Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/yWVJTl3IvR2iI06QIlQ-krFmBYE.roa
File: yWVJTl3IvR2iI06QIlQ-krFmBYE.roa (raw, json)
Hash identifier: P42q8tKwsLzL+F+In96eLoX0XyPsEnOs06FcNAZakUE=
Subject key identifier: C9:65:49:4E:5D:C8:BD:1D:A2:23:4E:90:22:54:3E:92:B1:66:05:81
Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial: 01856BA595FED29551BB53EBA57C4C4ECD1D
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/yWVJTl3IvR2iI06QIlQ-krFmBYE.roa
Signing time: Sun 01 Jan 2023 04:44:51 +0000
ROA not before: Sun 01 Jan 2023 04:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 2a0b:1200::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:95:fe:d2:95:51:bb:53:eb:a5:7c:4c:4e:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Validity
Not Before: Jan 1 04:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c965494e5dc8bd1da2234e9022543e92b1660581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:83:f1:e3:b5:eb:22:d4:6c:b4:04:85:75:
2a:2e:56:ef:5f:3e:4a:f9:5b:4c:06:69:81:07:c5:
df:e4:3e:0d:c5:6b:8e:e8:c7:d0:fb:64:0c:52:32:
75:ce:02:b9:2b:4f:c5:ee:2a:fb:f9:52:99:d5:80:
74:cc:99:eb:66:ee:9d:8e:b2:10:54:b7:38:2f:fc:
34:37:76:4d:ea:d7:0f:45:f0:9c:97:f1:82:21:2e:
17:10:4c:8b:3a:9f:ff:8f:66:0a:1b:b7:59:86:2a:
ba:b9:ce:cc:3c:11:c3:be:b8:6c:21:98:bc:dc:be:
1b:8c:b1:e4:05:ac:eb:87:d7:12:39:b0:4b:70:66:
48:a1:80:cb:c6:4b:f5:94:53:0d:aa:df:c6:16:c7:
db:9e:c6:1a:3a:57:4b:a3:c8:36:1a:fd:4e:67:75:
da:af:77:02:79:2d:61:73:4c:12:5b:20:ce:29:e1:
e4:85:57:40:08:b7:de:47:39:cd:dd:5b:07:cc:85:
b9:c5:3e:7b:23:aa:95:4c:ba:eb:ba:a0:f9:f4:a1:
af:0c:f7:12:62:62:9c:65:bd:96:c2:2a:fd:30:0a:
9c:6c:09:56:2b:ca:4b:11:30:09:6c:17:e9:7a:82:
34:d8:18:72:8f:8b:58:5e:66:bf:60:c2:cb:10:5e:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:65:49:4E:5D:C8:BD:1D:A2:23:4E:90:22:54:3E:92:B1:66:05:81
X509v3 Authority Key Identifier:
keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/yWVJTl3IvR2iI06QIlQ-krFmBYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1200::/29
Signature Algorithm: sha256WithRSAEncryption
99:94:73:2b:fb:de:ab:5e:e9:e5:3a:48:c3:16:6d:b0:bc:a4:
c2:c1:76:e5:11:bc:1a:e6:ec:fb:c0:fc:eb:0c:45:8d:cc:12:
ac:17:9a:67:80:81:2a:a6:34:2b:0d:06:2c:dc:39:ac:b4:7e:
a3:10:1b:64:d6:4f:b3:8b:67:94:25:82:d9:27:23:fe:d5:c5:
fc:23:3b:9d:a0:53:5d:d0:89:40:64:e4:36:6d:b1:83:93:b7:
df:29:d2:fd:c3:c8:2d:a5:18:ff:32:b4:01:67:6f:2a:d4:b2:
18:5a:0d:da:47:96:a4:cd:e8:f6:a5:23:e6:b9:a1:ce:de:f7:
1c:ec:58:49:c4:f6:c5:50:23:c1:3b:47:18:41:dc:db:34:6d:
40:59:72:13:11:0b:77:17:75:53:3c:55:c6:03:38:32:91:8b:
4a:6e:ab:79:6f:78:5e:28:67:2a:ef:42:f3:1f:7d:b2:3e:66:
d8:fa:fe:bf:24:4f:e6:bd:eb:ea:ce:e0:4e:f8:42:c7:bd:88:
99:e6:d2:f4:45:c6:17:9e:b0:32:8e:ce:26:57:0b:c4:5b:f0:
77:5a:f2:10:4a:98:f0:71:63:b2:34:3f:96:99:12:af:e3:6a:
36:8f:80:fe:9b:b8:74:cf:4e:0f:aa:79:b8:d1:50:14:0f:65:
d4:6a:58:45
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVrpZX+0pVRu1PrpXxMTs0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjA2NmM2ZTE4MDBhM2Y1YmQyZTQwNmU5YTYyMGQyYTBm
NmY2NTMwHhcNMjMwMTAxMDQ0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTY1NDk0ZTVkYzhiZDFkYTIyMzRlOTAyMjU0M2U5MmIxNjYwNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8GD8eO16yLUbLQEhXUqLlbvXz5K
+VtMBmmBB8Xf5D4NxWuO6MfQ+2QMUjJ1zgK5K0/F7ir7+VKZ1YB0zJnrZu6djrIQ
VLc4L/w0N3ZN6tcPRfCcl/GCIS4XEEyLOp//j2YKG7dZhiq6uc7MPBHDvrhsIZi8
3L4bjLHkBazrh9cSObBLcGZIoYDLxkv1lFMNqt/GFsfbnsYaOldLo8g2Gv1OZ3Xa
r3cCeS1hc0wSWyDOKeHkhVdACLfeRznN3VsHzIW5xT57I6qVTLrruqD59KGvDPcS
YmKcZb2Wwir9MAqcbAlWK8pLETAJbBfpeoI02Bhyj4tYXma/YMLLEF4GdwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMllSU5dyL0doiNOkCJUPpKxZgWBMB8GA1UdIwQY
MBaAFOqwZsbhgAo/W9LkBummINKg9vZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEt
OTMxY2Y3OThlNDEyLzEveVdWSlRsM0l2UjJpSTA2UUlsUS1rckZtQllFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEtOTMxY2Y3OThlNDEy
LzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgsSADAN
BgkqhkiG9w0BAQsFAAOCAQEAmZRzK/veq17p5TpIwxZtsLykwsF25RG8Gubs+8D8
6wxFjcwSrBeaZ4CBKqY0Kw0GLNw5rLR+oxAbZNZPs4tnlCWC2Scj/tXF/CM7naBT
XdCJQGTkNm2xg5O33ynS/cPILaUY/zK0AWdvKtSyGFoN2keWpM3o9qUj5rmhzt73
HOxYScT2xVAjwTtHGEHc2zRtQFlyExELdxd1UzxVxgM4MpGLSm6reW94XihnKu9C
8x99sj5m2Pr+vyRP5r3r6s7gTvhCx72ImebS9EXGF56wMo7OJlcLxFvwd1ryEEqY
8HFjsjQ/lpkSr+NqNo+A/pu4dM9OD6p5uNFQFA9l1GpYRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:35 2024 by rpki-client on console-ams.rpki-client.org