Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Yn6g6pw79ICfYVK_fyt1Jd5SEik.roa
File: Yn6g6pw79ICfYVK_fyt1Jd5SEik.roa (raw, json)
Hash identifier: /NBvfiKoYcTJNkWM8V5flSuUiy1eMi7KR5bk5U3vhvA=
Subject key identifier: 62:7E:A0:EA:9C:3B:F4:80:9F:61:52:BF:7F:2B:75:25:DE:52:12:29
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 018DE6605194FA7A86489E9495A152F49D7B
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Yn6g6pw79ICfYVK_fyt1Jd5SEik.roa
Signing time: Mon 26 Feb 2024 17:04:48 +0000
ROA not before: Mon 26 Feb 2024 17:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215419
IP address blocks: 2a13:7b40:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Feb 2024 12:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:60:51:94:fa:7a:86:48:9e:94:95:a1:52:f4:9d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Feb 26 17:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=627ea0ea9c3bf4809f6152bf7f2b7525de521229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:ec:5b:f1:9f:ee:ee:bf:c0:44:b5:11:90:
6e:2f:8d:ae:46:2e:53:4a:9e:7f:8e:d5:13:b1:cd:
14:00:d3:af:a7:a1:e1:75:d4:ee:ee:cd:be:ef:dc:
8d:c9:eb:7f:2c:75:4d:e3:44:ae:4c:00:2d:04:88:
fd:7a:82:e4:61:c8:da:e8:68:fc:53:2e:29:4e:03:
9a:c2:b3:d7:f7:d3:e2:58:e7:bc:ea:d0:f8:b4:42:
92:15:c6:ce:b3:cb:62:e4:0c:29:5a:c4:5f:da:75:
49:84:f3:a4:c6:55:80:aa:11:21:c9:74:d8:9a:42:
cd:fa:ce:8c:e7:bc:70:7d:8c:18:97:da:69:33:2a:
58:56:46:61:2e:45:c7:3c:a5:e3:ce:7e:c2:98:1e:
0f:26:8c:f5:8e:f8:8c:f2:73:45:c0:0e:2e:ad:1e:
79:93:24:01:fd:9e:85:47:6e:64:fa:57:a7:0a:d2:
55:ca:92:a2:2d:1d:b8:f0:1f:58:ce:b0:24:9c:9e:
90:c2:5b:3c:15:6d:93:82:6c:16:82:71:c3:05:69:
46:d8:87:2c:33:57:52:bf:f0:72:6d:0f:15:da:c6:
57:09:96:b5:dc:7d:15:74:99:b3:d4:f7:0d:84:76:
cc:f5:f9:56:65:98:89:cc:1e:55:f8:8c:13:b5:ee:
95:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7E:A0:EA:9C:3B:F4:80:9F:61:52:BF:7F:2B:75:25:DE:52:12:29
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Yn6g6pw79ICfYVK_fyt1Jd5SEik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7b40:2::/48
Signature Algorithm: sha256WithRSAEncryption
99:fe:3f:9b:1d:98:3b:bc:d6:a5:77:c4:56:92:55:af:80:1b:
e8:91:58:ce:7e:a0:11:fb:43:6a:51:b1:9e:64:de:c8:9e:ec:
9e:1b:13:55:ee:36:bd:5d:93:40:32:51:96:59:13:0b:88:66:
54:2d:81:5a:37:d7:04:de:8c:19:89:f7:a9:78:6b:94:15:78:
7a:31:c3:1b:1d:ef:89:3c:f9:a3:56:52:55:42:a6:d5:33:71:
12:9a:93:d2:a5:f2:b9:32:c9:a4:27:82:87:26:e4:d8:be:71:
f6:15:59:09:cf:85:fc:d7:d6:00:ae:e4:40:86:35:b5:7a:3c:
03:f6:f6:21:4b:78:35:bd:79:2b:34:eb:6e:8f:2b:5c:71:98:
05:62:a7:b0:26:db:83:dc:c8:0a:68:8e:cb:db:bb:50:ff:50:
29:aa:77:17:4f:10:3d:f8:b8:7e:8f:66:bb:3e:c8:51:f4:a3:
8a:9e:6b:21:01:0e:a3:bd:98:d9:8b:6a:52:d9:2a:4f:c1:bf:
91:66:67:21:1c:5a:a3:de:63:dc:ac:d5:e9:66:c3:8f:e1:1a:
b4:12:67:34:64:04:e1:18:33:bc:6f:d3:39:ad:35:c9:63:6f:
fd:14:e7:1d:74:f3:53:c6:8f:02:75:93:ec:cd:9e:b6:61:93:
e3:dd:86:e1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY3mYFGU+nqGSJ6UlaFS9J17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODhiNDIxNzVkNjIxNGEzMWE1NDA3ZGI4YjZjOTVmMWVj
NjBkNGUwHhcNMjQwMjI2MTcwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjdlYTBlYTljM2JmNDgwOWY2MTUyYmY3ZjJiNzUyNWRlNTIxMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaHsW/Gf7u6/wES1EZBuL42uRi5T
Sp5/jtUTsc0UANOvp6HhddTu7s2+79yNyet/LHVN40SuTAAtBIj9eoLkYcja6Gj8
Uy4pTgOawrPX99PiWOe86tD4tEKSFcbOs8ti5AwpWsRf2nVJhPOkxlWAqhEhyXTY
mkLN+s6M57xwfYwYl9ppMypYVkZhLkXHPKXjzn7CmB4PJoz1jviM8nNFwA4urR55
kyQB/Z6FR25k+lenCtJVypKiLR248B9YzrAknJ6Qwls8FW2TgmwWgnHDBWlG2Ics
M1dSv/BybQ8V2sZXCZa13H0VdJmz1PcNhHbM9flWZZiJzB5V+IwTte6ViwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGJ+oOqcO/SAn2FSv38rdSXeUhIpMB8GA1UdIwQY
MBaAFFaItCF11iFKMaVAfbi2yV8exg1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQt
OWY5NDJiYzEyYTdlLzEvWW42ZzZwdzc5SUNmWVZLX2Z5dDFKZDVTRWlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQtOWY5NDJiYzEyYTdl
LzEvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhN7QAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCZ/j+bHZg7vNald8RWklWvgBvokVjOfqAR+0Nq
UbGeZN7InuyeGxNV7ja9XZNAMlGWWRMLiGZULYFaN9cE3owZifepeGuUFXh6McMb
He+JPPmjVlJVQqbVM3ESmpPSpfK5MsmkJ4KHJuTYvnH2FVkJz4X819YAruRAhjW1
ejwD9vYhS3g1vXkrNOtujytccZgFYqewJtuD3MgKaI7L27tQ/1ApqncXTxA9+Lh+
j2a7PshR9KOKnmshAQ6jvZjZi2pS2SpPwb+RZmchHFqj3mPcrNXpZsOP4Rq0Emc0
ZAThGDO8b9M5rTXJY2/9FOcddPNTxo8CdZPszZ62YZPj3Ybh
-----END CERTIFICATE-----
Generated at Tue Feb 27 16:06:18 2024 by rpki-client on console.sobornost.net