Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/YEYIvHefuOjToIK7Sr58H35L4Pg.roa
File: YEYIvHefuOjToIK7Sr58H35L4Pg.roa (raw, json)
Hash identifier: TMnkPbT0GcrMzaGjfXOlDlDlbhOZfDhr6LDyUDY5xnY=
Subject key identifier: 60:46:08:BC:77:9F:B8:E8:D3:A0:82:BB:4A:BE:7C:1F:7E:4B:E0:F8
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 018EF6143FE161E2BD1BB8D5E5760F1D8FCC
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/YEYIvHefuOjToIK7Sr58H35L4Pg.roa
Signing time: Fri 19 Apr 2024 11:18:25 +0000
ROA not before: Fri 19 Apr 2024 11:18:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a0d:b9c4::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 Apr 2024 18:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:14:3f:e1:61:e2:bd:1b:b8:d5:e5:76:0f:1d:8f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Apr 19 11:18:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=604608bc779fb8e8d3a082bb4abe7c1f7e4be0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:9d:0c:1f:44:86:c9:48:f2:47:ab:bb:f5:
56:36:16:2f:bb:90:21:89:d0:5c:78:2f:97:42:cf:
b3:6b:43:1f:7f:4c:a2:bc:61:24:64:db:f0:3f:c3:
74:42:67:04:5e:5f:54:bd:ff:b0:6e:09:f9:c3:24:
e1:2e:0f:14:31:4a:27:4a:31:55:3e:1f:4f:1b:74:
08:01:30:e1:05:35:15:22:30:f7:92:b4:14:4f:20:
c9:07:08:57:d3:d8:84:f9:cb:e0:22:7d:a6:d1:f7:
00:35:ac:a5:ff:c7:e0:1a:25:aa:bf:f9:4d:29:63:
8f:e8:1c:66:8f:7b:0d:89:33:14:f0:45:cd:24:2a:
90:de:bc:fd:56:a4:f1:53:7c:2a:a5:20:33:67:1f:
a6:68:3b:12:df:7f:84:d5:55:3d:13:1e:e7:fc:3f:
4f:fa:f7:a3:12:ff:57:18:5c:62:9c:d5:cc:95:8c:
dc:7f:27:76:0c:2c:6e:f4:17:12:97:b9:96:a0:58:
81:21:f7:f2:00:b2:f7:99:9d:23:1c:11:cc:e9:00:
ae:f1:8a:7f:ca:71:1b:02:71:bc:47:e5:51:17:32:
ba:bd:a4:8c:77:b6:03:ba:05:a0:94:c9:31:e5:b7:
1b:ff:8c:ad:b1:e7:a6:e5:24:26:0f:61:7b:9f:fb:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:46:08:BC:77:9F:B8:E8:D3:A0:82:BB:4A:BE:7C:1F:7E:4B:E0:F8
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/YEYIvHefuOjToIK7Sr58H35L4Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b9c4::/32
Signature Algorithm: sha256WithRSAEncryption
32:ad:c0:2d:f0:be:a9:50:a7:a7:53:a8:5c:9a:6f:7e:91:76:
e1:72:23:3d:2a:2a:b9:1b:fe:55:4f:20:12:a3:8f:77:d8:e2:
2b:a0:1c:e6:01:38:b7:0d:c4:1b:71:14:d7:27:f5:4d:14:4e:
40:36:72:b8:a0:f0:70:a7:aa:1f:8b:49:c8:da:4e:79:1b:d7:
28:9a:fd:6e:ff:02:a8:11:70:dc:b3:06:d3:95:db:5a:c1:70:
81:9b:ac:75:c0:12:f6:8d:56:c2:ba:4a:7a:94:95:e9:2b:8f:
a5:b4:db:e0:71:5e:45:7b:5e:62:2d:e6:3c:7a:d3:30:3a:1b:
87:48:5d:a7:9c:2d:c6:27:8d:60:d7:fe:c4:68:42:5d:68:b9:
b3:b2:77:28:b8:c0:09:76:f2:84:f8:af:fe:33:89:d6:1c:3b:
6d:53:54:73:78:1b:18:41:f5:7b:a3:56:7a:e7:ab:ac:6d:7e:
57:83:01:19:e7:c5:18:50:19:c0:eb:e8:4d:01:67:3f:60:f1:
20:2b:8f:fa:b0:7c:8e:a1:eb:94:51:4b:3a:be:0b:33:36:ec:
96:49:3c:7a:8b:c8:5f:7b:8c:0e:25:2b:59:d7:21:88:06:a6:
95:06:2b:ba:c6:d8:42:47:52:52:ca:fa:9a:13:0b:bd:31:e1:
72:ed:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:17 2024 by rpki-client on console-fra.rpki-client.org