Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/YKYUAFcVkWiiornU9RaH5lK_PWE.roa
File: YKYUAFcVkWiiornU9RaH5lK_PWE.roa (raw, json)
Hash identifier: ZX6XNwtPi7CvnX3HB/49jcTzZXSNLf6409kngXUzSvs=
Subject key identifier: 60:A6:14:00:57:15:91:68:A2:A2:B9:D4:F5:16:87:E6:52:BF:3D:61
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018896C6A8D8D560FD44AA8D04EDB5377632
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/YKYUAFcVkWiiornU9RaH5lK_PWE.roa
Signing time: Wed 07 Jun 2023 16:53:01 +0000
ROA not before: Wed 07 Jun 2023 16:53:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198266
IP address blocks: 2a0f:7803:ffd0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:c6:a8:d8:d5:60:fd:44:aa:8d:04:ed:b5:37:76:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jun 7 16:53:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60a6140057159168a2a2b9d4f51687e652bf3d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:0b:6b:0e:f9:e0:f1:b8:90:11:93:a9:46:
f4:7b:87:e9:19:2f:2d:cf:c4:e8:55:13:4d:8f:7d:
08:b6:50:41:ff:ac:c0:40:94:fd:f5:ea:72:8a:5e:
e7:e7:d8:d0:ba:2f:0b:41:c0:6a:ea:93:40:c1:6b:
d8:c0:99:ae:1d:7c:d6:2a:20:4a:22:3e:34:87:ee:
3f:83:63:80:88:b7:1b:4d:dc:33:2d:c3:2c:65:85:
69:68:c6:f4:41:d3:30:79:2c:b7:e7:0b:2d:c2:3c:
f7:d4:d7:e4:d9:f7:12:99:e3:fa:1e:3b:5b:21:f3:
46:6d:00:e8:7e:b8:f2:a4:e7:a9:e7:62:c0:6f:75:
2d:51:64:e1:9b:e6:bb:01:2a:a8:4f:87:81:c7:bd:
29:5e:c8:4c:07:36:f5:fc:d3:d6:28:48:d9:6c:72:
14:03:9b:82:e4:c8:86:d7:0a:36:dc:ab:31:58:f4:
c9:67:5e:39:cd:dd:ec:df:84:01:b7:63:cf:c6:57:
9f:38:c9:d7:4d:21:76:02:e1:4d:43:f9:45:d2:06:
2c:ec:91:7a:2a:86:15:31:ee:44:53:6a:50:2e:fc:
9b:c3:47:3f:11:98:36:e9:96:54:19:0b:b9:33:00:
9f:49:88:22:0d:19:b7:f2:08:3d:55:42:2a:0d:0a:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A6:14:00:57:15:91:68:A2:A2:B9:D4:F5:16:87:E6:52:BF:3D:61
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/YKYUAFcVkWiiornU9RaH5lK_PWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ffd0::/44
Signature Algorithm: sha256WithRSAEncryption
82:2d:fc:a9:a1:f2:d1:c2:93:ca:0f:71:f1:bb:86:6d:79:6d:
27:1c:f4:f6:85:27:f5:bb:55:fe:3f:13:02:80:a2:6e:bf:62:
5a:ab:b6:76:e9:95:c8:94:7e:c0:d5:e3:63:4b:47:89:c4:1a:
54:b9:8a:4f:b0:4c:18:ab:5c:d0:c5:33:29:d0:f9:27:76:86:
36:ac:b6:a6:46:9a:18:79:53:64:76:cf:96:1c:e7:6a:48:8c:
ca:25:08:c9:1a:79:23:57:c4:5f:be:3e:a8:13:20:6f:9a:9f:
de:0d:99:4a:66:65:12:30:32:02:94:fc:2b:e2:27:cf:fd:98:
fe:15:dd:d9:f4:35:2f:29:01:1e:71:a7:f3:ab:14:eb:b7:91:
a8:b0:8a:b8:ad:19:fe:ee:26:9b:94:33:86:9f:1b:87:cc:f6:
e0:a6:77:7b:27:38:0d:1e:70:c1:15:7a:23:13:eb:00:b5:be:
bf:24:9c:e0:d4:8c:af:8f:57:8e:1f:cd:30:fb:a7:3b:d4:a8:
2e:e4:88:ba:2e:03:48:a6:42:00:64:28:b3:3d:91:3f:03:15:
57:7d:5e:90:56:55:c2:26:6d:c2:fc:24:0c:f3:7f:35:9c:6b:
76:43:ab:65:d2:76:8e:7e:b1:a8:0d:58:1c:04:f0:b9:62:2c:
47:9b:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org