Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/xwWw2nvvlQPQb0hzocgLr_YoOYY.roa
File: xwWw2nvvlQPQb0hzocgLr_YoOYY.roa (raw, json)
Hash identifier: d1W4omcEu5c3wpQ4TYCDtNR1XtUmL707vOsUCwTPSAc=
Subject key identifier: C7:05:B0:DA:7B:EF:95:03:D0:6F:48:73:A1:C8:0B:AF:F6:28:39:86
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018CEA49990F066588B13ECD9F407EF567AD
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/xwWw2nvvlQPQb0hzocgLr_YoOYY.roa
Signing time: Mon 08 Jan 2024 18:15:40 +0000
ROA not before: Mon 08 Jan 2024 18:15:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201924
IP address blocks: 2a11:840:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Jan 2024 18:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ea:49:99:0f:06:65:88:b1:3e:cd:9f:40:7e:f5:67:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 8 18:15:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c705b0da7bef9503d06f4873a1c80baff6283986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:5e:73:ad:03:69:ac:b6:ed:06:cc:86:75:
2f:6e:13:ff:25:33:c2:57:4c:be:bb:c5:1b:21:69:
cb:c3:9a:71:14:07:b2:bf:a2:7a:63:9e:34:19:20:
7a:55:1b:6b:f9:4d:ea:e1:61:e1:44:a6:28:84:72:
62:f2:a9:a6:0b:07:51:0a:fe:02:dd:63:59:74:38:
b3:cd:0e:47:30:27:7d:d1:c9:f9:04:87:52:08:f9:
ec:18:29:3f:93:20:4f:bd:ec:cc:23:86:08:06:b3:
db:c5:78:cd:08:63:b9:93:ef:2c:0d:4d:0c:35:a7:
f0:16:4c:60:b2:b3:7a:db:8b:5d:a9:89:01:83:49:
43:52:fe:ef:33:b0:e6:83:3f:29:49:38:23:36:cf:
8b:6e:70:e7:21:fb:e5:83:78:45:1c:3b:f5:ad:e4:
0c:29:d6:af:f9:8c:e2:9d:cf:40:5f:31:37:4b:63:
63:34:eb:f1:03:53:25:b7:6f:54:e2:45:7d:26:06:
2f:1a:be:7f:01:2f:68:a5:d3:73:a5:b5:95:ca:4f:
4b:46:51:6a:a4:d8:35:87:95:33:d2:09:d7:f0:df:
ab:f4:47:8b:f7:2f:3a:dc:71:27:b0:37:dc:f2:88:
d6:8e:33:01:94:fd:ea:e8:29:eb:4b:af:ea:0e:f1:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:05:B0:DA:7B:EF:95:03:D0:6F:48:73:A1:C8:0B:AF:F6:28:39:86
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/xwWw2nvvlQPQb0hzocgLr_YoOYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:20::/48
Signature Algorithm: sha256WithRSAEncryption
3f:c2:a6:93:21:e0:50:28:14:6d:e6:35:57:60:be:c4:a7:b3:
84:66:61:e4:5c:16:5f:2c:65:94:89:79:39:54:3b:75:ed:09:
2b:fc:44:2d:99:fe:66:cd:2a:fa:07:e2:02:b1:00:bc:f6:2c:
b6:2e:30:f0:2f:9e:5e:06:f5:3f:a5:f4:f5:da:d2:a2:04:b0:
d8:f2:dd:b6:bd:b9:29:b7:4c:81:a7:31:6a:05:b1:d7:44:9a:
7c:52:bb:6e:19:c8:06:e7:b9:75:6c:4d:0e:c3:ec:96:5c:ac:
05:8d:fc:63:4c:ce:ba:16:df:d7:e2:a0:5a:8a:46:e1:5b:e7:
cb:f3:a4:d9:9f:3f:e0:a7:d9:5d:e9:17:1f:86:4c:6a:ab:21:
da:ea:09:e5:39:35:cf:8e:b3:e1:4e:be:65:42:d7:7a:69:cd:
2d:0d:ba:52:4d:99:1d:2e:06:3f:3b:b1:a3:44:38:4c:fd:4a:
c7:06:ab:6f:86:92:f7:c3:f9:43:0e:a3:90:f0:4c:93:8d:84:
5b:89:39:df:89:20:90:c7:6d:61:40:b1:ed:53:cd:4a:c3:e9:
73:bf:03:50:22:5e:df:27:0a:10:eb:88:90:00:98:ff:b7:82:
ae:62:e1:bf:58:b6:65:70:e3:56:cb:e9:6e:2d:78:24:42:b5:
30:50:fa:56
-----BEGIN CERTIFICATE-----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Generated at Mon Jan 8 21:36:28 2024 by rpki-client on console.sobornost.net