Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/yihpC6DgefzNmRtA7PjEdBoKHOc.roa
File: yihpC6DgefzNmRtA7PjEdBoKHOc.roa (raw, json)
Hash identifier: gPzfimCijy3WJUpqrdkWUML6GDiB5c1iKZrvLaryEWQ=
Subject key identifier: CA:28:69:0B:A0:E0:79:FC:CD:99:1B:40:EC:F8:C4:74:1A:0A:1C:E7
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 018CC86F58299E561FE5864D8DF641A66BAE
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/yihpC6DgefzNmRtA7PjEdBoKHOc.roa
Signing time: Tue 02 Jan 2024 04:29:49 +0000
ROA not before: Tue 02 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 2a07:db86::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 21 Jun 2024 11:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:58:29:9e:56:1f:e5:86:4d:8d:f6:41:a6:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Jan 2 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca28690ba0e079fccd991b40ecf8c4741a0a1ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:a9:80:64:b5:92:f4:46:37:a1:16:cc:cf:
c6:0f:2a:30:b5:e5:fd:6c:19:31:c6:f5:94:79:b0:
f8:fe:6f:9d:c5:98:41:04:21:a2:a7:f0:28:15:34:
df:18:f4:3c:a7:3a:aa:3c:53:04:62:27:6d:e1:0f:
ce:1b:3d:80:61:97:1f:dd:4f:c4:82:37:7f:fa:00:
1f:c9:68:2e:f6:28:cc:c8:e8:9d:bb:e2:a8:f8:94:
0c:b6:a8:fc:40:3c:90:87:73:9c:42:c8:42:65:e6:
68:1e:d9:b6:0c:ca:ed:ad:ad:6a:0b:a5:a7:d5:61:
cf:64:06:4e:fc:b5:fe:1a:4c:8d:01:3e:96:d3:e4:
0b:1b:25:f2:6b:6d:0e:ce:8e:0e:ae:09:64:5e:cf:
c8:29:7b:4e:16:83:db:c0:bf:6c:16:48:3e:4f:d9:
a0:a8:88:f3:88:91:54:75:5e:82:be:eb:60:d9:8e:
ee:b6:93:58:3b:af:33:18:78:7a:e1:cf:a7:50:77:
c2:18:d5:3e:03:c2:ca:92:4d:58:be:d2:ff:56:5e:
f5:ed:88:41:a7:88:87:83:14:88:76:d3:0a:5f:e4:
b9:69:42:5f:83:04:ef:a6:81:8c:2b:dd:4e:f8:13:
54:91:47:f0:f6:b7:5b:1f:b2:aa:c9:33:1b:59:f8:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:28:69:0B:A0:E0:79:FC:CD:99:1B:40:EC:F8:C4:74:1A:0A:1C:E7
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/yihpC6DgefzNmRtA7PjEdBoKHOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:db86::/32
Signature Algorithm: sha256WithRSAEncryption
51:32:e2:41:03:10:1e:95:5d:cd:b0:77:26:9e:37:89:45:01:
e3:d7:c8:64:23:9c:d4:37:15:0b:3d:02:62:6e:be:5f:43:35:
2a:cc:16:f2:3f:ab:d3:ed:e1:66:4e:af:74:6b:f5:a9:d0:c6:
0d:39:ba:50:2b:77:20:0b:2e:4a:56:47:a2:7d:cf:7b:39:0c:
84:1d:cd:cd:62:8a:da:1d:2b:3b:86:c7:bc:43:81:56:86:c0:
fc:46:ee:24:75:a2:eb:32:2a:17:8e:1a:d9:33:dd:91:ee:ba:
ee:34:f4:3b:ba:02:2a:90:7c:20:75:a8:fc:0c:ae:ff:57:aa:
25:06:ea:bc:9d:22:11:f3:33:77:d3:44:1f:58:07:d2:46:57:
f1:0b:30:dd:6e:c4:0d:08:3f:74:5d:73:1e:da:c4:c5:db:af:
a2:03:2f:cf:c7:c3:78:5a:c9:75:8c:9f:88:67:75:10:04:3b:
43:61:d3:4e:04:28:05:a5:67:d8:bf:52:93:ce:ba:a5:b8:8f:
f5:11:b1:21:da:5d:58:66:f5:c8:d8:20:be:43:37:38:b7:38:
01:c3:2a:26:5e:68:75:be:f4:b0:21:09:a8:ce:50:3c:94:1b:
dd:0a:3f:06:22:55:b5:67:e3:c2:73:95:bc:96:f6:31:9b:66:
45:ad:2b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 13:17:26 2024 by rpki-client on console-fra.rpki-client.org