Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/YQkkjWlvaDmx5X1bCKI7jRWaoGA.roa
File: YQkkjWlvaDmx5X1bCKI7jRWaoGA.roa (raw, json)
Hash identifier: uw76VAIvy9i+16h25dsYs8jLyIcBiV7LfCPxfx8znw4=
Subject key identifier: 61:09:24:8D:69:6F:68:39:B1:E5:7D:5B:08:A2:3B:8D:15:9A:A0:60
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F42A8A2F6BD14F0BFBDDD9471CB0925
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/YQkkjWlvaDmx5X1bCKI7jRWaoGA.roa
Signing time: Sun 01 Jan 2023 21:35:17 +0000
ROA not before: Sun 01 Jan 2023 21:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398104
IP address blocks: 2a01:488:bb1b::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a8:a2:f6:bd:14:f0:bf:bd:dd:94:71:cb:09:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6109248d696f6839b1e57d5b08a23b8d159aa060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:f4:78:36:6e:8e:0d:28:8b:08:76:85:de:
26:79:06:cb:ba:9a:8a:05:df:24:3e:61:6d:c3:a8:
ea:ca:3c:be:2c:7c:48:30:2a:e4:fa:62:82:01:fd:
fe:b4:4e:f5:51:50:01:79:40:73:f6:e8:c9:bd:f0:
d2:3a:33:51:b5:6c:b0:23:4f:f5:57:3f:42:bc:3d:
b6:b4:b1:3f:5f:68:a0:e8:af:d3:31:68:36:59:6c:
7d:1e:67:5e:22:c2:59:4a:4c:bf:9e:3f:e5:4c:aa:
56:9a:89:a9:20:a2:6e:2c:fc:96:c9:5c:89:ac:df:
29:d3:79:15:9a:f5:a1:6a:66:02:9f:40:a6:4f:30:
2e:78:39:9b:2a:bc:51:b0:f5:c7:a7:49:a6:3f:fb:
8f:ca:0b:11:e6:b4:ac:38:20:80:06:c1:80:bb:f7:
16:bd:f6:ef:9f:0f:12:95:45:54:1f:0c:10:67:63:
f6:ab:03:62:e9:e2:9d:a8:19:3f:97:35:73:72:85:
04:5b:e6:ec:c0:ad:63:7b:a1:4d:b9:50:c8:bb:20:
42:86:fd:50:4e:4a:e2:8e:61:dd:6b:92:fc:8d:3a:
c6:4c:9c:1a:7c:4b:0f:66:35:2b:56:97:8f:c1:8f:
2e:f6:05:3b:29:d5:e7:64:bb:fd:00:4f:fe:23:5a:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:09:24:8D:69:6F:68:39:B1:E5:7D:5B:08:A2:3B:8D:15:9A:A0:60
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/YQkkjWlvaDmx5X1bCKI7jRWaoGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb1b::/48
Signature Algorithm: sha256WithRSAEncryption
65:56:af:7e:de:6b:df:92:9a:87:42:98:7c:9a:87:8a:b2:18:
bf:49:f6:7b:2b:c2:62:89:60:97:53:0c:7c:0a:e2:06:1f:31:
be:d0:86:69:0f:a9:81:7e:2d:7c:0a:29:1a:8c:61:91:3d:6e:
23:1c:f7:4f:c9:40:75:ba:74:85:a4:38:69:86:ce:a6:1f:24:
ad:4e:70:8c:c7:cd:db:f3:be:09:28:73:86:0c:26:b6:ca:f6:
a1:e7:f7:9b:a8:44:33:85:f4:31:d6:36:3f:8b:ba:bc:45:13:
f9:59:a4:d6:da:a7:5f:25:53:61:c2:48:5d:3a:28:37:46:b7:
df:4b:03:2c:4d:4e:38:e4:09:03:a4:69:20:23:b9:bd:27:df:
11:2e:e3:b7:1a:51:2e:07:5e:0e:e5:d9:ce:16:4d:a8:ed:f6:
10:ee:2c:73:77:0b:91:87:7e:36:ca:3c:6d:0b:e2:2d:4f:75:
9b:86:fa:75:73:5a:2d:a3:ff:58:57:08:15:f1:47:44:0f:c6:
d8:e5:cc:a1:60:3b:62:22:17:a6:40:09:70:0d:f6:7c:f3:db:
ee:9f:8b:79:89:de:a1:75:66:7b:f7:24:9a:3f:0d:be:12:8d:
32:7f:49:53:d1:97:c1:73:be:a7:19:52:d2:32:19:d6:2e:fb:
73:99:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org