Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gbg9jDzffvhW7_lEIcD1EArbgEA.roa
File: Gbg9jDzffvhW7_lEIcD1EArbgEA.roa (raw, json)
Hash identifier: s5MYMVDVsuKJ9TlMxZEig6DRCs7GxAZduiGaBYtLhMI=
Subject key identifier: 19:B8:3D:8C:3C:DF:7E:F8:56:EF:F9:44:21:C0:F5:10:0A:DB:80:40
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F387316B5386F3CBD61BFA23DB6944F0C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gbg9jDzffvhW7_lEIcD1EArbgEA.roa
Signing time: Thu 02 May 2024 08:36:57 +0000
ROA not before: Thu 02 May 2024 08:36:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215131
IP address blocks: 2a10:ccc5:2a10::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 May 2024 06:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:73:16:b5:38:6f:3c:bd:61:bf:a2:3d:b6:94:4f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 2 08:36:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19b83d8c3cdf7ef856eff94421c0f5100adb8040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:17:81:ca:f2:bc:a7:76:da:af:40:a9:7e:
13:f3:89:31:e1:90:25:27:a1:45:51:8b:fe:36:74:
69:90:b4:d9:d5:65:62:1b:da:dc:72:35:93:1d:11:
db:90:e9:3f:1c:44:5e:a4:a6:6a:a4:29:b7:22:06:
5a:ce:de:02:c6:ff:24:dd:61:93:e8:2f:1e:9b:90:
79:5f:3f:91:1a:06:db:52:b6:02:d6:b0:57:1f:1c:
c0:97:f4:28:fa:ec:0f:2d:fb:4b:12:f1:4d:48:e6:
bf:39:a8:25:68:dd:8d:96:52:ae:3a:95:02:fe:cc:
bc:78:ba:31:94:e7:d3:42:fd:6e:30:ae:f2:80:4a:
54:04:49:de:e2:53:2a:d8:f8:f6:3a:8c:da:59:c9:
2c:ff:0d:97:36:57:c1:d4:0b:bd:82:3e:9b:f5:1a:
cd:08:24:66:49:e6:ee:50:fb:9f:e3:eb:87:e2:a6:
d6:1b:bc:fb:90:0b:94:fa:50:de:3f:b8:94:94:41:
1e:98:1a:da:5f:94:f6:97:69:b0:b0:6e:ce:47:0c:
12:bb:23:42:64:16:c2:58:f1:84:31:5f:4e:51:50:
83:1a:57:94:a6:85:5c:a6:18:08:21:a3:2d:b4:5f:
16:b7:b2:1d:3a:5b:0d:cd:0e:f8:2c:a5:04:5b:08:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:3D:8C:3C:DF:7E:F8:56:EF:F9:44:21:C0:F5:10:0A:DB:80:40
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gbg9jDzffvhW7_lEIcD1EArbgEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc5:2a10::/48
Signature Algorithm: sha256WithRSAEncryption
3b:1a:4d:be:27:33:a8:c5:45:6d:82:a3:55:34:f6:46:68:d6:
11:8c:00:6a:32:e8:ce:10:16:c6:a8:d5:94:e5:5f:27:d4:fb:
87:24:ef:50:58:86:db:8b:51:9c:d9:ae:8c:08:c9:e3:f6:40:
82:49:3f:fa:11:8b:fa:6a:ef:1b:88:2c:91:48:e2:6c:00:71:
68:bd:d3:0d:6a:ac:29:69:0d:82:c1:d5:0a:c4:ff:2c:5c:ad:
2e:fd:92:3d:fa:62:d1:dd:80:8c:15:81:7e:6c:a0:36:e2:f1:
6c:c9:92:2b:ab:7d:0d:0d:61:3f:33:cc:99:25:e3:a1:26:66:
41:dd:30:12:31:95:18:bb:1a:b6:d2:8f:19:8d:03:40:d7:c5:
e6:5a:51:9e:51:f0:79:d2:75:65:f8:26:35:2c:09:c1:60:14:
75:8f:38:87:21:2a:ab:f2:78:33:e0:77:6b:da:37:c6:1c:56:
70:58:33:33:3b:2c:ec:a0:9c:f8:f4:d7:80:48:20:e5:90:4a:
c3:9c:ad:c4:20:16:23:ee:e6:8b:77:d7:43:10:77:c5:4f:28:
4a:67:7e:f6:84:70:c7:30:7d:ec:15:58:04:c1:4a:60:10:58:
97:af:e4:3c:03:58:a3:48:23:63:d1:58:c9:7c:5a:22:aa:25:
ed:a1:8c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:43:35 2024 by rpki-client on console-fra.rpki-client.org