Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/FYu4ueJiQTZDB81ps99Ev7KG_UY.roa
File: FYu4ueJiQTZDB81ps99Ev7KG_UY.roa (raw, json)
Hash identifier: el2uTVO5F5amUeXFnlI50392WxPmcCTLE7J7WLkJRAc=
Subject key identifier: 15:8B:B8:B9:E2:62:41:36:43:07:CD:69:B3:DF:44:BF:B2:86:FD:46
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018D9966EB7E496C4FF23CBC4DE1D31CFA7E
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/FYu4ueJiQTZDB81ps99Ev7KG_UY.roa
Signing time: Sun 11 Feb 2024 18:21:15 +0000
ROA not before: Sun 11 Feb 2024 18:21:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53667
IP address blocks: 2a11:f140::/29 maxlen: 32
2a12:ec0::/29 maxlen: 36
2a12:1900::/29 maxlen: 36
Validation: Failed, certificate revoked on Sat 13 Apr 2024 18:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:99:66:eb:7e:49:6c:4f:f2:3c:bc:4d:e1:d3:1c:fa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Feb 11 18:21:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=158bb8b9e26241364307cd69b3df44bfb286fd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:af:0a:45:7c:0b:e5:63:5a:6c:72:3b:41:
7d:02:b8:3e:df:f5:4c:17:9c:fe:a5:42:66:19:a6:
1d:e5:bd:32:cf:14:58:5c:76:68:35:1b:d5:53:68:
a4:c2:6f:24:5a:95:70:18:40:c3:ef:f5:ea:17:8b:
32:92:b1:bf:03:c9:8c:36:14:33:28:8d:32:a0:e2:
aa:61:74:ce:a4:d4:43:1e:f7:99:8a:ce:b4:6e:aa:
fa:fb:3f:7f:bc:14:2e:62:c2:82:4e:90:7a:01:62:
dc:5c:39:3c:5f:32:1b:1b:65:e0:93:da:ba:21:96:
29:0c:f7:bb:b9:2a:79:c4:2a:06:e3:32:b4:78:7c:
15:8d:ed:1d:22:c7:46:80:31:fc:c6:6c:4f:23:76:
e7:dc:20:cb:ea:44:43:ef:9c:09:f7:0a:e9:93:ee:
85:6f:47:02:e1:d6:83:a7:c5:82:8f:8a:af:49:44:
5f:4c:a2:09:da:d3:06:18:4f:62:34:d5:4a:88:7a:
40:43:53:80:23:fb:f7:a8:54:d7:2d:fe:20:dc:bd:
f8:c2:2a:31:88:14:d3:47:59:53:f8:17:3a:7b:a2:
b9:e5:c9:ef:6d:ce:06:20:83:20:78:52:19:6f:c6:
e5:72:91:6f:24:ad:da:d9:27:54:94:fd:ca:06:1a:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8B:B8:B9:E2:62:41:36:43:07:CD:69:B3:DF:44:BF:B2:86:FD:46
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/FYu4ueJiQTZDB81ps99Ev7KG_UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f140::/29
2a12:ec0::/29
2a12:1900::/29
Signature Algorithm: sha256WithRSAEncryption
1d:76:87:e5:76:97:21:a6:7f:47:fd:64:68:f4:3d:9c:44:da:
26:30:49:ef:8e:1f:f8:5e:9e:9b:53:b8:df:a5:43:a7:12:ab:
0d:b8:6b:3e:9d:98:fe:2c:b1:c7:d9:b2:ad:7b:64:cd:a2:55:
b9:ba:75:74:e3:55:7c:fb:6a:09:12:a4:af:7a:d2:d3:8e:72:
10:d1:70:a3:bf:0d:d3:d8:0e:37:54:c7:3a:d7:3f:35:f6:ce:
dd:c7:af:97:f8:30:4f:2e:de:67:92:50:f8:26:6f:5a:4f:a1:
e2:63:26:69:8c:30:ad:82:19:23:25:be:af:7b:7d:56:45:19:
2c:13:59:09:37:0f:39:97:93:b2:b3:b3:e7:18:ca:fd:f1:21:
7e:4d:2a:08:e2:94:55:b5:6a:24:0f:9d:9a:1c:07:89:81:9d:
c8:4b:30:ae:68:1f:e4:d7:0b:92:c8:aa:34:9b:b1:55:20:24:
9c:96:78:9a:86:8c:84:46:e4:24:65:e7:7b:16:dc:30:63:74:
98:07:cc:be:db:1b:60:ba:4a:ba:27:14:17:5f:33:89:e0:81:
57:7a:58:1f:5b:48:c2:75:dc:d0:0e:15:9b:43:9a:c9:15:38:
f4:ac:b9:ed:7b:b9:ff:e8:17:32:6d:81:22:37:cc:cd:72:9a:
1e:5f:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:37 2024 by rpki-client on console-fra.rpki-client.org