Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/yWnXYGiHN_snjsp2Zb_eu6z5_30.roa
File: yWnXYGiHN_snjsp2Zb_eu6z5_30.roa (raw, json)
Hash identifier: m4Jpv2BPdjd2485a9di138fGlJRuqshyPQM0P0gz/ok=
Subject key identifier: C9:69:D7:60:68:87:37:FB:27:8E:CA:76:65:BF:DE:BB:AC:F9:FF:7D
Certificate issuer: /CN=c3a3c2bd16f8318bdd9c3eb20a8a8a701f3e27c7
Certificate serial: 018A0097F565A50B6F0F3D2BD9E8EFD5C6E8
Authority key identifier: C3:A3:C2:BD:16:F8:31:8B:DD:9C:3E:B2:0A:8A:8A:70:1F:3E:27:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6PCvRb4MYvdnD6yCoqKcB8-J8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/yWnXYGiHN_snjsp2Zb_eu6z5_30.roa
Signing time: Wed 16 Aug 2023 23:04:33 +0000
ROA not before: Wed 16 Aug 2023 23:04:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205441
IP address blocks: 2001:67c:9d8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Dec 2023 23:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:00:97:f5:65:a5:0b:6f:0f:3d:2b:d9:e8:ef:d5:c6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a3c2bd16f8318bdd9c3eb20a8a8a701f3e27c7
Validity
Not Before: Aug 16 23:04:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c969d760688737fb278eca7665bfdebbacf9ff7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:f4:ba:4f:51:8b:17:91:0d:55:30:70:bd:
66:8e:6e:bd:98:6c:79:cd:ab:50:66:73:03:34:ee:
4b:ce:35:be:5a:a1:f8:43:76:dd:c0:e5:77:c3:22:
4d:35:74:cc:c8:e4:5a:43:b8:8d:7d:6e:f6:40:f7:
34:12:e3:a7:0e:98:0d:57:17:42:fa:f0:29:6e:d4:
c3:ea:cc:78:04:fc:5f:a5:3e:69:cc:44:7a:ba:dc:
2b:e2:9a:fc:11:ac:92:cb:62:d7:29:93:ea:1d:0b:
ef:72:4a:0e:83:46:eb:93:41:9f:a3:4c:db:8f:fe:
b4:dc:db:a3:49:15:45:1d:f2:eb:28:65:e7:11:c9:
3d:60:6e:2e:0b:d0:a4:5d:78:d5:b3:d8:e8:15:42:
1e:99:20:7e:24:3b:f9:fb:b7:56:5f:41:76:40:2f:
b4:d3:81:90:4c:45:11:55:82:5a:c8:dc:08:b0:e9:
97:38:8f:bf:ed:16:b9:17:fa:bc:e5:b4:dd:fd:b3:
6c:b5:df:00:c4:3c:12:1c:72:65:cd:d5:82:c1:26:
53:bc:8a:0b:bf:96:9f:61:61:46:70:d7:2f:56:55:
63:74:55:15:c2:75:47:60:9a:28:a1:d7:2c:02:4f:
94:ac:91:d9:91:3d:e9:e4:b3:34:de:b5:b7:d8:71:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:69:D7:60:68:87:37:FB:27:8E:CA:76:65:BF:DE:BB:AC:F9:FF:7D
X509v3 Authority Key Identifier:
keyid:C3:A3:C2:BD:16:F8:31:8B:DD:9C:3E:B2:0A:8A:8A:70:1F:3E:27:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PCvRb4MYvdnD6yCoqKcB8-J8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/yWnXYGiHN_snjsp2Zb_eu6z5_30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9d8::/48
Signature Algorithm: sha256WithRSAEncryption
