Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jyVzaQsrz541MXLNRZIVi4qZTIo.roa
File: jyVzaQsrz541MXLNRZIVi4qZTIo.roa (raw, json)
Hash identifier: cnYy5kPnnJR6s9N0qhsRssBUYhi6SvgVkaZdqwrao0I=
Subject key identifier: 8F:25:73:69:0B:2B:CF:9E:35:31:72:CD:45:92:15:8B:8A:99:4C:8A
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCDD940F7C4722B7F49BBDF6C193FC
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jyVzaQsrz541MXLNRZIVi4qZTIo.roa
Signing time: Tue 02 Jan 2024 10:34:07 +0000
ROA not before: Tue 02 Jan 2024 10:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51570
IP address blocks: 2a02:2698:6c00::/38 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:dd:94:0f:7c:47:22:b7:f4:9b:bd:f6:c1:93:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f2573690b2bcf9e353172cd4592158b8a994c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:62:ca:99:67:52:e5:6c:6e:0e:cc:c7:06:
de:a6:e3:c1:ff:66:bd:7c:0d:bf:67:3c:e2:e5:db:
6d:c2:99:38:86:f7:bb:97:ee:f2:a4:a7:02:89:9a:
fe:65:db:93:44:53:27:d9:ec:cf:af:b3:ce:39:94:
2c:c9:06:9a:bb:66:ca:17:a6:58:10:37:4a:b0:d7:
8d:a8:04:63:5d:d3:d3:fa:eb:43:9d:df:2c:76:15:
37:8e:60:45:52:99:3a:bf:c6:f1:16:74:fb:6a:86:
b4:f4:e3:28:1e:50:97:27:ee:71:d5:91:f7:ac:73:
6d:80:b0:2c:25:1d:7c:43:c6:f2:70:ae:92:7b:6b:
5e:33:fd:38:2d:85:26:88:5b:14:69:f4:91:09:ea:
e4:3f:e4:a3:88:f3:5d:e1:5b:0f:4c:e9:da:b8:1b:
cb:33:60:e2:1d:30:92:ba:06:dc:69:e6:54:81:95:
02:a6:ab:88:29:03:04:b9:e9:b0:7e:17:24:14:50:
47:72:bf:cd:8c:a6:0f:84:26:48:25:d1:40:a7:30:
16:de:1d:5b:2e:71:6f:3a:96:8b:5e:97:fe:b3:20:
af:ab:44:99:82:0a:63:5d:5a:fd:67:ff:5f:45:5e:
b3:17:0c:90:f3:9f:bf:64:7b:05:58:83:2a:8c:99:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:73:69:0B:2B:CF:9E:35:31:72:CD:45:92:15:8B:8A:99:4C:8A
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jyVzaQsrz541MXLNRZIVi4qZTIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:6c00::/38
Signature Algorithm: sha256WithRSAEncryption
96:35:f0:74:ac:d6:b7:c0:f4:86:5c:78:dc:e9:9b:34:b7:d0:
8d:4f:fa:a5:f8:f5:aa:99:51:53:20:b2:21:2d:4f:b8:e6:1c:
e1:fa:e8:f3:82:50:41:6b:07:cb:fe:f9:b3:4d:3e:39:4b:4b:
bd:5e:62:e4:b0:ba:52:8a:cb:7f:8c:10:ad:f9:d7:e6:1e:f1:
47:8a:62:e0:da:36:5a:79:2a:c1:28:e5:df:99:2f:e8:01:c0:
3e:11:0d:08:ae:6d:1f:5a:e2:3c:53:bb:e6:92:bf:ff:32:7e:
20:f9:9f:85:3b:82:e8:31:3b:25:f8:0c:e1:93:cc:fe:9e:db:
34:82:9d:44:f2:76:af:42:c0:9b:53:b6:5c:32:ee:23:ff:98:
44:eb:18:31:15:c7:f9:46:34:ae:f4:ba:d3:4a:65:2d:42:b8:
01:4c:ab:40:2a:76:2f:77:eb:7d:a2:b9:df:15:7b:4a:ef:05:
88:8a:d3:a0:d0:0d:be:4a:4c:1d:42:ad:f2:e5:2b:f3:d9:82:
86:7c:93:76:5a:3f:65:7d:6a:6e:ad:2a:5e:7e:80:ed:9a:99:
a9:fa:c3:a2:b0:ac:b4:b0:f8:ee:5a:f3:53:bc:35:36:bc:03:
4c:d2:a5:63:f1:fb:19:1d:58:d4:0b:d5:3b:4b:e9:7d:05:df:
6e:23:65:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:26 2025 by rpki-client