Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/Yuhkhaj_qsRWcigUeCcm5QMS_DU.roa
File: Yuhkhaj_qsRWcigUeCcm5QMS_DU.roa (raw, json)
Hash identifier: //KdAq9hKpV5IWW6siSHbeWjLcYfaxm/OMr13pGE9SE=
Subject key identifier: 62:E8:64:85:A8:FF:AA:C4:56:72:28:14:78:27:26:E5:03:12:FC:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 018CC5DC71BC4407C52FE544261F7DA750B1
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/Yuhkhaj_qsRWcigUeCcm5QMS_DU.roa
Signing time: Mon 01 Jan 2024 16:30:07 +0000
ROA not before: Mon 01 Jan 2024 16:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206081
IP address blocks: 2001:67c:c64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:71:bc:44:07:c5:2f:e5:44:26:1f:7d:a7:50:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Jan 1 16:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62e86485a8ffaac456722814782726e50312fc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:4b:12:13:56:86:35:16:86:3f:da:65:15:
54:53:70:3d:26:70:86:bb:97:ab:95:a9:31:c3:e8:
09:81:7b:af:24:d1:5b:d0:f9:ff:85:11:54:a1:aa:
9f:14:f9:4f:18:68:44:53:b5:ef:77:d1:fe:e0:2f:
1f:e3:46:81:22:23:b4:6d:26:59:e3:6e:6f:7f:c5:
74:a1:f2:ee:4e:d8:f6:9d:28:d5:74:3f:5f:e6:62:
a1:92:34:c1:31:eb:f6:4d:cf:4e:f0:58:2a:48:fd:
4e:73:b8:db:cb:d3:af:2b:d9:d4:6c:88:83:b0:3e:
7a:96:97:91:60:ab:25:04:75:ad:cf:45:6d:04:02:
31:bb:67:94:1f:00:98:91:0a:99:4e:46:bd:21:ce:
35:f0:dd:0b:17:33:23:96:88:38:5e:4c:9a:c3:d8:
85:f2:32:d4:04:e4:79:10:0d:51:55:bc:93:00:c5:
58:eb:0e:c3:b5:b7:75:63:a3:27:45:df:71:48:ef:
3e:11:3a:04:cc:0d:f9:09:5b:1a:b0:d9:50:34:9b:
9d:a5:be:8f:aa:5c:eb:3f:57:bf:78:88:1c:e6:96:
d1:51:e1:b0:d5:d1:95:cd:c6:8e:ab:51:a5:f3:32:
9e:d3:84:87:fa:b7:1c:b2:c2:d0:c3:1f:45:08:ac:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E8:64:85:A8:FF:AA:C4:56:72:28:14:78:27:26:E5:03:12:FC:35
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/Yuhkhaj_qsRWcigUeCcm5QMS_DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c64::/48
Signature Algorithm: sha256WithRSAEncryption
59:36:87:a4:b0:d3:d2:e0:12:44:9a:68:ba:87:c2:98:5c:ea:
c1:c0:28:a5:89:9f:96:5d:ca:a8:82:1f:8e:f6:cb:e6:f5:8f:
f8:64:6a:11:67:b1:18:51:e1:e3:a6:f7:de:df:e1:15:46:2a:
59:d5:32:43:b8:2b:59:ff:37:08:42:0d:fc:9a:10:35:9e:3a:
12:05:a1:2a:cd:82:6c:2f:72:2c:c2:3a:8f:df:8a:ae:74:7b:
0c:20:38:68:41:29:59:0a:20:b0:ab:f8:d1:cf:93:5e:91:38:
e4:7e:54:a3:87:4c:2b:25:e3:6f:8f:a0:23:68:66:19:16:b8:
52:31:c2:12:05:d0:fa:f4:2a:8d:c4:8f:ed:1b:41:7c:36:bc:
5f:24:2f:83:d6:f8:11:63:d3:13:03:33:05:54:9d:0f:d5:17:
a2:50:e8:dc:bf:dc:8b:d9:9f:7a:e6:3f:bf:bf:23:0c:78:0b:
bb:1d:fd:e3:c8:fd:8c:9a:ac:e2:cc:e3:b9:a1:5c:bb:0c:b8:
ba:50:5c:5d:91:07:e6:53:0f:e5:c9:58:31:5a:e5:fe:83:16:
40:dd:c7:76:5d:a0:e0:bd:ee:ad:30:3f:a0:0d:92:91:69:c3:
46:0b:02:a4:3a:90:2f:be:7a:d2:86:c7:2f:15:6b:85:fc:ab:
45:b7:5f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:53 2025 by rpki-client