Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/ymYLq6XYAcgX6lVIcy6xeM04wZ0.roa
File: ymYLq6XYAcgX6lVIcy6xeM04wZ0.roa (raw, json)
Hash identifier: 94PKzGI7+Hy40A0hqP2/MIxaDtdjnv/Zxyw9xR6HjpM=
Subject key identifier: CA:66:0B:AB:A5:D8:01:C8:17:EA:55:48:73:2E:B1:78:CD:38:C1:9D
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 018CC94D9A5F847401D92B4A50CDB84CD6AB
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/ymYLq6XYAcgX6lVIcy6xeM04wZ0.roa
Signing time: Tue 02 Jan 2024 08:32:35 +0000
ROA not before: Tue 02 Jan 2024 08:32:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49101
IP address blocks: 46.36.32.0/19 maxlen: 24
2a02:25b0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:9a:5f:84:74:01:d9:2b:4a:50:cd:b8:4c:d6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jan 2 08:32:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca660baba5d801c817ea5548732eb178cd38c19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:4d:4c:29:1b:e1:a5:34:0d:7b:58:7c:fc:
94:b8:81:94:f8:9c:25:a6:19:39:54:58:be:70:e2:
0d:35:17:fd:c5:84:83:ce:9b:c1:03:5a:bb:24:8b:
61:17:17:db:6f:89:d5:98:8c:1f:89:da:e4:40:d6:
0e:aa:e9:97:b8:34:ed:49:22:86:f1:34:d2:13:ed:
1e:1b:46:71:b3:34:60:ae:45:55:dc:f4:9b:f2:e0:
1d:55:5b:a2:b6:da:c6:18:ad:85:d2:62:8a:0a:8e:
2f:2c:54:ab:d4:3d:33:bd:f5:f8:13:53:81:1a:0d:
20:4a:8f:54:9f:4c:de:02:a9:34:50:5f:37:7f:69:
7a:70:56:2a:a4:6a:4e:d4:f2:66:95:14:bc:7c:f9:
b7:a3:d4:64:d5:d2:06:da:f7:87:f4:86:29:80:fe:
be:5f:67:1c:35:74:80:2a:1c:43:93:c2:df:6f:0f:
60:e8:59:ff:e1:ad:69:36:e6:79:57:c2:ad:10:e1:
c8:89:27:a9:4d:63:76:c2:74:25:15:2f:d4:4c:9c:
e0:de:d7:2d:7a:f8:94:cd:4b:e1:06:14:23:ce:5f:
7f:31:b9:c4:2c:4a:bb:ba:08:36:ec:a7:48:17:1f:
c7:30:41:53:6d:c9:8e:e5:8e:17:03:0c:9a:21:e7:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:66:0B:AB:A5:D8:01:C8:17:EA:55:48:73:2E:B1:78:CD:38:C1:9D
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/ymYLq6XYAcgX6lVIcy6xeM04wZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.32.0/19
IPv6:
2a02:25b0::/32
Signature Algorithm: sha256WithRSAEncryption
55:93:68:47:96:13:e4:c5:b5:81:95:83:5e:42:6d:32:5d:6a:
b7:8d:ef:13:ed:ae:a5:50:cb:87:72:3c:4f:49:13:30:15:65:
f8:a9:ad:55:57:bd:64:7a:8c:15:8b:08:34:8a:1f:0b:45:b6:
6c:cb:06:17:f5:64:a3:73:78:a7:2c:1f:1d:1c:0b:3b:c1:7a:
06:89:89:d5:fb:76:f7:67:bb:9e:ec:e1:c1:67:59:0e:59:1a:
86:a1:96:cc:a9:ef:e9:5b:a9:69:ea:eb:c0:8f:78:3b:4a:9b:
3b:db:4c:7d:9c:ac:a1:e5:d5:05:ff:7d:0f:89:47:78:c6:a0:
78:22:27:f9:d3:be:6c:51:6e:bc:86:e7:96:04:4a:1c:30:a1:
4c:f8:3b:f1:b0:f1:15:18:11:bd:de:95:68:8b:28:3f:46:57:
c1:67:a9:c9:3f:7f:02:b2:79:86:e8:63:0a:cc:ea:d5:e7:ed:
74:53:85:33:41:36:bf:e9:4b:cd:37:3b:8a:f5:b4:59:10:8e:
f4:00:f1:69:04:9f:60:0a:c3:93:7d:19:90:84:e7:ce:7a:4c:
93:41:09:00:61:bb:9d:b4:3a:01:de:c8:fc:2a:21:35:e3:1b:
81:42:f7:c7:9b:fe:b8:22:6c:54:92:08:9e:ad:83:25:1c:ef:
dd:25:0d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:20 2025 by rpki-client