Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ytCruh_9TWcklKcL62_dI1cCb9k.roa
File: ytCruh_9TWcklKcL62_dI1cCb9k.roa (raw, json)
Hash identifier: OwG3siU6rkGcCmlcCmlMm8OTP3Cltxvpz5+mzgslSpo=
Subject key identifier: CA:D0:AB:BA:1F:FD:4D:67:24:94:A7:0B:EB:6F:DD:23:57:02:6F:D9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191524B1BB0B524FA4C72AADAF52E987BD3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ytCruh_9TWcklKcL62_dI1cCb9k.roa
Signing time: Wed 14 Aug 2024 19:08:59 +0000
ROA not before: Wed 14 Aug 2024 19:08:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48
2a0f:2ec0:1::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c6:bf88::/48 maxlen: 48
2a12:ecc0:316::/48 maxlen: 48
2a13:8c82:2::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a13:c900:22::/48 maxlen: 48
2a13:e102:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Aug 2024 16:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:4b:1b:b0:b5:24:fa:4c:72:aa:da:f5:2e:98:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 14 19:08:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cad0abba1ffd4d672494a70beb6fdd2357026fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:5f:94:28:f3:a5:31:35:27:c3:76:13:94:
fe:cb:63:68:7a:46:ea:4c:85:23:cf:45:7e:9d:37:
69:0a:d8:99:db:b2:8c:17:96:85:6a:86:d9:96:79:
07:3c:a9:7e:b9:23:13:ef:cd:21:61:6a:84:3f:fc:
1f:ba:48:09:c1:10:a3:3f:c2:b9:6d:13:cc:db:f8:
12:56:5c:20:ad:8b:59:7c:64:1a:86:27:b3:88:77:
22:0f:1e:fe:fe:9c:6e:c0:2c:f5:61:6b:48:40:60:
49:83:f7:f1:d1:be:35:19:8a:99:b1:02:0c:e1:55:
19:51:8b:35:28:5d:0c:da:a9:c7:4f:04:56:65:95:
14:87:39:b7:b5:53:1c:14:2e:17:3b:57:38:9e:86:
b4:86:68:0f:47:8e:ca:79:46:56:e0:a9:76:3f:ea:
8c:8a:71:7b:b2:a9:4e:85:ff:c0:15:38:5a:b6:46:
77:d2:27:2e:06:8e:b0:77:ca:f0:e1:2f:fc:4e:16:
cb:5b:4b:7b:c2:70:8a:ef:89:0c:76:53:1b:87:41:
cb:d0:18:68:03:71:de:24:5c:a6:cf:be:06:f3:d3:
75:01:32:e0:66:c2:6b:d4:f7:ae:6e:b0:c8:58:65:
0d:0b:18:53:2a:c8:d0:f8:19:76:35:bf:6d:2a:53:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D0:AB:BA:1F:FD:4D:67:24:94:A7:0B:EB:6F:DD:23:57:02:6F:D9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ytCruh_9TWcklKcL62_dI1cCb9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:b19a::/48
2a0f:2ec0:1::/48
2a0f:e440::/29
2a0f:e6c6:bf88::/48
2a12:ecc0:316::/48
2a13:8c82:2::/48
2a13:c700:1::/48
2a13:c900:22::/48
2a13:e102:2::/48
Signature Algorithm: sha256WithRSAEncryption
a4:5d:6c:12:e3:52:e3:92:45:0b:9a:e1:e7:34:92:e5:4e:00:
3d:c4:38:ab:ae:cc:13:09:86:aa:8f:0f:a4:8e:c6:8f:e9:32:
df:44:31:a1:a9:a4:ae:59:8f:89:c7:4b:91:fc:a0:dd:73:1f:
7a:02:cf:76:77:3d:37:2e:cd:a4:00:22:90:f3:f9:ea:a8:2d:
0f:59:33:83:3d:cd:3f:c4:50:05:f5:23:89:19:9c:6c:a8:a3:
f1:61:37:1c:38:20:a7:30:1a:6a:dc:75:35:98:59:00:9b:76:
7d:2f:e9:94:e3:a2:b9:94:ed:4e:fc:29:6a:d2:50:4d:06:1e:
9f:c3:4a:a8:4d:4e:b5:61:9f:35:fe:72:71:5c:51:18:df:51:
ad:2d:70:58:b9:e8:1f:d5:2e:fd:2d:39:fd:a8:da:2a:81:75:
e7:de:c5:2c:36:07:77:7a:04:41:6c:78:96:32:94:9d:3f:8a:
05:f5:7f:43:12:4b:f3:fe:0c:54:2c:3b:9b:31:36:02:28:ca:
89:d1:98:ba:82:d5:00:05:f9:45:0b:4d:06:02:37:55:58:3d:
5d:1b:8e:f4:dd:40:35:e4:0c:d5:6b:59:e6:fb:3b:71:6b:8c:
b1:ac:0c:41:e6:68:63:7b:f5:86:07:3b:a4:94:bf:38:de:da:
45:1b:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:10 2025 by rpki-client