Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yyqJskUQyEk__Of15-YTUStTrBE.roa
File: yyqJskUQyEk__Of15-YTUStTrBE.roa (raw, json)
Hash identifier: iRSNw0Ad3a8wT/OYEWBTPmt84kSlKV4rFEwEWMYfaBQ=
Subject key identifier: CB:2A:89:B2:45:10:C8:49:3F:FC:E7:F5:E7:E6:13:51:2B:53:AC:11
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018ED19F138A1D077EB1AD0A9BAD75620CC3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yyqJskUQyEk__Of15-YTUStTrBE.roa
Signing time: Fri 12 Apr 2024 09:24:07 +0000
ROA not before: Fri 12 Apr 2024 09:24:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152598
IP address blocks: 2a0e:15c0:6::/48 maxlen: 48
2a0f:3d86:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 May 2024 08:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:9f:13:8a:1d:07:7e:b1:ad:0a:9b:ad:75:62:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 12 09:24:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb2a89b24510c8493ffce7f5e7e613512b53ac11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:fa:44:1e:f8:aa:1b:f3:c9:ab:6e:ed:99:
a4:f0:6d:7f:fa:ec:f7:2f:e9:2b:8b:2f:68:ec:f6:
68:ec:c8:d5:a8:9f:83:eb:05:4a:2e:d6:cc:3a:43:
0b:21:71:b4:08:a7:f8:bb:da:e2:93:1d:31:a3:67:
da:31:60:62:b7:94:c5:a4:0b:44:09:e0:28:12:d8:
7b:09:e9:92:2b:11:51:fb:7e:01:df:46:41:9b:a8:
48:17:58:55:ca:a8:74:e8:4b:7d:7c:7f:4c:5a:00:
fe:21:b7:7f:f8:98:9c:67:92:58:e6:4c:0f:65:52:
b3:67:c2:14:cc:a4:f5:56:14:82:37:94:37:f7:65:
13:8f:11:77:e0:d3:06:25:f1:bb:1b:e5:9f:f2:bc:
a8:06:c3:ab:28:9b:72:db:02:02:f5:4a:ca:9f:cc:
5a:16:b0:a2:34:15:a0:b3:65:12:79:0d:85:97:ea:
66:1d:55:6a:2e:ee:51:26:9c:40:21:ee:a2:43:a4:
0c:de:0d:dc:f4:7d:92:9b:44:f4:9f:c6:ba:bc:ff:
27:2e:d6:46:d6:73:90:5b:42:19:9e:25:ad:c0:bd:
45:4b:fe:7e:42:47:b7:15:20:b9:d7:96:15:ab:00:
12:8d:85:6c:2d:ee:8f:19:fe:a8:61:9b:a5:19:83:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2A:89:B2:45:10:C8:49:3F:FC:E7:F5:E7:E6:13:51:2B:53:AC:11
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yyqJskUQyEk__Of15-YTUStTrBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c0:6::/48
2a0f:3d86:1::/48
Signature Algorithm: sha256WithRSAEncryption
18:97:5d:4b:07:b2:bd:46:13:19:b1:79:f8:b7:eb:ef:88:b8:
04:0d:b4:8c:48:cd:bf:62:02:37:a5:ea:be:fc:df:e6:ce:92:
0e:82:58:65:50:40:77:bb:39:72:37:08:0e:30:f9:d9:7f:fd:
d8:66:51:44:7d:8b:7f:44:de:a3:30:25:ad:0f:ba:f5:7d:f5:
36:8f:19:81:9d:20:c9:4e:12:e7:b1:52:10:94:4c:d1:29:e0:
70:15:cf:19:e9:f3:bf:52:e6:24:fc:8e:83:b2:44:fe:a7:ba:
06:a5:64:1c:34:f7:e1:38:7f:a1:ca:bf:49:ba:8b:4e:77:02:
c6:0d:df:49:b1:cf:08:db:ea:44:b2:4a:62:8d:97:96:d2:d9:
6e:1c:b9:1d:3b:50:9c:b0:41:41:7c:39:7e:6f:95:89:52:ef:
4e:ea:6a:26:2f:74:d2:cd:93:e9:79:8e:f9:24:6f:69:ef:62:
09:07:06:5a:4a:f7:ef:a9:51:1d:03:35:3c:90:bf:df:71:62:
b5:7a:82:55:9e:23:2a:bb:0f:ac:d8:a2:fb:e2:b0:f0:2b:86:
52:05:32:1e:b4:f0:a2:43:6f:8c:37:73:79:a0:c4:13:60:e8:
3b:6a:65:a9:a6:60:8a:79:b6:63:9d:80:a5:93:84:b9:41:4b:
b7:a0:2a:09
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY7RnxOKHQd+sa0Km611YgzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNDEyMDkyNDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjJhODliMjQ1MTBjODQ5M2ZmY2U3ZjVlN2U2MTM1MTJiNTNhYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmb6RB74qhvzyatu7Zmk8G1/+uz3
L+kriy9o7PZo7MjVqJ+D6wVKLtbMOkMLIXG0CKf4u9rikx0xo2faMWBit5TFpAtE
CeAoEth7CemSKxFR+34B30ZBm6hIF1hVyqh06Et9fH9MWgD+Ibd/+JicZ5JY5kwP
ZVKzZ8IUzKT1VhSCN5Q392UTjxF34NMGJfG7G+Wf8ryoBsOrKJty2wIC9UrKn8xa
FrCiNBWgs2USeQ2Fl+pmHVVqLu5RJpxAIe6iQ6QM3g3c9H2Sm0T0n8a6vP8nLtZG
1nOQW0IZniWtwL1FS/5+Qke3FSC515YVqwASjYVsLe6PGf6oYZulGYN82wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMsqibJFEMhJP/zn9efmE1ErU6wRMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEveXlxSnNrVVF5RWtfX09mMTUtWVRVU3RUckJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg4VwAAG
AwcAKg89hgABMA0GCSqGSIb3DQEBCwUAA4IBAQAYl11LB7K9RhMZsXn4t+vviLgE
DbSMSM2/YgI3peq+/N/mzpIOglhlUEB3uzlyNwgOMPnZf/3YZlFEfYt/RN6jMCWt
D7r1ffU2jxmBnSDJThLnsVIQlEzRKeBwFc8Z6fO/UuYk/I6DskT+p7oGpWQcNPfh
OH+hyr9JuotOdwLGDd9Jsc8I2+pEskpijZeW0tluHLkdO1CcsEFBfDl+b5WJUu9O
6momL3TSzZPpeY75JG9p72IJBwZaSvfvqVEdAzU8kL/fcWK1eoJVniMquw+s2KL7
4rDwK4ZSBTIetPCiQ2+MN3N5oMQTYOg7amWppmCKebZjnYClk4S5QUu3oCoJ
-----END CERTIFICATE-----
Generated at Sun May 11 14:52:30 2025 by rpki-client