Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ynNTGz5PL_nB2c371DCyv2nK6CI.roa
File: ynNTGz5PL_nB2c371DCyv2nK6CI.roa (raw, json)
Hash identifier: McS29geYVrLzxkDXR1+reMMJmuScakhkg/up7S4bCts=
Subject key identifier: CA:73:53:1B:3E:4F:2F:F9:C1:D9:CD:FB:D4:30:B2:BF:69:CA:E8:22
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01863FA38DD844AB3D8704682BB97361C8FD
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ynNTGz5PL_nB2c371DCyv2nK6CI.roa
Signing time: Sat 11 Feb 2023 08:42:08 +0000
ROA not before: Sat 11 Feb 2023 08:42:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200021
IP address blocks: 2a0e:aa07:e060::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:a3:8d:d8:44:ab:3d:87:04:68:2b:b9:73:61:c8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Feb 11 08:42:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca73531b3e4f2ff9c1d9cdfbd430b2bf69cae822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:20:b4:f9:aa:25:ec:e7:6c:2a:8d:df:99:51:
4b:00:4c:7e:c4:56:42:dc:a9:e6:1c:5b:4a:f8:be:
a5:48:e9:50:93:a9:74:a2:b3:99:a3:7c:45:15:51:
44:5d:52:0c:fa:3f:d3:28:c8:5e:22:64:82:88:69:
25:3c:ec:5a:f4:ba:9c:1a:bf:bb:c1:83:1a:e6:97:
67:5c:e5:d2:0b:52:49:d3:d7:5c:3c:57:da:29:97:
ed:50:40:bf:e1:99:38:7b:71:4d:bc:e2:93:cd:fd:
1b:54:71:dd:7b:76:67:90:00:94:99:e3:5f:f2:b0:
b4:3b:d3:55:73:f6:40:cd:84:7a:ce:b1:92:f4:7d:
41:27:5b:e9:c9:5a:ee:21:a4:ec:98:7c:a0:24:e3:
ff:b8:ab:48:64:cf:b9:f2:57:6c:2e:99:06:53:73:
59:e4:a7:80:79:11:84:d4:ad:c0:56:e9:eb:e3:64:
6f:1c:38:4f:0d:a1:9a:74:dd:0f:fd:e7:43:44:44:
f3:89:0d:29:a9:a2:0c:47:d7:c5:c9:a3:4d:42:a9:
e7:39:e5:e7:73:42:eb:b1:4f:bd:f2:64:6d:11:8d:
41:45:c6:13:34:ad:74:d0:c1:94:dc:0a:96:b7:2b:
89:4d:dc:a2:ef:cb:9c:69:8f:93:3a:02:84:12:cb:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:73:53:1B:3E:4F:2F:F9:C1:D9:CD:FB:D4:30:B2:BF:69:CA:E8:22
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ynNTGz5PL_nB2c371DCyv2nK6CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e060::/44
Signature Algorithm: sha256WithRSAEncryption
24:97:c7:c1:ac:31:6a:86:34:74:99:de:43:c1:3f:6a:ab:4b:
cf:70:ab:50:13:ee:24:32:d4:5c:7e:2e:8b:f6:26:c5:df:f8:
02:ee:b9:37:84:96:c2:8d:20:82:a6:c8:d9:73:d2:e7:1e:f9:
6e:2a:9c:47:98:ca:c2:53:e4:27:11:9d:c0:2e:a5:88:dc:30:
46:dd:ed:ce:a9:fd:6d:1d:b5:96:bd:49:bc:6f:d8:60:ea:34:
b1:43:c1:d4:26:c1:90:72:51:33:77:ce:50:d5:54:02:82:53:
da:13:2f:dc:05:ec:2a:c8:41:8b:ac:73:1a:a5:1c:60:d7:ae:
35:1c:3f:8a:dd:ac:14:66:55:55:47:66:fd:79:f8:44:58:80:
28:b5:1c:a2:4a:ac:b2:8d:93:fa:52:a9:b7:74:ce:db:ec:35:
5f:41:0f:ad:12:43:96:77:02:1e:98:17:3a:1f:f0:1b:fc:35:
0f:90:83:84:fd:3f:15:1e:21:dd:0b:e1:0d:d5:da:66:1e:27:
ad:a6:e8:4e:1c:0c:d1:91:60:1b:41:f5:fa:90:69:fa:d1:62:
b2:d5:69:5b:d2:d1:07:c9:c9:94:0c:cc:51:17:d7:01:85:05:
1e:04:8d:0b:ec:05:de:00:d4:e8:61:52:e8:7a:65:6a:be:af:
e3:3b:5f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org