Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/ymwWw54w0_AMCPB1txyRXl0QWGE.roa
File: ymwWw54w0_AMCPB1txyRXl0QWGE.roa (raw, json)
Hash identifier: p5/qUjltzVtJnJTzqNNRxMg/HvLV7e2CB04U+ELvZok=
Subject key identifier: CA:6C:16:C3:9E:30:D3:F0:0C:08:F0:75:B7:1C:91:5E:5D:10:58:61
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 018A9333581C3E795210C7BA966A7BB0B713
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/ymwWw54w0_AMCPB1txyRXl0QWGE.roa
Signing time: Thu 14 Sep 2023 10:18:50 +0000
ROA not before: Thu 14 Sep 2023 10:18:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a0d:d600::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Sep 2023 06:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:33:58:1c:3e:79:52:10:c7:ba:96:6a:7b:b0:b7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Sep 14 10:18:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca6c16c39e30d3f00c08f075b71c915e5d105861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:c0:18:32:8e:d4:5c:a1:9e:92:ed:97:50:
79:ae:21:f3:a3:63:15:60:34:70:52:a7:05:c2:0b:
46:11:0a:14:05:b2:8c:f3:af:d8:95:0b:8e:0e:e5:
cb:e0:95:e6:a5:af:eb:f9:41:d3:7f:12:c4:eb:b4:
8f:e7:e0:a6:d1:a3:79:cd:aa:52:bc:6e:de:8b:e7:
c6:f0:6f:43:56:64:b9:8e:24:76:41:83:1c:dd:64:
57:7e:43:4b:f7:d0:6e:e9:66:89:da:e0:d1:56:8e:
81:fc:78:66:63:45:8c:8a:8e:f0:a9:d2:19:4b:49:
39:0c:b1:3d:a0:e2:a1:8e:c5:e4:3b:01:98:0c:2f:
19:77:5c:83:1d:0d:9e:c7:93:41:d9:42:3f:4f:f4:
4c:da:df:41:aa:c5:62:71:2d:3d:7c:9d:34:ae:bb:
c1:b8:d7:23:0f:fb:2c:69:b2:eb:aa:8a:e6:0c:43:
18:e3:70:18:6f:34:c1:8f:ed:de:e7:41:ca:1d:a2:
2c:ad:ec:6a:cf:23:5d:5b:a3:1b:0f:34:ef:d5:e1:
fe:21:fd:46:db:4e:5a:81:59:ff:d7:4e:e9:27:be:
04:1e:3e:ec:f0:ac:5d:47:20:59:bb:b4:d8:e9:00:
fb:a8:c6:6e:b2:b1:c4:fe:2a:29:d5:c2:46:8c:42:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6C:16:C3:9E:30:D3:F0:0C:08:F0:75:B7:1C:91:5E:5D:10:58:61
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/ymwWw54w0_AMCPB1txyRXl0QWGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d600::/32
Signature Algorithm: sha256WithRSAEncryption
38:1f:47:1e:9f:70:25:09:52:2f:f7:77:43:50:35:76:fc:93:
e7:fa:d0:9b:4f:45:aa:99:3c:44:2c:f1:dd:86:8a:e0:bd:f3:
f9:70:4a:dd:e5:f9:f5:a2:92:2e:62:6d:71:24:87:19:45:84:
3b:15:f0:87:4b:c9:5b:3d:03:c6:72:50:52:29:d2:32:00:6c:
f6:d9:4b:80:83:98:7c:e1:6b:4f:26:7f:29:05:2c:40:5a:44:
ae:23:3f:79:f1:1c:51:7d:e7:80:39:f1:e7:0f:e3:df:ee:2d:
7c:d3:4b:c5:a4:5b:e0:6a:ad:33:2c:7f:64:d0:6c:6f:9e:ca:
b4:62:d6:b1:9c:2f:02:01:07:cd:ea:68:b6:d4:4f:d0:13:05:
e0:86:9e:4a:34:8f:f2:1e:4e:02:a7:90:fd:fb:62:ec:bc:2d:
de:81:73:e2:ef:b7:bb:a1:ae:63:c6:40:b6:fc:00:a6:15:70:
30:a1:df:ee:0e:ea:a4:fd:fb:f2:ee:df:9a:1f:d7:c2:f9:1e:
7f:ca:f5:59:34:50:47:50:12:84:e5:ad:cd:95:24:c6:f2:76:
7c:12:39:ce:a5:4f:61:05:2f:02:d4:f2:dd:e4:56:c7:4b:6f:
ae:e8:09:3f:41:be:b9:e4:da:14:08:ae:41:e9:c6:5d:90:d0:
50:0c:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:38 2024 by rpki-client on console-ams.rpki-client.org