Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/ylZLNUsg-BGZQxLY-VFp_FMPWA0.roa
File: ylZLNUsg-BGZQxLY-VFp_FMPWA0.roa (raw, json)
Hash identifier: SpAokMxhlQHgnMVs9O2sOyKGQyiKbRtZHtr+y3q10BE=
Subject key identifier: CA:56:4B:35:4B:20:F8:11:99:43:12:D8:F9:51:69:FC:53:0F:58:0D
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 0191EAB139D6B73DE45C1D8A3CB6971D211C
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/ylZLNUsg-BGZQxLY-VFp_FMPWA0.roa
Signing time: Fri 13 Sep 2024 09:22:48 +0000
ROA not before: Fri 13 Sep 2024 09:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 2a06:5901:8400::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 18 Sep 2024 08:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:b1:39:d6:b7:3d:e4:5c:1d:8a:3c:b6:97:1d:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Sep 13 09:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca564b354b20f811994312d8f95169fc530f580d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:db:13:d5:d9:0b:c4:47:48:65:65:fa:dd:
f7:e0:9f:32:e1:c7:2a:d2:3d:1c:29:50:ed:e3:86:
c0:db:33:1e:39:b9:af:42:d7:14:d3:55:3d:42:10:
75:63:5c:52:ff:44:ef:92:06:45:60:7d:4d:fa:9e:
b9:ca:48:37:e8:a9:ac:09:f8:c9:e3:aa:b1:a1:3c:
35:db:6a:a9:7a:0e:79:b5:ed:e9:a6:c2:82:fe:3d:
bf:18:4c:10:7b:d8:6c:58:af:d0:f0:8d:88:f7:f7:
36:f8:f4:48:6d:21:bb:50:14:e3:f0:f2:5f:94:85:
8e:de:c4:c7:13:1a:f5:7c:a9:1e:72:1b:3d:1a:6d:
34:80:49:a4:d3:0e:c1:cf:4d:72:69:68:47:51:65:
d2:10:dd:76:91:0a:06:6a:65:83:bf:52:b7:e6:b2:
c1:40:2a:58:18:97:15:22:46:be:a4:08:90:61:5f:
6e:d7:ac:08:a7:af:28:16:0c:62:0f:7d:af:84:eb:
d7:73:2c:8c:90:f1:b2:ec:ee:87:af:67:45:59:2c:
91:22:28:f6:b9:5e:c1:6f:04:3f:d8:2e:77:c8:b5:
38:bc:18:3d:49:51:ef:c8:85:3d:99:24:f7:17:78:
ca:b1:89:72:01:7c:c0:b5:e5:d8:46:17:93:1f:37:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:4B:35:4B:20:F8:11:99:43:12:D8:F9:51:69:FC:53:0F:58:0D
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/ylZLNUsg-BGZQxLY-VFp_FMPWA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5901:8400::/40
Signature Algorithm: sha256WithRSAEncryption
84:89:14:bd:42:d4:0b:2b:3f:43:71:1a:93:a9:70:83:e4:8d:
77:4f:45:66:33:f1:bf:a7:3c:12:75:3e:5d:e7:96:d2:55:25:
bb:64:e3:60:de:05:70:f2:78:3c:c3:04:a1:4d:6c:53:e9:f7:
85:7f:9d:9f:31:fb:c8:f8:18:61:78:d4:41:7f:d2:94:c1:58:
ca:22:5c:d1:9f:65:a8:b2:66:f1:6e:b1:7e:35:28:a1:3b:b9:
b4:4e:12:ec:9e:51:92:45:45:83:60:d4:a1:cd:54:e8:8e:75:
8b:c3:e1:c1:36:fb:ea:22:51:bc:05:50:99:46:80:48:ff:00:
70:ee:f5:5f:e4:35:5a:77:c3:fe:28:68:a8:06:d2:00:de:fb:
82:86:3f:f7:c3:1a:7c:47:8d:68:48:ea:99:d4:62:f5:49:30:
c1:1e:08:ff:43:35:d3:69:f6:60:b8:6d:df:9a:8c:a9:50:4d:
b3:1a:90:2c:07:0a:b0:96:6d:e1:e6:92:9c:9f:07:cc:83:5e:
92:00:55:1c:e8:cb:8c:53:68:c4:e7:2d:a4:9c:f8:f0:72:aa:
09:8c:19:af:8d:6e:42:cf:66:49:15:38:eb:1f:98:87:96:3b:
fd:2c:d8:6e:c5:92:c2:32:d9:6f:32:c8:1d:5e:72:e1:4d:18:
1d:af:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:52 2024 by rpki-client on console-fra.rpki-client.org