Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/YwlrM2kAGrmB9OxbHlUUaEaKJaM.roa
File: YwlrM2kAGrmB9OxbHlUUaEaKJaM.roa (raw, json)
Hash identifier: xJej9ANqhNBYWU7eTT01YA4r7zazN9AmaOgOhYFRADY=
Subject key identifier: 63:09:6B:33:69:00:1A:B9:81:F4:EC:5B:1E:55:14:68:46:8A:25:A3
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 01856CB860C90B94B8BF2097E66D80C11709
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/YwlrM2kAGrmB9OxbHlUUaEaKJaM.roa
Signing time: Sun 01 Jan 2023 09:45:00 +0000
ROA not before: Sun 01 Jan 2023 09:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 2a13:7e80::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:60:c9:0b:94:b8:bf:20:97:e6:6d:80:c1:17:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Jan 1 09:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63096b3369001ab981f4ec5b1e551468468a25a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:37:e9:89:56:92:55:44:6a:35:be:6b:46:71:
45:1c:60:df:12:25:c4:ac:0a:9b:a0:1f:29:06:42:
73:cb:25:5e:6e:94:7f:60:a7:77:d2:80:a0:26:79:
9f:9b:86:7c:fa:4a:69:08:85:ef:cc:00:17:e5:61:
18:28:f0:96:4c:82:d1:5c:73:eb:0f:14:de:16:8d:
68:87:94:b6:d7:b9:cf:a4:e7:17:93:a3:70:65:01:
5f:ad:10:68:f8:d3:e3:09:07:a3:8e:0b:9b:5d:ed:
39:68:71:d4:c0:9f:e8:db:27:d7:dc:54:f0:4c:cd:
2c:82:6b:e6:16:65:b8:8e:dc:43:ad:9f:14:9b:c7:
9a:26:6f:56:e7:a9:98:31:67:aa:cf:16:ad:c5:4a:
5b:90:ba:85:31:93:ed:af:c7:33:f7:3f:40:32:1c:
1d:90:8b:e3:87:f8:ff:87:7a:43:25:91:68:2e:8f:
13:b0:25:a1:b4:8c:93:6c:8d:b5:77:53:21:f8:6f:
e3:45:d5:47:52:ba:6d:4f:1f:70:64:1a:ca:c9:59:
63:e2:5f:9a:13:c8:8b:f8:e7:59:f7:22:9c:b4:b1:
54:76:0e:35:6f:83:61:9a:4b:7c:02:c1:c8:9a:8a:
f6:bd:82:f1:22:3a:38:32:72:9d:96:9a:61:0a:81:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:09:6B:33:69:00:1A:B9:81:F4:EC:5B:1E:55:14:68:46:8A:25:A3
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/YwlrM2kAGrmB9OxbHlUUaEaKJaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
7b:da:dc:0e:11:d9:44:9e:4a:7a:31:df:e2:be:04:52:fa:23:
cd:7d:db:57:01:3c:8c:8d:51:7a:34:ce:a5:e5:21:d1:2d:c9:
26:ee:c6:78:de:51:b5:9d:fc:9c:ad:7a:60:45:db:42:cf:a3:
ca:09:b6:97:f1:f9:f9:44:1d:38:00:36:48:4d:b6:b6:a9:1a:
ce:71:c6:49:ac:a2:04:8e:6d:3d:84:1e:82:0e:d9:ef:25:fa:
a6:c8:6c:f0:9a:0e:53:e7:2d:6d:8e:28:47:6e:7a:5b:f7:5e:
a6:3f:93:fb:78:60:06:83:96:37:66:c6:90:d6:de:22:64:46:
a5:bb:94:ea:39:22:d5:11:30:33:01:11:48:a4:36:7a:16:87:
2d:8c:cb:b9:74:83:7c:f9:b7:1d:40:ff:50:95:c4:6b:3c:b2:
a2:2a:73:dc:65:60:9c:ac:33:2d:95:c2:48:a4:ee:15:32:18:
23:b7:ee:f5:48:5e:59:21:a1:95:10:b9:28:a4:67:16:36:e0:
b9:f7:bb:4f:3f:e8:1e:ac:9a:59:4f:06:de:4b:ab:90:51:c7:
5a:d0:13:c4:ed:00:a3:55:ab:92:4a:fb:5a:df:ac:c8:61:1a:
16:cc:be:89:a1:76:fd:d9:24:17:77:ca:ec:46:df:79:1d:fd:
14:9e:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:18 2024 by rpki-client on console-ams.rpki-client.org