Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/yZdYOxGPuQNdaZjVcTneVrFo548.roa
File: yZdYOxGPuQNdaZjVcTneVrFo548.roa (raw, json)
Hash identifier: lp3/xKtrwwdkRFuquer8XzSdTdbZqPAkGjD4OQLORa0=
Subject key identifier: C9:97:58:3B:11:8F:B9:03:5D:69:98:D5:71:39:DE:56:B1:68:E7:8F
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018E52EA85604219B68D6DE42AD161CB8393
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/yZdYOxGPuQNdaZjVcTneVrFo548.roa
Signing time: Mon 18 Mar 2024 18:54:45 +0000
ROA not before: Mon 18 Mar 2024 18:54:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215330
IP address blocks: 2a05:4140:49::/48 maxlen: 48
2a05:4140:2500::/40 maxlen: 48
2a05:4140:2600::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Apr 2024 22:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:52:ea:85:60:42:19:b6:8d:6d:e4:2a:d1:61:cb:83:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Mar 18 18:54:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c997583b118fb9035d6998d57139de56b168e78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:e6:c2:66:89:b6:7c:61:4e:3a:c7:27:f9:
0a:0e:a5:9b:f8:04:15:8c:05:1f:92:db:7d:06:8f:
63:15:2a:49:f0:0b:73:e4:a5:c5:6a:b2:5d:69:72:
c9:f2:ad:60:a2:fc:26:69:9c:34:04:85:1b:2b:95:
94:d2:40:25:94:9f:da:99:d9:66:4c:db:fd:05:af:
b6:a3:4f:39:a4:f3:63:1d:0a:12:80:c9:5a:fe:50:
7a:1c:19:3c:a9:dd:1a:db:25:96:2b:1d:00:e5:0e:
4e:a7:92:92:64:c2:82:3f:28:4c:06:73:86:35:2e:
c8:9c:2e:52:58:64:9a:09:da:bf:27:64:f1:4d:d5:
52:2a:94:36:35:34:89:65:c4:bc:b4:5e:68:e8:36:
7d:0c:8e:17:81:13:c0:d4:37:c9:2f:8a:ad:c5:04:
30:f4:35:fd:71:62:a5:67:c7:0e:d9:c8:d0:d5:0b:
1f:fe:2e:de:80:46:9f:5c:ff:7e:35:18:eb:24:d6:
31:85:67:7d:a3:0f:b8:41:be:6b:95:68:0f:62:d3:
cb:0d:f5:27:45:20:83:66:32:fc:78:5c:bf:c0:6e:
f2:c5:32:d6:10:40:8c:b0:cc:73:1a:02:36:e3:1c:
74:e0:7a:9c:92:46:86:df:19:53:2b:52:2b:83:a7:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:58:3B:11:8F:B9:03:5D:69:98:D5:71:39:DE:56:B1:68:E7:8F
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/yZdYOxGPuQNdaZjVcTneVrFo548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:49::/48
2a05:4140:2500::-2a05:4140:26ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:77:ac:7b:27:1c:aa:ae:9a:07:ac:c3:e1:2f:0d:6b:b7:a3:
be:f1:1c:23:53:28:98:53:20:57:4f:35:88:35:c1:42:eb:b4:
5e:0b:68:24:36:f0:11:0d:c4:93:a2:e3:fb:9c:59:84:10:37:
7b:20:99:dd:cf:ba:93:4e:3f:90:b4:17:43:0d:6a:a1:04:35:
9e:bb:31:0b:44:12:d3:9f:53:fe:5d:3c:1e:97:16:ba:ce:6a:
db:68:98:56:11:eb:72:e6:97:7c:38:d3:3f:a6:ce:2b:40:4b:
ec:8b:d7:22:66:13:84:b0:ac:31:29:fb:40:d1:ed:c6:df:08:
48:9d:11:b8:a7:95:24:6e:17:df:96:2b:2e:59:63:4e:4c:51:
dc:de:9b:b9:4e:f6:b2:8b:e3:7e:93:02:04:98:c9:66:af:f2:
fd:de:6e:a7:e3:a4:d4:23:c0:98:17:b9:b8:e1:0d:a0:87:0c:
a6:68:b7:ef:af:4b:f7:78:3c:5f:f5:2e:9e:2e:fb:a1:b4:04:
5a:0c:e3:2c:a4:8a:6d:c4:05:34:41:90:1d:92:51:1c:51:6a:
5c:ce:c4:2b:80:5e:5c:12:f8:a4:66:12:d3:92:15:56:c5:b7:
d0:8f:8a:25:e8:e6:92:41:10:f4:23:af:9b:9d:f1:db:7f:ea:
71:66:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:09:53 2024 by rpki-client on console-ams.rpki-client.org