Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ybqhR-uYNv7BmUByOJPbwDJSiQw.roa
File: ybqhR-uYNv7BmUByOJPbwDJSiQw.roa (raw, json)
Hash identifier: OVMrL9J17xrcPW7TGcwX0VX8i5gxaT3yTrSixb8I3SU=
Subject key identifier: C9:BA:A1:47:EB:98:36:FE:C1:99:40:72:38:93:DB:C0:32:52:89:0C
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01884861BC430FDD7A87188ABDEC2209C554
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ybqhR-uYNv7BmUByOJPbwDJSiQw.roa
Signing time: Tue 23 May 2023 11:32:24 +0000
ROA not before: Tue 23 May 2023 11:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202888
IP address blocks: 2a0f:7800::/31 maxlen: 48
2a0f:7804::/31 maxlen: 48
2a0f:7806::/31 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:61:bc:43:0f:dd:7a:87:18:8a:bd:ec:22:09:c5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: May 23 11:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9baa147eb9836fec19940723893dbc03252890c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:66:c2:b8:ac:aa:d8:85:98:c5:d4:80:88:
5f:1d:5b:ee:05:1e:4c:d0:c2:5a:a7:32:0c:0e:35:
99:db:9c:7c:7d:e8:82:bf:f7:8e:42:f6:44:f5:1a:
f6:9b:e2:8e:6c:69:b1:36:98:6a:05:2c:84:be:a7:
f0:2f:0c:8b:b5:e5:39:f1:24:72:e2:ab:07:43:9f:
d2:4d:c2:1b:88:9e:25:92:b9:95:99:db:32:eb:22:
76:6a:f6:24:c8:76:ae:ad:37:16:e6:ed:a7:8e:cf:
67:22:9c:94:d3:7f:d0:be:d1:3e:d9:a1:82:a5:75:
ad:f3:ff:2d:05:8f:62:0e:7b:e5:f9:16:27:88:59:
d3:c5:70:e0:74:30:da:29:89:cb:c3:f7:86:3d:b4:
d9:6a:4b:8e:8c:d8:ae:24:93:80:e6:c5:29:46:22:
2b:89:59:03:d5:a6:c7:a6:90:29:85:0d:0f:0c:24:
43:17:f1:2c:ce:97:34:fc:39:e1:85:8e:eb:3d:1d:
60:63:4c:8a:f3:42:bf:c9:8a:92:f8:42:77:18:53:
18:f4:2b:db:d8:72:9a:aa:2d:a7:7b:db:96:e2:f3:
01:35:87:3d:e2:95:bb:d1:bf:fe:ff:93:e6:93:46:
8e:2a:18:0f:6d:99:a7:b9:b0:c8:e0:0f:8e:19:52:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BA:A1:47:EB:98:36:FE:C1:99:40:72:38:93:DB:C0:32:52:89:0C
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ybqhR-uYNv7BmUByOJPbwDJSiQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7800::/31
2a0f:7804::/30
Signature Algorithm: sha256WithRSAEncryption
6e:de:7a:3e:dc:0f:51:40:ea:f3:aa:1a:9c:e8:42:52:98:e9:
37:b1:bf:ae:77:2a:5b:2e:94:0c:3f:c6:b6:9d:89:74:b7:9f:
7b:ea:38:ac:68:8f:bd:6e:51:0b:d0:e2:23:f5:5f:da:1e:c5:
5e:c7:0f:45:2e:9d:d1:65:68:03:1a:cd:bd:a3:9d:b4:08:1c:
5c:fb:e0:b2:60:74:6d:45:8f:82:f2:7d:fe:73:fe:53:64:97:
41:18:b4:53:c2:38:e3:73:aa:d5:01:01:67:1e:7b:bc:bc:11:
b2:e5:3b:25:dd:32:ce:22:e2:c3:a5:81:46:c7:7a:c2:60:77:
08:d8:57:ad:88:61:26:e3:29:5b:eb:48:ba:d1:a0:77:c0:ae:
23:5c:52:0b:57:03:1c:a5:0f:31:b2:9e:ff:77:81:29:f0:cc:
24:c0:60:16:d0:03:74:9a:b3:10:7a:18:ea:1c:b4:8e:39:b2:
3d:05:92:be:be:69:66:9f:06:7f:06:99:85:ff:73:6f:48:b9:
ca:80:08:f6:bc:c6:73:22:90:d9:cd:6a:5d:2b:29:84:11:b8:
70:9f:4c:2a:ad:11:c7:63:d2:cc:7e:9f:cc:5c:34:6f:bf:d9:
c2:04:40:39:d9:da:79:a8:0c:f5:a9:11:0d:9d:62:62:61:5c:
f9:d3:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org