Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/YwYz8xx5rhkCAjwaKcQ2WTU0134.roa
File: YwYz8xx5rhkCAjwaKcQ2WTU0134.roa (raw, json)
Hash identifier: FlC+U3l5bpBXcYsfwIh5SPxHrGGvoBJG2pQmYsbryJk=
Subject key identifier: 63:06:33:F3:1C:79:AE:19:02:02:3C:1A:29:C4:36:59:35:34:D7:7E
Certificate issuer: /CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Certificate serial: 018BA91612E9FB99CF9AA01D6E93C03E9C61
Authority key identifier: 55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/YwYz8xx5rhkCAjwaKcQ2WTU0134.roa
Signing time: Tue 07 Nov 2023 09:21:17 +0000
ROA not before: Tue 07 Nov 2023 09:21:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a02:56a::/32 maxlen: 32
2a02:56d::/32 maxlen: 32
2a02:569::/32 maxlen: 32
2a02:56e::/32 maxlen: 32
2a02:56c::/32 maxlen: 32
2a02:56b::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:16:12:e9:fb:99:cf:9a:a0:1d:6e:93:c0:3e:9c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Validity
Not Before: Nov 7 09:21:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=630633f31c79ae1902023c1a29c436593534d77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:be:3d:3c:35:6d:2b:5d:16:19:db:27:93:
c6:7b:ee:77:55:7a:4c:f2:79:0d:b3:32:85:54:55:
d9:c0:da:03:02:3a:81:f6:4a:6d:c3:ff:93:66:db:
81:96:97:a5:b1:83:82:72:18:69:2c:96:4c:ec:a0:
8b:c4:1d:89:9f:c3:95:e7:2c:3f:7e:49:e6:56:28:
7d:0c:dd:1c:5f:65:cc:6a:5b:ce:2d:37:64:94:be:
c8:49:6e:cd:bc:a6:cb:ae:d7:bf:ab:61:c7:1d:27:
5d:4d:31:c2:ab:de:9a:6b:b9:20:e7:f7:09:5d:49:
67:00:3b:e0:1c:0c:57:97:40:a1:31:29:83:f4:ab:
c8:01:70:f5:75:be:67:5b:50:cf:ad:3f:32:3e:87:
05:de:d2:e2:86:eb:b7:20:22:8d:b8:1c:ef:ea:bb:
bb:a8:6a:49:33:8a:e0:ac:fa:f8:4d:4a:da:45:0f:
37:a5:07:8c:83:8c:b7:b1:4e:40:9b:0c:ce:ec:6b:
13:95:33:b8:b7:27:02:e2:0c:1a:48:82:f5:b3:e1:
a5:f4:f1:bb:86:77:7e:97:0e:e9:3d:2c:ad:8f:31:
42:cb:36:12:c4:97:6b:67:7a:c3:81:0a:68:9c:cb:
8a:f3:13:27:c8:d1:5c:a2:5a:9a:03:aa:3c:e4:a2:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:33:F3:1C:79:AE:19:02:02:3C:1A:29:C4:36:59:35:34:D7:7E
X509v3 Authority Key Identifier:
keyid:55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/YwYz8xx5rhkCAjwaKcQ2WTU0134.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:569::-2a02:56e:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
99:2a:e8:3f:f0:75:52:c8:b1:85:45:c1:f0:5a:62:3c:cd:1e:
81:99:3e:64:d7:c8:8c:4b:bb:43:8a:1b:1e:96:83:ba:1a:b2:
03:b2:44:8c:c8:db:4d:27:5c:03:9f:38:33:00:dc:c0:cf:49:
a7:eb:21:e8:3d:dd:a1:c0:73:e5:02:60:82:57:6c:4a:49:b0:
e8:c2:9f:d0:91:04:f8:8f:26:a0:7c:09:20:60:61:91:ab:69:
3f:95:0b:b5:dc:9d:3b:a8:8b:07:30:99:14:1f:14:ca:27:f8:
88:2c:09:bb:07:9f:a1:ae:04:5c:b9:0b:92:c3:a0:ce:d4:eb:
26:56:67:f6:87:36:35:d1:75:61:fc:73:de:b0:4b:65:14:a7:
e9:cf:39:27:64:0f:69:c1:94:c6:79:a1:f2:2a:fd:cd:1a:9d:
86:99:d9:28:d7:7c:70:8d:9b:7f:47:d4:5a:60:fd:df:69:f7:
a3:24:d4:e4:72:a7:58:a1:6e:8d:50:69:b9:47:5c:69:28:17:
27:35:be:ec:20:c9:87:9c:34:30:61:fd:8a:ab:f4:3d:4f:e7:
19:6d:b7:2c:b4:52:87:99:ff:c1:46:b2:44:40:2c:15:3f:8f:
94:49:3d:cb:57:b1:fc:cf:49:b3:87:46:da:44:ee:71:a1:d2:
c4:9f:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:00 2024 by rpki-client on console-ams.rpki-client.org