Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/y1PxuhsIVHxycnu9CRYZNK3K-hA.roa
File: y1PxuhsIVHxycnu9CRYZNK3K-hA.roa (raw, json)
Hash identifier: 79pe/VRv7BjxgDGYsjNJ1PRWvCu5gROvn04UPWd8R2A=
Subject key identifier: CB:53:F1:BA:1B:08:54:7C:72:72:7B:BD:09:16:19:34:AD:CA:FA:10
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 01856FD4E95C39CBABB3246399714775C39E
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/y1PxuhsIVHxycnu9CRYZNK3K-hA.roa
Signing time: Mon 02 Jan 2023 00:15:02 +0000
ROA not before: Mon 02 Jan 2023 00:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:580:f010::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Jan 2023 07:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:e9:5c:39:cb:ab:b3:24:63:99:71:47:75:c3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jan 2 00:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb53f1ba1b08547c72727bbd09161934adcafa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:91:53:0d:56:ac:a0:2b:9f:95:1e:16:dd:
10:fb:cc:8e:e8:e1:f0:d1:84:3f:7a:37:94:79:b4:
ae:7a:cc:1e:7b:f4:9c:19:fd:69:b9:0b:63:f2:cd:
fd:a0:c2:8a:c7:5f:f2:73:f8:53:d3:36:7b:ac:c2:
c4:69:a9:cc:ba:b6:1b:ac:76:8c:39:af:65:01:27:
ac:a1:48:ca:50:e0:29:73:44:65:94:30:85:c3:a4:
1b:12:6d:b6:b4:ac:26:38:f7:aa:4e:72:d0:e0:94:
da:13:ff:2e:35:6f:ca:2a:40:10:c0:94:98:0c:4e:
2f:c3:d1:f6:fd:90:45:23:90:ab:bf:88:1b:d3:c8:
d6:22:d4:a2:59:bf:7b:9a:8b:ae:0f:74:7a:12:73:
71:7e:94:28:84:e9:9a:76:ef:d3:06:80:25:50:a4:
50:94:e7:16:f7:5c:08:82:fa:65:4c:45:3f:fc:2e:
6f:37:4e:1d:e3:17:e0:bf:01:17:01:33:0d:b6:5b:
09:c8:cd:53:65:eb:2f:fe:05:ba:ea:90:a4:86:7a:
25:da:22:a5:12:b7:24:ce:ed:69:d9:a4:2d:b5:ed:
a2:8e:d2:27:57:67:59:7e:e1:c6:86:4b:4c:c7:29:
c5:d1:e0:b4:87:ff:3d:7a:81:6e:16:6a:df:40:63:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:53:F1:BA:1B:08:54:7C:72:72:7B:BD:09:16:19:34:AD:CA:FA:10
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/y1PxuhsIVHxycnu9CRYZNK3K-hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:580:f010::/48
Signature Algorithm: sha256WithRSAEncryption
85:d0:29:12:61:0b:a2:6e:37:2f:08:73:f2:6b:7e:c2:f8:91:
c7:3c:fa:a6:f1:6b:d6:ed:77:ac:42:78:74:af:18:ec:a7:d3:
41:a7:da:99:99:44:2a:82:c5:19:27:00:dc:57:7e:75:3c:36:
a0:42:61:e6:f0:56:5b:32:de:36:50:98:03:89:3e:c5:20:ab:
af:bf:6d:e7:e9:a9:fe:53:85:b6:60:f3:dc:2c:51:fb:15:8a:
5f:40:f4:ae:b1:0e:f9:6c:68:d2:a7:16:33:f7:1b:3f:85:62:
1c:dd:52:06:39:c5:4e:b6:ea:24:3b:5c:20:63:f7:04:f0:f7:
27:fb:36:cb:59:ee:b2:39:cd:81:85:d8:62:95:ec:ab:4f:c8:
15:ad:23:cd:68:eb:2c:5e:5c:d8:fe:1e:d0:64:ed:65:ed:3a:
47:60:d7:db:6d:78:95:00:85:90:08:e5:fd:8d:11:ce:94:e9:
cc:2a:ac:3e:97:68:fb:98:c6:03:9f:ca:23:76:94:9f:55:6d:
6a:06:f2:fe:ec:51:ef:a9:5d:d8:72:8a:99:19:26:f8:50:46:
e4:40:8b:4f:b6:16:23:49:5b:21:1b:19:3d:ef:dc:d8:eb:dd:
ad:1d:49:a4:2c:21:8e:47:91:70:3f:f9:1c:12:e8:ad:ba:45:
b7:ec:bf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:19 2024 by rpki-client on console-ams.rpki-client.org