Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ycqXBW7qKNOSZFBVrPYENs9aAls.roa
File: ycqXBW7qKNOSZFBVrPYENs9aAls.roa (raw, json)
Hash identifier: lF0QVz+wyjbQLJdy2Ksj996eLEsvxL8z3aDYRK1g5+M=
Subject key identifier: C9:CA:97:05:6E:EA:28:D3:92:64:50:55:AC:F6:04:36:CF:5A:02:5B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01935A28E7F6CEA188E3E0170551099C3F4B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ycqXBW7qKNOSZFBVrPYENs9aAls.roa
Signing time: Sat 23 Nov 2024 17:54:10 +0000
ROA not before: Sat 23 Nov 2024 17:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:de00:f0::/44 maxlen: 48
2a06:de01:140::/44 maxlen: 48
2a06:de01:141::/48 maxlen: 48
2a06:de01:142::/48 maxlen: 48
2a06:de01:143::/48 maxlen: 48
2a06:de01:144::/48 maxlen: 48
2a06:de01:145::/48 maxlen: 48
2a06:de03:3690::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: Failed, certificate revoked on Sat 23 Nov 2024 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:28:e7:f6:ce:a1:88:e3:e0:17:05:51:09:9c:3f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 23 17:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9ca97056eea28d392645055acf60436cf5a025b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:47:3f:23:29:02:6a:c9:a4:e7:0b:5f:6b:
85:f2:7a:b4:25:93:89:5a:50:39:30:b1:0c:3a:22:
f8:2b:44:c5:7f:3c:7c:8b:a8:8d:14:24:99:a0:94:
0f:26:0b:a6:1f:f1:77:e1:c3:c6:f2:8f:b4:b5:dc:
88:f2:d5:8c:87:2c:8e:56:7a:35:06:61:a5:ad:01:
24:91:50:62:3c:c9:bf:d1:35:f0:ea:03:f1:09:91:
03:5c:25:4f:21:f1:c6:11:66:33:bb:b6:7a:83:c5:
5b:da:d6:74:39:c5:60:c0:49:32:29:76:7a:34:4e:
5f:8f:1a:59:28:05:c4:6c:e2:59:7a:c1:61:56:4b:
1c:e4:44:6d:12:ad:9b:d4:ba:7d:f3:ff:7a:ce:00:
f0:39:be:21:26:b2:3a:ea:fa:bd:e5:55:a1:08:f0:
f7:a6:fa:3c:83:cb:9b:7f:3a:61:3f:48:c6:2c:4a:
e1:cb:c7:1e:50:a4:93:d0:25:11:22:e9:eb:19:60:
6d:fa:99:ef:d7:24:3b:bf:cc:17:7f:33:9a:4c:b7:
76:1f:b8:f3:f1:c5:26:c9:b3:b4:f9:0b:1a:be:07:
1e:77:85:50:92:73:3c:09:f5:b1:76:54:e5:d8:3f:
9e:c2:7b:02:6d:b7:09:ef:64:62:ac:8e:c0:3a:56:
62:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:97:05:6E:EA:28:D3:92:64:50:55:AC:F6:04:36:CF:5A:02:5B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ycqXBW7qKNOSZFBVrPYENs9aAls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:f0::/44
2a06:de01:140::/44
2a06:de03:3690::/48
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
9e:de:da:8f:a0:45:d0:17:5f:39:ed:28:a3:32:7b:fd:f6:03:
18:5e:66:10:a9:cd:56:af:1b:51:d0:23:84:c3:bc:50:ae:d4:
0e:1d:07:e3:3f:26:73:a0:2a:44:3b:b0:96:f7:cb:01:4e:bd:
68:f0:81:3a:f3:b8:7a:5a:2c:da:8c:85:85:f6:e0:7d:c2:07:
23:47:d7:f5:01:6d:03:9b:cb:69:ea:b8:67:58:96:01:ab:9b:
ab:0e:7b:ea:c1:90:3e:ef:89:1c:25:c9:c0:3d:b4:5e:4d:5e:
4b:7f:95:6c:de:a8:a2:38:a8:3b:ef:1b:f1:0c:57:1d:c5:c1:
14:d1:4b:72:9a:dd:9c:ad:c3:22:14:6b:7a:dc:40:42:33:68:
ce:85:43:c1:0a:7f:43:f9:aa:61:c3:86:c0:51:ae:82:7b:4a:
e3:08:55:04:a0:63:3c:3c:44:09:c6:ca:81:1f:6e:c7:70:17:
62:64:a7:b1:e7:a4:46:d2:af:09:e9:19:7d:37:1c:d4:ee:f7:
0d:ba:8c:a1:22:45:00:dd:a0:77:6c:10:5b:7a:90:b9:cc:62:
3b:b9:e4:0e:5b:26:50:b6:3f:29:47:58:13:98:70:0f:1b:f6:
5d:83:e2:59:08:a7:70:8e:73:ae:67:d6:74:d4:ea:d9:b4:60:
4d:fb:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:06:55 2025 by rpki-client