:C6:82:9F:1F:87
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019371575A1C70B2EC1B780A3A00F9EFAFC9
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ygHgWh1DLYUlJx_MOjvMxoKfH4c.roa
Signing time: Thu 28 Nov 2024 05:56:10 +0000
ROA not before: Thu 28 Nov 2024 05:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213800
IP address blocks: 2a14:67c1:40::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:57:5a:1c:70:b2:ec:1b:78:0a:3a:00:f9:ef:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Nov 28 05:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca01e05a1d432d8525271fcc3a3bccc6829f1f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:f5:c5:48:f4:6e:b8:48:e5:73:a4:22:bf:
48:48:06:8c:6d:53:80:e9:66:f8:1a:0b:8b:2a:ad:
d5:4e:0b:57:c6:9c:fc:2a:fb:1e:32:ff:11:6c:16:
f1:f9:05:7f:80:aa:3a:ce:f2:a7:7b:a0:9c:97:d9:
d3:e8:72:46:a5:2b:d3:27:90:b1:01:97:1b:da:ce:
ee:dd:26:b1:f0:c5:cd:2a:95:d6:e1:51:cc:8c:a3:
1e:8f:31:de:63:41:79:4d:da:25:2e:15:63:4a:6e:
f7:ff:a5:f9:6f:4c:11:ce:55:d4:e4:7d:a1:34:c7:
3e:19:8a:04:88:4b:ad:67:ca:f7:ab:ef:80:7f:2c:
e9:a3:7b:78:69:dd:51:42:dd:fb:1f:09:2a:b5:1c:
e6:ea:99:7a:f9:a1:72:de:c5:42:62:35:e0:f1:3d:
41:f4:5b:68:60:d1:8f:4a:9b:8c:94:46:9c:4c:47:
32:3a:75:b0:37:b0:6b:9f:20:b0:10:8e:9d:f1:1e:
76:cd:5b:bb:a7:a7:26:cb:58:bc:d4:ed:76:a6:5d:
09:ce:01:8f:1b:89:98:1d:cf:14:ea:93:1d:b8:2c:
2a:0a:55:02:d7:49:fb:09:4a:1a:8e:56:ce:2b:3d:
e0:a1:36:1f:90:6d:d8:12:f8:6b:36:11:0f:d6:7e:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:01:E0:5A:1D:43:2D:85:25:27:1F:CC:3A:3B:CC:C6:82:9F:1F:87
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ygHgWh1DLYUlJx_MOjvMxoKfH4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:40::/44
Signature Algorithm: sha256WithRSAEncryption
b1:78:4b:00:77:fe:6c:83:e5:ca:50:af:d0:26:c3:a3:71:ec:
7b:37:b3:68:26:02:e8:fb:ad:3d:ce:a9:30:9d:81:c7:e7:c9:
ed:81:86:bf:9f:9d:44:f4:ac:38:93:e9:7b:94:da:20:d7:24:
00:d5:bf:4c:b3:35:95:fe:49:bd:d1:7e:26:81:61:fa:b4:d0:
bc:ee:62:76:8c:33:fa:e6:23:c8:84:ef:de:e6:b6:d7:03:6a:
a3:b3:e7:3e:ab:56:b5:ce:a5:90:b6:a0:d1:da:cc:03:96:63:
f7:7e:69:3f:51:0d:b4:34:8b:c6:38:2c:a6:cf:bb:48:96:f7:
11:71:e2:8c:68:8f:31:84:73:85:03:04:8f:71:52:13:bd:20:
66:0f:19:15:39:25:ce:e3:de:8a:df:3e:06:1b:c9:bb:1b:92:
0d:13:73:dc:c5:17:b5:19:c2:e2:b8:9b:66:b3:dc:66:f5:9f:
30:0b:f2:9a:95:c5:ad:43:73:4a:fb:db:66:e9:17:28:0c:97:
21:10:69:98:19:a1:90:ac:13:56:2d:6a:83:cf:2f:5c:5f:f4:
87:c8:83:01:97:a1:ae:6e:f8:ff:d3:3f:c9:45:a0:59:f7:da:
c4:b6:75:5b:0c:5f:95:e6:ee:52:de:d1:60:38:71:26:cd:f3:
d6:36:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:07 2025 by rpki-client