Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/YG4KR8AlFMZRv3VNuZ_0sA1CFDU.roa
File: YG4KR8AlFMZRv3VNuZ_0sA1CFDU.roa (raw, json)
Hash identifier: CBOQjeIRjz5eK1JrPIGxiNa6MjC8fF4zhMDG6CHncLY=
Subject key identifier: 60:6E:0A:47:C0:25:14:C6:51:BF:75:4D:B9:9F:F4:B0:0D:42:14:35
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 01916AC9E8414DBC2A64398FF5ACD29286F5
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/YG4KR8AlFMZRv3VNuZ_0sA1CFDU.roa
Signing time: Mon 19 Aug 2024 13:18:22 +0000
ROA not before: Mon 19 Aug 2024 13:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214359
IP address blocks: 2001:3680::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 07 Nov 2024 07:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:c9:e8:41:4d:bc:2a:64:39:8f:f5:ac:d2:92:86:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Aug 19 13:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=606e0a47c02514c651bf754db99ff4b00d421435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:1e:4d:77:63:59:f3:e1:85:59:c1:ee:d9:
0b:f2:94:d8:a7:af:d6:c2:e2:17:87:f8:34:cb:0f:
d3:0a:a3:a6:06:dc:88:8d:aa:c0:25:b4:63:6c:69:
92:ea:ff:cf:f5:74:b2:dd:22:45:4d:57:6d:78:a4:
c6:0a:e6:3e:05:a1:11:05:d2:62:fb:25:46:fe:68:
05:8c:a1:cf:71:f0:76:76:18:3d:64:27:de:cd:79:
4f:bd:55:4c:88:15:e5:2e:83:1b:83:d5:9a:9e:13:
11:52:db:e5:49:20:05:11:a1:83:88:0c:b8:d1:ae:
d6:33:b9:06:dc:44:3c:01:17:d5:ab:62:f7:0f:bc:
9b:b0:7e:dd:fc:75:88:93:ec:81:4b:5b:b4:36:7c:
a2:a2:b3:76:e1:01:8e:de:07:b2:58:c7:d7:57:07:
4e:00:66:78:c6:7c:db:9f:a9:3e:8e:78:3d:9e:61:
97:97:00:cf:cc:c9:75:9c:6d:9b:a8:df:3e:62:fc:
fe:86:29:86:d5:a0:e4:65:54:58:33:fd:04:ab:0d:
35:d7:20:d3:e7:52:db:5f:8b:85:d9:54:4d:49:a1:
4d:07:99:41:c8:ec:d6:bb:b2:f2:54:b2:7d:c3:42:
8c:2e:85:cb:0f:51:23:b0:62:f5:97:c6:69:d8:85:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:0A:47:C0:25:14:C6:51:BF:75:4D:B9:9F:F4:B0:0D:42:14:35
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/YG4KR8AlFMZRv3VNuZ_0sA1CFDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3680::/29
Signature Algorithm: sha256WithRSAEncryption
92:a6:12:c6:61:fe:f3:be:62:8a:aa:72:85:51:ba:db:6e:1f:
e2:6e:8c:7a:99:1b:e1:94:ba:c1:ed:d0:e2:7e:a3:b0:33:e5:
c1:0d:5e:fe:44:40:91:a3:7d:2a:de:41:ea:9b:24:98:6d:20:
d8:f7:bd:d3:79:d7:cd:59:44:4f:d7:f2:dd:2d:6b:7b:09:57:
52:f6:45:12:a1:51:c9:23:23:32:88:9c:50:f7:c3:2d:36:97:
4a:91:a0:8d:50:04:b3:e5:38:39:25:a5:9a:7f:9b:ef:ff:a2:
11:7b:d1:6c:b6:da:78:30:00:df:8f:8f:d9:3c:39:f7:95:45:
a0:e0:e4:89:35:28:74:09:f9:bd:d1:84:01:13:54:2f:c4:b0:
9c:f1:df:50:9e:d7:38:9f:22:81:95:ad:70:7d:d5:29:b3:69:
81:75:98:3f:6b:85:63:11:a8:58:bf:aa:c7:a1:9f:96:d3:8f:
8f:30:f5:80:50:23:ce:cd:5d:58:ab:6a:27:ac:c1:38:5b:84:
6e:a7:fd:59:99:ec:9b:d5:4d:89:ca:06:36:a5:35:f1:17:f1:
65:5e:01:a6:29:9d:44:c2:31:36:1e:a2:f6:9c:e6:06:c3:b1:
85:3e:ac:c3:af:52:34:1e:df:59:c7:90:8f:6b:ee:a3:aa:81:
59:21:09:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 08:46:55 2024 by rpki-client on console-ams.rpki-client.org