Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YdlTqVqUtTWHfYag_DQLtVsg0_M.roa
File: YdlTqVqUtTWHfYag_DQLtVsg0_M.roa (raw, json)
Hash identifier: tp4EFoou/p48v15ltw9HS3slIuxK+g2aDIic2jgOyMQ=
Subject key identifier: 61:D9:53:A9:5A:94:B5:35:87:7D:86:A0:FC:34:0B:B5:5B:20:D3:F3
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C4163657DC87AFBB2B94CA6141FC1ED
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YdlTqVqUtTWHfYag_DQLtVsg0_M.roa
Signing time: Sun 01 Jan 2023 07:35:02 +0000
ROA not before: Sun 01 Jan 2023 07:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141011
IP address blocks: 2a0c:e640:1010::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 Jun 2023 21:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:63:65:7d:c8:7a:fb:b2:b9:4c:a6:14:1f:c1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61d953a95a94b535877d86a0fc340bb55b20d3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:dd:73:28:ed:df:b3:5e:bd:be:7a:01:8b:
f8:4d:ef:09:cc:70:04:95:fc:24:ca:00:f9:65:00:
ec:34:77:d7:a9:44:0e:84:57:5a:12:0e:5b:cf:83:
3d:ae:e0:43:3e:11:30:87:85:5f:98:e0:57:f6:24:
9d:23:34:1f:b4:ec:d6:19:98:77:1e:a3:e0:9f:6b:
cb:ab:3b:b2:81:fa:8a:ca:c8:2b:54:89:03:12:e0:
e8:2e:8c:4c:b0:2b:f8:25:c3:84:9c:51:d3:58:fd:
cc:ff:b4:f5:3a:3b:7a:d0:f2:54:06:2d:3f:85:79:
52:61:5d:e4:a6:c2:d7:98:ad:43:00:10:06:06:8a:
23:b0:ea:4c:82:90:b0:37:1c:09:1d:9c:d3:23:42:
56:83:a5:e3:35:48:66:51:dd:24:b7:37:61:d0:1b:
e0:de:b6:bc:50:1f:a8:8b:55:23:71:dd:ec:a4:b6:
2b:cc:b9:d6:75:de:f7:e4:c6:19:70:de:eb:5c:04:
5d:f4:98:33:33:b3:99:9d:7a:13:eb:ee:08:9d:4e:
aa:ab:17:25:84:2b:05:0c:11:42:50:59:ca:2f:cf:
71:1b:99:cc:e0:52:21:f9:e1:0f:63:61:84:38:c1:
a4:7f:1c:60:a6:03:85:ea:cb:80:94:fe:b3:ab:ef:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D9:53:A9:5A:94:B5:35:87:7D:86:A0:FC:34:0B:B5:5B:20:D3:F3
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YdlTqVqUtTWHfYag_DQLtVsg0_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e640:1010::/44
Signature Algorithm: sha256WithRSAEncryption
8e:66:d2:1a:18:15:2d:8d:9b:16:50:62:1b:be:8f:3c:e0:cc:
4c:8f:7b:b7:0c:73:b3:c0:63:93:9e:0d:b4:4d:76:f7:b5:99:
13:00:1b:c8:a9:be:c4:41:07:40:a5:b7:c0:18:ba:3e:7e:34:
c8:d6:c6:57:c4:ba:ed:d4:f1:77:60:78:c3:ba:f6:d1:c9:1c:
b0:4c:f5:ad:86:e8:a7:18:22:de:fd:91:6c:28:d3:57:3e:9b:
cd:94:b5:c9:4d:9e:66:e2:92:cd:ec:a0:d6:88:a8:c5:c6:7a:
8f:37:79:75:f1:1a:2e:50:cb:3f:66:3a:83:81:bd:1a:8f:de:
7f:0c:c5:3c:7c:1b:01:f0:cb:c7:ac:2c:2e:5e:a2:ce:ff:f4:
43:ee:7e:c5:27:2c:56:be:be:9f:04:5e:9d:1a:d2:57:13:c9:
8a:f3:6e:ae:49:73:35:9c:29:8e:8c:37:16:cf:7c:5f:e0:41:
65:f9:4f:37:b9:01:74:34:5a:23:2a:f0:7f:4c:2e:f5:6c:01:
a1:71:b8:82:14:f5:66:49:ab:48:7e:45:4e:be:5a:5d:73:41:
04:01:0f:a9:7e:7e:8b:71:4a:73:ad:91:1e:44:69:df:36:ba:
a7:05:d3:65:d9:2b:52:dd:83:3d:55:60:06:ff:92:d0:c1:cb:
b6:30:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org