Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YUPeNY3F1jywI4Vfny4TAi_yr9E.roa
File: YUPeNY3F1jywI4Vfny4TAi_yr9E.roa (raw, json)
Hash identifier: DNzRsaPsx3NOZExFN5+fUk66Ue748iFI+kETYl0VFfQ=
Subject key identifier: 61:43:DE:35:8D:C5:D6:3C:B0:23:85:5F:9F:2E:13:02:2F:F2:AF:D1
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DD0CD5662AEA1AF370FCE60E7CF35
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YUPeNY3F1jywI4Vfny4TAi_yr9E.roa
Signing time: Sun 01 Jan 2023 20:55:02 +0000
ROA not before: Sun 01 Jan 2023 20:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41767
IP address blocks: 2a09:7:2005::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:d0:cd:56:62:ae:a1:af:37:0f:ce:60:e7:cf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6143de358dc5d63cb023855f9f2e13022ff2afd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:ed:bf:7b:6b:c2:96:db:66:ed:dd:f9:53:
b5:db:9c:84:e1:b7:4d:e8:f1:86:15:ea:96:67:7b:
fa:85:36:a7:6e:de:c2:28:20:68:12:8f:31:4b:ac:
45:69:33:8a:10:8a:72:17:06:52:a1:2f:7f:a2:98:
9c:a1:95:3b:37:e0:e1:3d:03:ef:f9:a4:f9:34:b3:
40:f8:db:57:e0:3b:1e:f9:3e:1f:d2:ef:f3:fc:67:
e1:da:cd:38:88:83:8b:cd:9c:e1:ac:4a:38:b2:25:
bb:ee:83:5f:69:17:66:e7:d1:fe:58:23:da:bf:4d:
ae:94:60:94:aa:57:7f:f9:da:b4:0f:f5:4f:9b:95:
2b:5b:92:5b:20:9b:29:9a:69:40:df:ac:48:59:31:
c0:ce:94:46:b8:70:5a:6c:49:70:52:f1:7d:94:1a:
71:10:c4:9e:f9:b3:f3:48:77:04:fa:00:c9:62:e3:
5a:2a:64:6d:82:56:af:8f:f1:35:95:9a:53:47:67:
40:6d:66:e1:e0:d0:b8:e0:4b:45:44:8a:0f:2b:08:
1d:71:00:be:9f:18:54:e0:dc:ca:0d:16:1e:93:90:
ac:86:44:94:cf:4e:ea:99:6e:d6:ef:c5:81:37:ff:
57:52:a9:c9:9d:49:df:4b:cd:9e:25:9e:8e:fb:30:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:DE:35:8D:C5:D6:3C:B0:23:85:5F:9F:2E:13:02:2F:F2:AF:D1
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/YUPeNY3F1jywI4Vfny4TAi_yr9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7:2005::/48
Signature Algorithm: sha256WithRSAEncryption
65:49:b6:58:a1:aa:c8:20:6c:72:31:03:ce:e1:f7:a6:a3:60:
64:bb:7e:39:6e:7c:28:f4:2b:53:09:9a:ef:79:4e:4b:6d:b0:
8e:52:a2:96:8b:aa:66:c2:21:51:cf:1a:ab:4f:fd:fe:bf:90:
08:62:4e:a9:42:8c:6d:d9:32:b2:af:29:1b:5c:f4:f4:00:2f:
27:0d:ca:0a:f8:58:9c:87:b3:91:84:c2:a0:b9:43:f1:81:51:
6d:8a:fd:4a:c8:98:a8:c2:b0:a9:e4:64:fc:ca:78:ac:43:cc:
25:92:ec:03:75:14:a9:61:b7:02:9b:e8:a1:3a:ba:44:ba:6e:
44:71:aa:ca:11:24:c0:c3:c7:97:b6:e8:3b:15:ad:27:73:df:
9d:07:31:3c:72:06:3a:9f:17:2b:5b:ec:f3:b0:42:3e:98:ae:
dc:7e:50:d3:c0:b9:cd:12:cb:d3:6e:08:9f:9e:bd:d8:7d:92:
fd:f8:1e:90:3f:ec:40:56:6b:12:bc:d2:e5:14:69:1a:7d:05:
5b:85:52:bd:0a:b0:b9:cc:50:46:01:fc:65:f9:dc:4e:bf:bd:
59:58:4f:92:68:dd:e5:57:42:00:e4:4e:51:af:1b:5e:6f:bf:
de:c3:f7:89:37:da:b6:b0:09:b7:00:64:50:fd:77:d5:ec:4d:
d4:b7:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org