Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/zYRK8C-YyYg6YMdvRBJzgKbVixE.roa
File: zYRK8C-YyYg6YMdvRBJzgKbVixE.roa (raw, json)
Hash identifier: vDDdRhIfgqSAzN0P5/YNdzFhimUeD4Bt9Vkl4AvKjeo=
Subject key identifier: CD:84:4A:F0:2F:98:C9:88:3A:60:C7:6F:44:12:73:80:A6:D5:8B:11
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0190FF08CAE62AD37C898FB7AD7B14A723AB
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/zYRK8C-YyYg6YMdvRBJzgKbVixE.roa
Signing time: Mon 29 Jul 2024 15:08:04 +0000
ROA not before: Mon 29 Jul 2024 15:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214967
IP address blocks: 2a06:b440::/29 maxlen: 32
2a0a:e2c0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 32
2a12:ec0::/29 maxlen: 32
2a12:1900::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 14 Aug 2024 20:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ff:08:ca:e6:2a:d3:7c:89:8f:b7:ad:7b:14:a7:23:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jul 29 15:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd844af02f98c9883a60c76f44127380a6d58b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:93:0d:d3:f5:5a:a5:0a:65:67:56:ef:6a:
3c:30:ab:74:58:db:0c:e5:58:f4:e6:9a:34:9b:8c:
5c:1c:0b:d4:94:ae:ed:38:ce:0e:83:97:ca:ce:40:
fb:0f:b3:b3:a0:18:f8:40:99:d5:ce:87:ba:5f:7f:
7c:c1:9b:36:0b:ec:f6:57:b2:25:73:20:8f:fb:32:
66:ee:c3:e9:dd:4d:b0:1e:65:81:cf:d9:d7:1a:19:
66:47:89:c2:cf:99:8b:24:0f:51:34:b4:d8:e2:f9:
54:78:32:ee:2f:72:65:64:16:14:a8:6e:9d:5a:ce:
44:c8:dd:87:b5:8e:75:3f:46:c0:5e:cb:e3:fb:df:
f0:4f:ba:e4:a9:02:56:15:8b:54:d9:22:12:d6:a8:
7f:7d:9d:f3:06:af:d5:d3:6b:47:be:21:de:ef:a6:
b7:23:fe:fd:69:9b:2f:75:f0:81:e1:11:c5:a0:5f:
6e:f4:25:22:e3:a6:1c:9f:76:87:98:c7:81:f4:00:
a0:cd:95:45:c7:8e:d8:ea:06:6c:b3:ce:b3:d9:9d:
be:13:1e:c2:55:0d:fc:49:7b:e4:7c:8a:23:c1:5e:
85:47:cb:49:09:13:11:07:9a:6c:20:5e:c3:a5:6c:
f2:aa:2b:55:16:72:96:f3:9d:87:6e:f6:53:59:16:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:4A:F0:2F:98:C9:88:3A:60:C7:6F:44:12:73:80:A6:D5:8B:11
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/zYRK8C-YyYg6YMdvRBJzgKbVixE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b440::/29
2a0a:e2c0::/29
2a0e:7780::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
2a12:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:e6:f9:29:f6:07:f5:94:4d:3c:6a:31:af:f1:4e:8a:27:6a:
d3:2e:34:54:93:fa:60:7e:5a:8c:5e:ae:fa:15:90:3d:69:27:
a6:0a:0e:bb:19:c7:b6:af:b0:f2:b2:e7:94:e2:f4:6f:1d:1d:
d8:53:ac:e8:d3:9e:c0:3e:d2:37:15:65:d4:7b:3f:6c:b8:fb:
aa:00:b9:32:8e:f8:07:f5:fa:24:a5:94:05:9c:72:0a:c6:c6:
18:d5:c5:6e:bf:3d:e8:c0:67:d1:b2:35:71:c8:ef:a7:87:34:
ff:90:fe:14:fd:f4:1f:4c:b4:b3:81:e6:db:7c:ae:c2:c4:5e:
0e:d8:e0:ec:c5:30:50:ed:ab:38:f1:6f:2e:66:f7:ef:ba:e7:
25:1d:1a:0b:ef:46:dd:b4:36:d5:04:24:9f:6a:0d:de:62:8b:
7c:d3:d4:e0:60:ea:44:54:52:de:65:2b:a0:ab:5c:7c:69:75:
65:11:e1:89:68:a9:02:05:7f:be:d4:22:11:1d:7c:0e:17:fe:
0f:c2:4a:bf:28:a5:14:f7:9d:10:3e:b8:d0:7d:ea:7a:7c:bb:
42:e0:e0:4b:91:fa:51:35:a6:cd:ec:b1:03:05:30:02:93:22:
30:f6:86:81:78:cc:e2:d8:c9:9d:d0:6e:0a:3c:44:58:3a:e5:
ea:11:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 00:04:00 2024 by rpki-client on console-fra.rpki-client.org