Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YdV_8D1N3mX6NiUHi14p6_gt8fM.roa
File: YdV_8D1N3mX6NiUHi14p6_gt8fM.roa (raw, json)
Hash identifier: 7JJmoDA6AhOzCCYnmIZoEmIK2mYTqZYQFqINhKrrY/w=
Subject key identifier: 61:D5:7F:F0:3D:4D:DE:65:FA:36:25:07:8B:5E:29:EB:F8:2D:F1:F3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E822E679E560EA8EDCA3724D25EF16
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YdV_8D1N3mX6NiUHi14p6_gt8fM.roa
Signing time: Mon 02 Jan 2023 05:15:39 +0000
ROA not before: Mon 02 Jan 2023 05:15:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213064
IP address blocks: 2a0e:b107:b50::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:22:e6:79:e5:60:ea:8e:dc:a3:72:4d:25:ef:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61d57ff03d4dde65fa3625078b5e29ebf82df1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:33:89:1f:ac:67:e6:87:7b:e3:0b:3b:34:
6f:4b:39:2a:e5:57:50:92:3d:40:fc:4a:94:fe:78:
5d:94:c2:f3:4d:af:fd:a8:9c:6b:23:fb:70:5d:cd:
f5:de:33:9b:51:be:c4:74:da:b3:89:6e:7c:5a:3d:
5a:97:e6:22:3d:c6:b7:c4:1e:cb:b9:70:82:6d:df:
e2:52:38:08:eb:48:9f:e6:f8:32:f1:73:6e:cb:ad:
39:01:0d:6e:19:e9:33:a0:a9:bd:49:38:09:9b:ca:
d8:cb:99:5f:df:26:78:51:1e:38:89:91:1b:93:27:
f3:8f:ec:69:e5:48:51:8c:0b:29:d0:7c:8c:73:97:
2c:2c:d4:a1:c9:5e:74:ca:17:14:d8:59:e1:7a:76:
36:95:2c:9b:d6:ba:d8:46:d6:da:ea:a9:ac:60:53:
5d:cc:07:62:48:62:60:d1:06:f9:c2:b1:6d:44:b0:
f2:75:2f:79:ae:83:21:1a:f5:68:f5:95:7e:12:62:
c2:8e:12:b5:53:38:02:92:c7:0f:a6:15:c9:1f:7f:
c2:73:a8:30:e5:ab:a4:48:da:f5:2a:8b:e8:27:bb:
08:46:b5:a2:e6:ea:08:0d:db:ec:66:60:55:11:c0:
a5:9c:06:69:0d:d5:66:0b:81:1e:2b:98:af:bc:35:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:7F:F0:3D:4D:DE:65:FA:36:25:07:8B:5E:29:EB:F8:2D:F1:F3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YdV_8D1N3mX6NiUHi14p6_gt8fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:b50::/44
Signature Algorithm: sha256WithRSAEncryption
75:13:81:a2:9b:f0:4e:74:82:ee:ff:80:24:b9:35:2e:73:3a:
ed:8f:bc:47:8a:3c:2b:a9:e1:63:98:22:f7:ad:fe:e5:27:76:
5d:bc:39:f7:54:17:37:04:cd:3f:55:8e:da:c5:f0:d5:3c:7f:
1e:2c:22:f3:6b:a5:f3:ed:68:dc:f0:2a:92:04:9a:85:1a:dc:
a8:d7:f3:25:c7:b9:55:ef:11:d2:eb:74:17:35:ea:d0:48:9e:
6a:38:28:04:a8:77:70:4a:56:01:97:0a:e7:73:1e:72:06:1c:
69:81:7f:9f:96:5b:25:b7:e0:1a:eb:0b:e4:af:36:d9:7b:94:
03:a0:bd:d0:5d:f1:a9:07:7a:b2:43:96:83:ff:63:f1:ad:ec:
64:16:75:f6:d8:20:6b:6e:a8:13:b4:71:3b:28:24:10:83:08:
fe:c7:fa:c2:30:d1:5a:21:94:55:95:54:8a:1c:df:ff:a8:02:
3b:cf:95:8e:35:3c:29:8f:d6:a1:6d:be:fa:2d:8d:12:8e:1c:
7d:87:71:70:c3:09:c2:38:50:cf:0e:0a:a3:65:5c:51:c9:94:
0a:1b:3c:34:fc:a7:93:bc:92:a0:d7:ee:7e:ad:6d:87:fa:95:
2f:38:88:79:b8:78:31:0d:38:ab:c5:bc:06:7e:66:30:f6:c2:
a9:3a:a1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:05 2024 by rpki-client on console-ams.rpki-client.org