Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ynn5kqq-4gfhUlNd--6YZpWvTDc.roa
File: ynn5kqq-4gfhUlNd--6YZpWvTDc.roa (raw, json)
Hash identifier: oT/AAcPsfdyVM99D/YlbS+xqVakCtDAFDDw4QpclnBM=
Subject key identifier: CA:79:F9:92:AA:BE:E2:07:E1:52:53:5D:FB:EE:98:66:95:AF:4C:37
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 01942445945674AE3F4F68403575BD3ED591
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ynn5kqq-4gfhUlNd--6YZpWvTDc.roa
Signing time: Wed 01 Jan 2025 23:48:47 +0000
ROA not before: Wed 01 Jan 2025 23:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211522
IP address blocks: 2a05:4145:1::/48 maxlen: 48
2a11:e104::/32 maxlen: 48
2a11:e104:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Jan 2025 17:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:94:56:74:ae:3f:4f:68:40:35:75:bd:3e:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca79f992aabee207e152535dfbee986695af4c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:77:5e:99:b3:4e:30:72:33:29:6a:1f:2a:
23:03:bd:85:a6:09:a6:5e:3c:73:84:66:3d:93:18:
42:35:e9:53:9f:01:45:4d:ae:fe:c0:0a:16:78:19:
4b:85:65:12:bf:e7:f1:a4:49:3e:4a:75:2f:d8:c8:
2a:ff:3d:e0:9f:aa:61:c3:06:00:d7:aa:9d:9a:2a:
88:25:cd:36:20:9f:25:83:8a:81:46:27:07:2b:dd:
75:44:79:b3:75:d7:9a:92:9c:00:b9:33:10:d3:3d:
6a:0f:e0:0b:63:01:96:a0:bf:c6:5c:fb:ae:23:ed:
1f:34:f5:4b:bd:a7:b7:8f:44:67:61:62:0a:e3:58:
0e:14:36:cb:63:eb:f4:c5:44:f6:02:e2:d8:df:3d:
9e:9e:69:8a:18:db:84:2a:a5:b7:14:23:d8:19:85:
73:91:80:95:93:0f:3c:35:9b:b2:45:4f:67:9d:3f:
bc:59:81:30:0c:d7:eb:a3:7d:87:f4:d6:ea:95:5b:
f7:75:4f:6f:e6:db:73:3d:19:06:ca:d3:1b:2d:51:
24:9c:ce:cb:49:d7:6a:f5:b3:97:06:8f:a9:f7:15:
c5:29:a3:5f:c8:b8:77:48:86:2c:ac:18:7a:1e:34:
e8:64:f3:43:76:48:79:da:05:3a:a8:61:c3:a1:67:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:F9:92:AA:BE:E2:07:E1:52:53:5D:FB:EE:98:66:95:AF:4C:37
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ynn5kqq-4gfhUlNd--6YZpWvTDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4145:1::/48
2a11:e104::/32
Signature Algorithm: sha256WithRSAEncryption
26:ba:eb:4a:f5:16:e2:6d:48:5f:c3:21:97:d5:6d:1f:47:41:
18:4d:b3:c5:c3:eb:0e:c9:c3:af:92:77:4a:90:38:f8:1e:e8:
bd:e1:41:52:8f:1a:83:a8:f9:3c:7b:b4:cb:b2:3e:37:c1:3d:
94:9a:e1:02:92:53:f2:90:07:ac:a9:6c:68:d1:81:11:0f:b4:
0c:27:10:63:1c:aa:c5:05:d4:ac:ec:aa:2a:22:ff:31:d8:81:
84:8a:06:12:9b:ab:25:f4:8b:3a:81:d1:07:68:e2:64:00:73:
b3:3c:bd:15:3b:b8:86:cc:bf:c8:e0:92:46:3e:79:7f:19:34:
d9:21:b3:68:00:32:1c:ac:f7:a3:8d:c4:dd:f7:b1:54:9d:75:
b3:4f:c5:c2:84:fe:7b:ef:33:b7:11:6e:6a:f6:74:d4:ee:1d:
5e:89:c3:ce:e2:36:a7:6a:7a:3f:c2:a2:0b:e3:9f:2b:68:d5:
eb:70:db:5c:49:e2:28:c6:30:27:63:c9:0c:97:c0:c7:69:15:
1d:f8:4e:7b:cd:24:1c:d2:ac:e4:a9:1e:32:42:16:00:c6:9d:
f7:1b:d6:b8:e6:e7:06:2d:56:72:73:58:18:c9:a4:3d:bd:cc:
34:4f:e1:72:51:66:06:e2:a9:04:46:c3:be:eb:b1:d0:df:44:
4b:79:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:26 2025 by rpki-client