Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/20YyHnpu0KG4U58D21LSXDkYpYY.roa
File: 20YyHnpu0KG4U58D21LSXDkYpYY.roa (raw, json)
Hash identifier: 5RjZiglqNHAGm7YfV2gJCFqhi257Y7o/cReK7GAu504=
Subject key identifier: DB:46:32:1E:7A:6E:D0:A1:B8:53:9F:03:DB:52:D2:5C:39:18:A5:86
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018C81ACFA7FF89D6F99C481D608963CC9A3
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/20YyHnpu0KG4U58D21LSXDkYpYY.roa
Signing time: Tue 19 Dec 2023 10:44:06 +0000
ROA not before: Tue 19 Dec 2023 10:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215826
IP address blocks: 2a0c:9a40:9400::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:ac:fa:7f:f8:9d:6f:99:c4:81:d6:08:96:3c:c9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 19 10:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db46321e7a6ed0a1b8539f03db52d25c3918a586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:b3:aa:7f:c3:b5:80:bc:53:22:2b:bd:7c:
67:e1:07:11:5d:45:a6:17:26:eb:63:d7:f2:85:40:
79:ef:39:95:45:4e:01:94:5b:2a:e8:c1:1d:9f:fd:
81:44:ec:83:9e:4b:b2:2b:eb:3c:74:6e:8e:46:ce:
c0:75:2a:e6:08:4b:5c:54:dd:57:e0:ff:59:22:09:
17:8c:21:e1:93:b6:a8:bc:32:ce:f8:51:d1:77:f6:
80:ec:c9:d3:0a:57:93:d4:5d:45:a5:3c:c1:77:7c:
c3:d9:71:3f:28:b1:03:c8:2c:01:d1:31:25:0c:51:
89:ae:aa:3d:c3:38:d0:4e:6a:16:75:45:68:92:2a:
2a:0e:0a:87:f6:f6:47:fc:c4:30:1e:a3:70:05:a7:
e7:56:e6:1b:d8:4c:74:7a:fb:7c:c2:55:16:8e:f9:
9f:52:9b:ea:14:cf:2a:8c:2a:63:f1:9a:2d:f6:cd:
93:f3:f7:14:73:c3:c1:0e:9c:0f:f6:31:0f:3f:ae:
04:5b:97:8e:c9:44:9b:2b:f9:ab:0b:0f:c5:1b:a0:
3d:db:52:99:ba:d9:0a:42:0f:3e:8c:f1:46:bb:e0:
1a:75:38:f4:1d:d8:81:18:2e:48:fd:28:dd:6f:cc:
55:03:c6:b4:2b:e4:12:25:c6:99:33:86:e6:cb:e9:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:46:32:1E:7A:6E:D0:A1:B8:53:9F:03:DB:52:D2:5C:39:18:A5:86
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/20YyHnpu0KG4U58D21LSXDkYpYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9400::/40
Signature Algorithm: sha256WithRSAEncryption
bd:af:a3:37:19:de:78:6c:39:4c:15:9a:b7:d7:ea:28:b9:e6:
2c:9d:42:e1:b6:24:40:49:ee:a2:94:95:0d:38:ff:85:57:48:
f2:8a:20:46:fe:96:c1:b1:14:a0:8c:00:5b:ba:b7:f1:03:da:
f3:41:aa:6d:bc:43:36:70:bd:4f:f4:a4:30:99:71:64:9e:51:
fe:d0:bc:73:2c:f8:e8:33:91:fa:b0:dc:ec:72:90:af:70:71:
15:3b:c3:53:60:15:ec:34:79:0b:47:6c:d3:fb:36:e8:90:d8:
8f:4b:43:f6:83:33:f4:90:d8:2d:d4:2e:ea:d9:bd:df:14:6b:
4f:b4:4a:39:ee:7b:8c:ab:7b:cd:6c:21:57:f1:ed:7b:d6:96:
d3:50:b4:a4:44:c6:7d:ce:de:13:95:62:51:bb:80:24:51:66:
b5:64:79:71:9c:b6:4c:1a:6f:55:c4:f4:79:8e:17:d2:8a:09:
a4:8c:6c:e7:f0:db:97:76:59:9f:f7:88:5b:df:ef:41:9c:75:
19:c3:49:2a:1f:e8:a7:c6:93:d2:da:e0:5e:71:71:5c:ee:88:
ce:63:f9:4b:12:67:73:7c:e2:52:6a:d4:47:ec:cf:89:b0:c2:
73:e5:54:44:7c:7c:0c:50:7b:17:95:7e:31:c0:99:35:5a:12:
2a:d0:4b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:15 2024 by rpki-client on console-ams.rpki-client.org