Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YGccDLqKe_kvu7G2OJNWXwWpG0Q.roa
File: YGccDLqKe_kvu7G2OJNWXwWpG0Q.roa (raw, json)
Hash identifier: ANL9HqtVGhi7SlwcZmaQbzfbVrveq4jbIcQOvEI9biE=
Subject key identifier: 60:67:1C:0C:BA:8A:7B:F9:2F:BB:B1:B6:38:93:56:5F:05:A9:1B:44
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192D6730CA2D3FC4802590315A6EDB7CB1F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YGccDLqKe_kvu7G2OJNWXwWpG0Q.roa
Signing time: Tue 29 Oct 2024 04:05:16 +0000
ROA not before: Tue 29 Oct 2024 04:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:d672:7067/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 29 Oct 2024 04:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d6:73:0c:a2:d3:fc:48:02:59:03:15:a6:ed:b7:cb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 29 04:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60671c0cba8a7bf92fbbb1b63893565f05a91b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:a9:df:13:de:e1:2f:ca:18:f6:b1:8f:a9:
c7:cf:ca:9e:f2:d3:8f:23:15:04:78:a3:ef:cf:b2:
4b:61:de:4c:09:ea:9f:80:0d:9a:71:3c:0b:6a:f2:
6e:9c:9d:3c:78:ec:f9:12:16:4c:97:4d:de:31:3d:
9c:62:4a:b7:02:ce:25:0d:6b:74:78:b3:ef:04:17:
37:c9:e2:f1:25:d5:49:5d:ab:51:8a:3e:27:5b:e9:
31:28:59:47:8d:f8:19:d8:eb:0c:cf:f4:26:0f:60:
f2:3a:95:94:38:86:92:44:7c:29:e5:2c:e5:e7:22:
82:8c:34:62:72:90:46:ee:64:5c:cb:fe:23:05:e8:
99:80:a6:75:bc:05:ac:d0:8a:bf:51:cd:b9:4e:72:
78:cf:7d:0c:9a:92:b0:1c:72:56:e3:4f:2f:06:9d:
dc:86:c4:76:cf:90:80:c5:ee:81:c7:1d:96:20:d5:
54:5e:f7:fd:5c:5e:8f:e6:16:e6:df:8c:7a:83:1f:
7b:51:94:c7:1b:20:df:95:ce:59:8e:87:35:bc:d6:
61:64:29:a5:92:39:d2:c9:e8:23:23:33:60:47:2c:
dc:6e:2c:32:dc:09:0d:ae:a6:28:64:ba:c4:a9:e0:
ee:d0:d8:e9:be:9a:c8:19:d0:39:7c:b1:7e:3d:30:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:67:1C:0C:BA:8A:7B:F9:2F:BB:B1:B6:38:93:56:5F:05:A9:1B:44
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YGccDLqKe_kvu7G2OJNWXwWpG0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:d672:7067/128
Signature Algorithm: sha256WithRSAEncryption
5e:28:c4:31:5c:cb:ab:b6:f4:5f:77:9d:54:55:c9:b6:5e:b2:
40:6e:c3:f8:c6:10:a5:46:1c:fd:38:a9:41:26:9e:71:4e:7c:
99:48:fb:a7:c7:51:61:c4:60:c9:32:5c:99:b9:3c:26:27:9d:
4d:83:8d:4b:62:cb:bf:54:f0:58:16:15:b1:6d:7d:1c:97:72:
80:f1:1b:5b:ba:c0:74:9a:e9:ec:21:b2:18:5d:50:28:8e:5a:
29:7a:61:01:b8:02:4b:88:f3:45:3b:7d:fe:d8:02:63:b6:e4:
0e:61:6d:cc:c9:73:ba:15:5c:0e:b8:76:06:fe:1b:93:03:a5:
16:fd:a9:9a:9d:44:80:e1:0d:31:6a:84:ef:5d:4f:74:19:8c:
2d:88:18:df:2c:25:b1:9a:4d:36:fb:52:45:09:65:68:97:a0:
04:05:a2:9d:d3:d6:48:04:6d:fe:6d:19:ec:df:a9:85:7e:ab:
be:53:e5:71:d0:33:8c:90:5f:15:87:6e:73:5a:4a:0a:6d:cf:
6b:8e:ed:cf:48:eb:12:8e:f9:04:0e:e8:ca:ff:57:e5:33:e9:
e9:d4:87:74:84:ca:3c:44:8f:39:cc:ba:ea:bf:a4:b0:26:d4:
bb:5f:48:3a:4c:aa:58:63:95:d5:c5:2f:16:92:3f:fb:ce:26:
5d:41:7f:75
-----BEGIN CERTIFICATE-----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==
Generated at Tue Oct 29 06:00:29 2024 by rpki-client on console-fra.rpki-client.org