Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ynQWpXr_lkB_iXCVvkKclxhKwHU.roa
File: ynQWpXr_lkB_iXCVvkKclxhKwHU.roa (raw, json)
Hash identifier: sKqwjvrLNgalPz/J5XT4orZh0SkAx6+DalYZQYIFlhY=
Subject key identifier: CA:74:16:A5:7A:FF:96:40:7F:89:70:95:BE:42:9C:97:18:4A:C0:75
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FF66700D3B95F5715B5311CFBC9FB
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ynQWpXr_lkB_iXCVvkKclxhKwHU.roa
Signing time: Sun 01 Jan 2023 21:14:52 +0000
ROA not before: Sun 01 Jan 2023 21:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208884
IP address blocks: 2a0e:aa07:f090::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 Jun 2023 07:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f6:67:00:d3:b9:5f:57:15:b5:31:1c:fb:c9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca7416a57aff96407f897095be429c97184ac075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:e5:b1:cf:da:54:58:ac:d5:55:2c:b8:25:
50:7b:43:4c:7c:04:1a:7a:8c:83:6c:59:10:19:aa:
33:61:8a:a8:4c:9d:ae:f1:1e:bf:78:73:1a:68:be:
d1:29:7a:2c:2c:ff:ac:24:fb:3e:61:8e:5b:14:50:
0c:54:49:29:b5:2c:46:a9:7b:55:bc:9b:8c:b1:5c:
d8:8d:2b:01:93:2a:6e:da:8c:17:13:6c:03:e4:ab:
ac:18:c8:9e:bf:ad:48:a1:c3:2b:3a:b6:32:9b:8d:
5f:af:8d:54:fe:20:83:ba:8b:90:57:e8:25:93:d2:
32:31:a6:ac:d0:ff:61:c8:cc:f5:4c:cb:f0:2c:11:
f7:01:92:55:8f:2d:0c:30:3f:98:3c:1e:2b:da:f0:
6e:63:c4:3b:df:f4:e7:48:34:e0:1d:0a:f5:cd:50:
26:85:54:f5:b1:36:af:d0:96:13:88:b6:ef:0c:05:
f1:a6:b3:e3:e0:73:7e:ae:bc:26:72:f6:59:75:d6:
bd:7e:65:02:9c:e9:b9:a1:e3:dc:e2:9d:5b:c9:8a:
e6:49:ce:66:20:4a:20:7f:24:c3:d3:11:af:02:c3:
f2:bf:05:69:d2:15:92:5a:75:f0:71:4d:38:3c:89:
22:56:6e:16:8d:f3:f4:e5:33:39:53:6b:3e:cc:c8:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:16:A5:7A:FF:96:40:7F:89:70:95:BE:42:9C:97:18:4A:C0:75
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ynQWpXr_lkB_iXCVvkKclxhKwHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f090::/44
Signature Algorithm: sha256WithRSAEncryption
44:38:66:34:27:4f:e1:d6:6c:1c:29:4c:6e:78:98:c3:4d:70:
c6:f2:b5:12:09:f5:fb:8a:da:89:15:05:5e:1a:0a:71:06:f4:
dd:2e:5e:fb:47:23:00:e7:44:72:3b:85:44:1c:cd:9d:f5:fb:
1a:4c:53:a4:e7:97:02:c8:5d:2c:a2:5d:79:41:89:27:b3:b1:
2b:68:62:94:fa:bf:49:c7:8e:cc:82:bf:ab:05:bd:e2:07:0e:
26:b5:af:bd:b4:75:d4:f9:41:2c:69:1b:ce:c1:2a:8e:ea:54:
69:77:18:25:ac:82:55:bf:c4:a2:e8:11:c2:c9:5b:8b:34:b8:
cf:2c:7a:1f:f3:26:32:40:45:28:62:d3:2f:d9:52:e7:70:e6:
9e:d6:dd:e6:59:04:28:7e:f5:03:ce:cc:d8:e3:73:86:16:73:
ce:a3:99:5f:fe:d8:d8:43:d6:af:5c:a3:5e:ed:ba:f3:d2:4e:
40:41:5c:5b:c9:ba:00:7d:41:40:6e:8b:45:a4:95:7e:de:68:
57:58:de:d8:40:20:b6:f9:a2:d5:37:f5:4f:f6:67:51:26:d8:
9f:c3:b1:66:a0:56:02:14:4b:03:e1:ce:bc:4a:1b:12:9e:d0:
4f:7b:a5:d2:e7:76:aa:f5:c4:7d:e7:0a:39:e5:4e:54:08:88:
21:b7:e4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org