Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yZSdYFJJN4XFrBNz73b5H9793tc.roa
File: yZSdYFJJN4XFrBNz73b5H9793tc.roa (raw, json)
Hash identifier: FG3JWNKDmwa6RHPcDkc8Mm45DWTBooE8KHrAPkhqy6k=
Subject key identifier: C9:94:9D:60:52:49:37:85:C5:AC:13:73:EF:76:F9:1F:DE:FD:DE:D7
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E4996EC7D5014FDA5A50C76721A67
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yZSdYFJJN4XFrBNz73b5H9793tc.roa
Signing time: Mon 02 Jan 2023 06:14:48 +0000
ROA not before: Mon 02 Jan 2023 06:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136620
IP address blocks: 2a0c:b642:1a04::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:49:96:ec:7d:50:14:fd:a5:a5:0c:76:72:1a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9949d6052493785c5ac1373ef76f91fdefdded7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:43:c3:a3:ed:b0:8e:0d:1f:7b:6c:9f:c0:
49:56:39:9b:c7:67:b6:a9:d6:03:f8:f5:bc:4b:d9:
8d:ce:2c:51:32:ab:a7:fd:ce:6c:1e:e7:04:6e:0a:
7c:c7:5a:f3:41:3b:6e:e9:78:2b:5c:89:9d:89:29:
f6:0f:c3:9f:80:f5:e4:c4:cb:ff:75:b1:a5:cd:62:
c8:e5:2e:14:cd:4e:1f:62:a4:4b:66:3d:a5:1f:dd:
70:3e:dc:80:d5:55:b7:23:50:7e:83:34:c9:a9:9f:
0d:35:9c:f4:21:3a:a8:66:51:59:01:82:2d:73:5b:
a6:45:e1:7e:07:d8:95:10:7e:84:4f:f2:4f:8a:ee:
f9:14:2a:60:2e:2d:ed:1a:2d:c9:24:d9:5a:92:6e:
ef:01:42:8f:e1:da:5d:ae:19:ea:1b:dc:33:eb:3f:
41:65:35:d7:cd:44:75:fe:78:96:99:b0:62:40:51:
2b:0f:e0:85:0a:b6:a4:5f:b9:fb:4c:f9:a4:cf:32:
86:ab:e5:53:5d:65:3d:64:ef:a1:21:52:5a:25:58:
3f:1b:38:ca:b6:26:f3:9e:7d:89:e7:77:f2:44:f8:
ad:ca:97:0c:05:70:03:e8:62:9e:87:c9:d3:24:dd:
43:54:e7:cf:25:22:fa:52:6d:17:a0:4c:ef:1a:ff:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:94:9D:60:52:49:37:85:C5:AC:13:73:EF:76:F9:1F:DE:FD:DE:D7
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yZSdYFJJN4XFrBNz73b5H9793tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a04::/48
Signature Algorithm: sha256WithRSAEncryption
69:d0:5e:3a:6a:16:04:d5:1b:8b:12:72:62:76:8f:2c:22:2b:
a2:6b:a0:df:9d:19:7f:ab:cc:c2:4a:fc:27:43:83:23:3f:c4:
2f:72:b1:42:e0:26:80:49:90:83:16:45:d2:d7:3d:45:7f:2d:
9b:7a:da:5e:ed:bb:18:e2:3a:94:c1:91:48:f0:71:97:0e:00:
5e:df:4b:6b:ec:f0:81:03:8f:7c:79:5c:bf:0d:a1:f1:ed:09:
eb:b7:00:62:42:83:59:75:6e:c9:3e:b6:f7:fc:ee:dc:03:83:
70:99:c5:9f:d3:80:3a:3d:e7:1e:ad:a0:f3:08:24:82:e8:88:
6f:62:11:62:67:db:07:8d:6d:d4:b7:22:f6:ad:cc:6c:82:a2:
d0:64:ed:8d:18:3a:19:04:e4:7f:96:ff:c5:fd:8b:e1:a1:5c:
12:13:aa:99:95:14:44:6b:1b:b4:57:c3:10:ee:3e:52:32:e6:
c2:69:70:c6:f6:97:f1:1f:05:e6:1d:5b:b4:7c:1a:5c:aa:65:
8a:b7:81:5c:45:72:4f:cd:f3:5e:a4:85:ab:c1:fa:a7:fc:4a:
96:b0:0b:47:d1:1b:f1:3d:ce:b0:2e:f9:02:0d:fc:05:09:82:
66:57:d1:b4:5c:c9:2d:3a:a4:90:fa:eb:b7:35:6c:63:24:89:
69:63:9b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org