Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ya5EBmqS0IfPRZb2tTUSseOx1Ao.roa
File: ya5EBmqS0IfPRZb2tTUSseOx1Ao.roa (raw, json)
Hash identifier: FJIS1vYcFgAQob/7awTdyCTLd4a3YS/Z1dIIOC5j39A=
Subject key identifier: C9:AE:44:06:6A:92:D0:87:CF:45:96:F6:B5:35:12:B1:E3:B1:D4:0A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01856D8ADA06314A8FF30AA4D7C29CF4FB13
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ya5EBmqS0IfPRZb2tTUSseOx1Ao.roa
Signing time: Sun 01 Jan 2023 13:34:54 +0000
ROA not before: Sun 01 Jan 2023 13:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 109.111.56.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:da:06:31:4a:8f:f3:0a:a4:d7:c2:9c:f4:fb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 13:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9ae44066a92d087cf4596f6b53512b1e3b1d40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:0d:6d:72:b2:af:23:15:20:e0:3a:32:b3:
f3:8e:95:fd:d4:57:b2:38:33:d8:af:2c:c0:41:4d:
1c:e1:f1:a1:ed:a5:ef:99:ad:3c:00:52:f2:0d:67:
ce:d5:ab:f4:99:0d:8d:05:3d:e7:f3:fb:3f:70:76:
73:57:da:7a:67:6c:ec:14:a9:e4:85:f4:91:c5:1c:
94:c5:93:f5:35:d0:e4:61:75:ca:c1:20:dd:72:8b:
54:13:12:55:b3:61:1e:fc:2b:b8:7e:4d:1f:52:cc:
ed:01:49:fc:53:48:8f:66:51:d3:ac:e5:94:4a:d7:
d5:1c:6b:60:3d:dd:61:40:9e:ff:f9:06:b8:9a:cc:
b6:4f:d4:0e:6a:01:83:6f:8c:a6:92:5d:f4:be:02:
85:b9:0a:f0:f3:e2:ae:43:37:a3:ce:e8:27:22:e0:
50:73:ca:4c:e5:79:b5:66:27:61:f9:b6:d9:3e:2c:
2b:fa:42:a8:9d:dc:02:46:9f:4f:b0:ea:a1:e0:26:
95:ec:e1:c0:f8:0d:6e:92:82:00:b7:19:97:b0:5c:
73:ba:bd:cd:0c:19:37:83:b2:29:00:0a:af:c7:ee:
7f:d2:e3:eb:18:db:50:cd:4b:62:6e:93:13:fd:3b:
41:64:2d:4a:fe:51:23:f1:53:58:01:c6:6e:83:38:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:44:06:6A:92:D0:87:CF:45:96:F6:B5:35:12:B1:E3:B1:D4:0A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ya5EBmqS0IfPRZb2tTUSseOx1Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:63:63:2c:f3:c2:06:36:5b:75:e7:20:35:09:58:b6:8b:46:
ad:c2:c9:3d:9b:35:fc:85:84:ae:88:75:fb:ac:4b:b7:b7:8c:
0c:06:e8:32:04:c7:42:b3:7a:ff:18:05:85:81:26:e8:35:e6:
80:2d:d6:e8:cc:a7:0d:14:7b:80:9b:d7:3c:93:92:b8:97:1b:
9d:95:df:86:13:9c:bc:15:6f:bd:be:0b:62:92:b9:d8:2f:c2:
f5:c9:44:08:a5:0d:a0:54:02:e6:f3:3c:f3:85:64:f1:75:e9:
3a:68:97:e6:3e:06:34:37:18:18:d3:a9:71:83:91:02:5e:71:
7c:dd:97:7b:1b:a7:b2:ed:3b:80:b4:30:a6:83:86:3d:50:6f:
e8:78:49:59:ad:f2:d7:ee:fa:35:9a:b1:27:9a:c7:b7:c2:e3:
95:65:a3:c6:9c:bc:a1:b7:27:ba:85:0d:7e:f6:0d:60:6b:95:
63:9b:b8:af:0b:7c:d2:38:3e:43:ab:5d:b5:0e:b6:84:8e:fc:
0b:43:b3:5e:f6:f7:0c:ff:a3:fa:13:ef:17:a0:11:5a:d8:b7:
80:a2:b8:d0:5b:ee:24:2f:4a:0e:6e:75:0f:3f:62:c2:37:db:
9d:60:0c:f7:0f:fa:35:0e:46:64:96:8b:2a:9b:14:f7:2d:ed:
08:fa:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 09:06:17 2023 by rpki-client on console-ams.rpki-client.org