Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/YH2PiQiuT7FCuw2wk3oEzvqBFRs.roa
File: YH2PiQiuT7FCuw2wk3oEzvqBFRs.roa (raw, json)
Hash identifier: 06liEyIxRo18EGDJKxYv7xewzjatF0T5+PKXfB0w8Io=
Subject key identifier: 60:7D:8F:89:08:AE:4F:B1:42:BB:0D:B0:93:7A:04:CE:FA:81:15:1B
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0192B4A7511AA5948F28601D6A23C2D08B9A
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/YH2PiQiuT7FCuw2wk3oEzvqBFRs.roa
Signing time: Tue 22 Oct 2024 14:35:17 +0000
ROA not before: Tue 22 Oct 2024 14:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 2a11:53c6::/32 maxlen: 48
2a11:53c7::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Oct 2024 09:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:a7:51:1a:a5:94:8f:28:60:1d:6a:23:c2:d0:8b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Oct 22 14:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=607d8f8908ae4fb142bb0db0937a04cefa81151b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:f4:6f:1f:6d:ee:9c:d5:fb:76:b4:5f:9f:
cc:01:df:d5:3a:41:c8:07:60:14:27:d3:c1:f1:87:
c8:e0:05:21:7f:0f:9e:4a:4d:52:91:26:26:95:67:
9e:9c:2a:9c:65:9c:10:6c:99:da:6b:0c:12:7e:68:
95:78:12:02:04:47:6b:f2:4c:f9:e3:7d:f7:35:b5:
e4:89:0e:d3:ce:72:63:ee:eb:b0:f6:9e:7a:03:4a:
3b:6c:6c:36:a1:de:01:8a:31:fb:bb:31:ef:57:df:
6e:d9:7f:97:a4:68:62:db:02:64:91:43:11:34:4f:
2e:d3:68:4f:a6:64:8a:cd:06:2d:42:21:1b:6c:8e:
89:c6:08:27:8f:c9:9a:03:4b:80:03:99:a0:5a:bc:
13:9c:fc:a0:b9:23:db:d4:b4:41:bd:0f:f0:d9:79:
e3:95:6b:b5:07:44:2c:b7:af:b0:43:30:22:b7:92:
10:b6:52:80:67:94:7f:26:ce:44:48:88:2a:b4:00:
d5:d2:01:b9:e2:8c:3a:e7:58:37:7e:70:ee:83:ff:
b5:06:07:ac:3b:ba:aa:2a:59:d5:0c:d5:aa:87:4f:
7a:9b:38:ba:6f:31:44:0d:68:17:09:73:c4:28:b9:
75:e0:7e:59:dc:79:83:9f:68:1d:95:1a:12:83:6e:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7D:8F:89:08:AE:4F:B1:42:BB:0D:B0:93:7A:04:CE:FA:81:15:1B
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/YH2PiQiuT7FCuw2wk3oEzvqBFRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:53c6::/31
Signature Algorithm: sha256WithRSAEncryption
86:15:fd:d9:ec:b1:ee:c7:78:1f:6e:5e:71:ac:d5:c5:d8:0a:
92:28:0b:78:de:9f:94:b7:7f:60:56:8d:0a:f8:39:24:3d:66:
ce:90:7b:0f:bd:4d:25:8f:20:56:9b:79:a6:85:6b:f5:d4:91:
40:4f:6c:84:3b:6c:d4:2a:54:dd:38:97:a6:9c:ae:b1:f5:93:
02:34:09:84:9e:f1:dd:dc:da:08:ac:ff:30:ec:58:6e:38:f7:
ba:25:e2:e5:63:7a:64:c6:09:2b:61:58:ea:e0:ce:bf:c2:d3:
0f:00:d3:55:54:12:fb:4e:84:4b:85:8b:a1:48:a5:4b:5e:70:
a7:31:2c:16:38:c0:45:b9:e4:ac:a7:03:40:16:8c:92:23:87:
97:88:a9:84:50:bc:bc:bf:f5:0b:c6:5d:0b:e4:4b:8a:10:30:
96:b7:ce:65:b5:95:d5:57:23:fc:9e:c6:a3:97:f3:09:04:6f:
87:46:83:c2:05:a0:23:3d:be:70:58:d5:41:5e:c2:a3:a0:9b:
77:b0:96:21:25:e4:23:21:6a:f3:8c:94:2a:e9:33:6a:a0:c6:
16:e0:b4:6c:8d:1c:3c:be:f3:85:09:2d:0d:b8:a1:c0:8d:b7:
fd:b7:9d:a4:fe:40:c8:46:3c:08:f1:e5:4b:b9:06:f8:ae:a5:
be:e0:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 11:59:33 2024 by rpki-client on console-fra.rpki-client.org