Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/yqvTFp6JTBvMFbEY-DWC1zjmSXs.roa
File: yqvTFp6JTBvMFbEY-DWC1zjmSXs.roa (raw, json)
Hash identifier: CuR3gWmgKr//RGtnrkYgF6WYLr/B6axpU1z09dZPQYo=
Subject key identifier: CA:AB:D3:16:9E:89:4C:1B:CC:15:B1:18:F8:35:82:D7:38:E6:49:7B
Certificate issuer: /CN=6615e50f43013c356da097e34d465f2abc494e9d
Certificate serial: 01856D01BCD082F61D1322CCFE8ED7406999
Authority key identifier: 66:15:E5:0F:43:01:3C:35:6D:A0:97:E3:4D:46:5F:2A:BC:49:4E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/yqvTFp6JTBvMFbEY-DWC1zjmSXs.roa
Signing time: Sun 01 Jan 2023 11:05:08 +0000
ROA not before: Sun 01 Jan 2023 11:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43451
IP address blocks: 2001:67c:2b5c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:bc:d0:82:f6:1d:13:22:cc:fe:8e:d7:40:69:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6615e50f43013c356da097e34d465f2abc494e9d
Validity
Not Before: Jan 1 11:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caabd3169e894c1bcc15b118f83582d738e6497b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:5e:5d:6f:2e:cb:05:01:1b:b7:a2:83:a5:
5b:07:67:1a:48:d8:58:f6:f8:8c:48:35:56:db:b7:
ce:0c:56:d3:c0:04:1f:3e:d9:4a:4c:e5:12:d4:8c:
33:9e:56:3e:f2:42:b1:56:f6:00:ef:bb:46:96:59:
c9:97:7a:e6:d4:ad:74:32:24:3a:b3:3d:1f:06:f3:
cd:97:63:df:45:01:1e:d8:9d:f6:ab:68:11:c1:5a:
11:b4:24:05:c8:f4:eb:aa:25:12:7c:7c:ed:7c:00:
b0:e3:fa:fa:a0:fc:df:49:0d:10:f4:86:67:03:99:
88:47:1a:c4:83:61:63:6a:f5:be:9e:41:0c:f0:f2:
87:08:b9:e4:54:73:ec:f6:e0:74:98:7f:d0:62:05:
27:5c:45:32:58:1e:bc:ba:bc:79:fd:09:d0:33:f0:
c5:ab:74:ef:ef:17:c6:73:1a:9d:e0:ec:3c:08:58:
f0:26:79:42:2c:e9:6c:e0:62:b7:54:34:27:83:43:
83:96:74:b4:ec:4b:3b:b8:7b:95:3e:17:bf:b8:7e:
c0:33:8f:68:fd:73:a7:2d:25:7e:90:b9:d3:73:26:
1c:ce:8f:e7:e3:c2:96:f5:52:c3:78:01:ed:a0:c1:
f1:36:26:22:e0:62:1c:07:c2:ac:33:77:f6:84:ec:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AB:D3:16:9E:89:4C:1B:CC:15:B1:18:F8:35:82:D7:38:E6:49:7B
X509v3 Authority Key Identifier:
keyid:66:15:E5:0F:43:01:3C:35:6D:A0:97:E3:4D:46:5F:2A:BC:49:4E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/yqvTFp6JTBvMFbEY-DWC1zjmSXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2b5c::/48
Signature Algorithm: sha256WithRSAEncryption
56:41:87:60:ea:f2:12:c8:88:16:68:17:bc:cd:bd:06:ff:9d:
0a:0e:33:92:74:9d:80:f5:40:20:58:38:40:d0:db:ba:e7:42:
da:48:02:c3:b4:67:7a:20:ec:26:cb:c1:e1:a2:b3:24:33:62:
c7:31:00:37:89:a8:a4:09:0f:4d:a7:54:df:fa:86:b5:da:49:
44:0b:fc:69:4d:16:63:46:50:26:f1:70:4a:cb:1f:a4:80:58:
a3:2a:86:c9:7f:f7:7e:ef:5c:2b:3f:5b:68:c5:b4:39:12:19:
28:b2:b0:8f:c4:02:ae:bf:71:4c:c4:45:74:32:d6:68:52:62:
23:b5:25:fe:41:5b:bf:e1:cd:24:07:f2:e1:b0:7a:f5:8d:58:
8b:7e:7c:ce:56:e7:34:65:31:18:7d:8f:aa:59:6c:d8:d9:6c:
a5:5e:77:fb:64:38:79:26:59:29:f4:57:b5:12:fb:33:71:14:
a3:64:51:50:0c:71:15:e2:01:3c:59:fd:12:63:e0:e9:a7:e1:
c7:c2:d4:16:07:d8:df:5e:74:c1:8f:4f:f3:b0:21:5a:df:a1:
a5:24:10:6b:ed:0b:e5:4f:ab:86:0b:35:2f:25:c1:05:30:3d:
6e:12:ca:05:d4:c5:e9:86:67:b9:ac:a4:02:bc:d7:0f:e7:f7:
f3:7e:e9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:43 2024 by rpki-client on console-fra.rpki-client.org