Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/cYc3OD6Sa2q03seqiXIDtTARYwA.roa
File: cYc3OD6Sa2q03seqiXIDtTARYwA.roa (raw, json)
Hash identifier: tRpgrjEdWYDWXrTzR2BvSzoyLkN7fCsB8nHkcpGzlF4=
Subject key identifier: 71:87:37:38:3E:92:6B:6A:B4:DE:C7:AA:89:72:03:B5:30:11:63:00
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F42960F3844F4A51F36763F4535AE16
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/cYc3OD6Sa2q03seqiXIDtTARYwA.roa
Signing time: Sun 01 Jan 2023 21:35:12 +0000
ROA not before: Sun 01 Jan 2023 21:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24940
IP address blocks: 2001:67c:1164::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:96:0f:38:44:f4:a5:1f:36:76:3f:45:35:ae:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=718737383e926b6ab4dec7aa897203b530116300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:b0:a8:f8:44:8d:0a:4a:4c:a6:a0:dc:f7:
20:3c:19:b0:e2:f1:f1:6b:b6:04:df:db:5c:b2:60:
99:4a:aa:3c:a1:8e:48:87:49:65:bd:28:86:da:1c:
c3:5c:25:47:4d:3f:ba:26:11:56:db:b9:9c:b9:36:
7b:e2:1d:6e:14:37:89:43:bd:2b:a2:8b:f6:01:f5:
94:f2:2a:ae:22:cb:ab:33:0e:fe:ce:63:b2:32:59:
64:16:9a:fa:bc:c1:2c:fb:11:31:29:97:17:59:f7:
25:9d:2b:f4:da:d7:09:2b:bb:bf:c3:58:03:a1:60:
3e:78:5d:ea:12:81:d7:55:c2:6e:33:28:6b:24:5b:
d5:24:ac:9f:50:14:a9:25:be:4d:15:d8:51:78:82:
c1:00:c9:99:2a:66:de:b7:77:c3:68:ea:db:60:db:
7c:6f:f1:88:17:fc:de:aa:02:86:7c:c7:44:93:14:
b7:96:59:3e:f4:ea:7c:cb:6d:99:11:ad:3c:9f:a8:
02:a7:42:50:5d:20:e1:e9:9a:f1:d9:2b:6d:f9:87:
47:a6:cf:cc:a8:2d:eb:f9:b9:01:7a:5d:5f:5d:8b:
db:d9:55:9f:27:a1:24:6b:87:7f:8f:b7:6d:22:02:
17:4a:fe:c8:d1:f7:ec:ae:bf:b6:17:26:ce:ca:f2:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:87:37:38:3E:92:6B:6A:B4:DE:C7:AA:89:72:03:B5:30:11:63:00
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/cYc3OD6Sa2q03seqiXIDtTARYwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1164::/48
Signature Algorithm: sha256WithRSAEncryption
5f:31:71:f1:36:db:5e:c3:99:11:39:08:14:4b:a7:79:2e:9f:
a3:07:10:78:9a:fa:9b:91:18:e2:38:e1:36:19:01:e4:3b:64:
1b:b0:1a:63:c2:33:95:ea:a6:b1:e9:aa:e7:4a:3a:d3:fb:65:
06:1b:f1:c5:7a:21:23:1f:9e:84:fc:d9:d3:31:8e:29:3f:5c:
80:aa:99:a4:46:21:41:89:ea:8d:74:92:72:33:9b:ff:7e:2c:
bd:e3:73:62:98:01:dd:8d:f9:f8:7a:a2:5b:b1:37:95:50:ea:
d4:0f:20:54:9b:04:80:30:bb:0f:74:4a:0e:4f:2d:9b:45:b7:
8d:17:3c:ad:42:d9:dc:eb:2b:68:4c:4d:64:76:5d:fc:82:76:
ff:4c:41:50:5a:54:b8:9e:f6:f5:e6:f8:68:b9:29:a3:52:c4:
98:2c:49:b3:04:95:47:ab:19:08:b5:dc:c5:25:84:77:ab:c2:
fc:63:06:3d:46:f2:ef:8f:e6:9f:30:30:40:a3:85:cc:95:f7:
8c:5c:5f:78:ce:3c:91:44:66:d7:d9:9c:71:e9:0e:4a:79:95:
f4:ac:19:5e:5c:b6:55:b4:00:d6:20:11:49:48:0e:13:65:80:
4f:26:65:0c:7e:29:14:85:81:e0:43:c2:05:3b:19:4b:41:75:
ed:3d:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:40 2024 by rpki-client on console-ams.rpki-client.org