81:9e:84:04:f2:18:01:24:bd:3a:f0:44:d3:4b:2d:70:9d:7e:
44:fb:85:6f:56:bc:fc:88:d6:4c:26:36:27:ce:77:c6:47:3a:
78:82:6a:0c:3b:47:29:72:53:55:0f:9e:c7:1b:a8:02:cc:a1:
ca:22:c6:c6:f7:b0:8e:e0:82:7a:d8:b1:7b:1d:20:21:a4:c0:
55:f2:59:82:0e:b0:5d:3d:bf:fc:af:54:f0:33:d8:fb:5a:8c:
20:96:5c:e8:47:f6:5d:73:66:ec:ca:7d:d6:f8:66:69:53:27:
88:18:05:89:18:af:23:15:9b:60:ef:32:2e:82:20:55:9d:08:
47:83:09:b0:28:31:54:84:50:09:38:24:a9:2b:9f:70:49:ae:
cc:68:8e:b5:64:7b:e9:14:5d:a8:e6:e1:96:21:b6:6d:8e:2a:
93:31:34:57:0a:5b:47:ff:62:f8:59:62:cc:d8:c9:35:96:45:
98:df:32:b1:2e:58:ea:3b:a5:4a:3f:ff:73:43:91:dc:db:60:
68:d1:93:41:d8:17:6d:f8:19:d5:cd:b0:d7:c6:a5:d9:a7:5c:
89:ea:8e:b7:e9:0b:0a:11:02:f2:3e:8b:e9:3d:49:2a:fb:a7:
9a:46:70:1d:39:5d:02:77:41:77:03:db:f8:82:86:87:88:35:
fc:25:0c:50
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYoAl/VlpQtvDz0r2ejv1cboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTNjMmJkMTZmODMxOGJkZDljM2ViMjBhOGE4YTcwMWYz
ZTI3YzcwHhcNMjMwODE2MjMwNDMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTY5ZDc2MDY4ODczN2ZiMjc4ZWNhNzY2NWJmZGViYmFjZjlmZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+/0uk9RixeRDVUwcL1mjm69mGx5
zatQZnMDNO5LzjW+WqH4Q3bdwOV3wyJNNXTMyORaQ7iNfW72QPc0EuOnDpgNVxdC
+vApbtTD6sx4BPxfpT5pzER6utwr4pr8EaySy2LXKZPqHQvvckoOg0brk0Gfo0zb
j/603NujSRVFHfLrKGXnEck9YG4uC9CkXXjVs9joFUIemSB+JDv5+7dWX0F2QC+0
04GQTEURVYJayNwIsOmXOI+/7Ra5F/q85bTd/bNstd8AxDwSHHJlzdWCwSZTvIoL
v5afYWFGcNcvVlVjdFUVwnVHYJooodcsAk+UrJHZkT3p5LM03rW32HHB8QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMlp12Bohzf7J47KdmW/3rus+f99MB8GA1UdIwQY
MBaAFMOjwr0W+DGL3Zw+sgqKinAfPifHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZQQ3ZSYjRNWXZkbkQ2eUNvcUtjQjgtSjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNDk0NjAtYzQyZi00MTg2LWE1NTYt
YjI0MjY3MzZjMWU1LzEveVduWFlHaUhOX3NuanNwMlpiX2V1Nno1XzMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNDk0NjAtYzQyZi00MTg2LWE1NTYtYjI0MjY3MzZjMWU1
LzEvdzZQQ3ZSYjRNWXZkbkQ2eUNvcUtjQjgtSjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAnY
MA0GCSqGSIb3DQEBCwUAA4IBAQCBnoQE8hgBJL068ETTSy1wnX5E+4VvVrz8iNZM
JjYnznfGRzp4gmoMO0cpclNVD57HG6gCzKHKIsbG97CO4IJ62LF7HSAhpMBV8lmC
DrBdPb/8r1TwM9j7WowgllzoR/Zdc2bsyn3W+GZpUyeIGAWJGK8jFZtg7zIugiBV
nQhHgwmwKDFUhFAJOCSpK59wSa7MaI61ZHvpFF2o5uGWIbZtjiqTMTRXCltH/2L4
WWLM2Mk1lkWY3zKxLljqO6VKP/9zQ5Hc22Bo0ZNB2Bdt+BnVzbDXxqXZp1yJ6o63
6QsKEQLyPovpPUkq+6eaRnAdOV0Cd0F3A9v4goaHiDX8JQxQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:10 2024 by rpki-client on console-fra.rpki-client.org