Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gyNHSTP603Q38QGlYteWs81bG2Q.roa
File: gyNHSTP603Q38QGlYteWs81bG2Q.roa (raw, json)
Hash identifier: MxSGRz0oal0jJnmhWOKXMXNrFYgVxe/8SjYgbNGgk7A=
Subject key identifier: 83:23:47:49:33:FA:D3:74:37:F1:01:A5:62:D7:96:B3:CD:5B:1B:64
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E8FE51F585DBD84348CC39A1FB7D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gyNHSTP603Q38QGlYteWs81bG2Q.roa
Signing time: Tue 06 Feb 2024 18:24:18 +0000
ROA not before: Tue 06 Feb 2024 18:24:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200890
IP address blocks: 2a0f:b241:d8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e8:fe:51:f5:85:db:d8:43:48:cc:39:a1:fb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8323474933fad37437f101a562d796b3cd5b1b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:99:54:25:ab:d0:64:d6:f4:c4:97:8e:ed:
b4:0d:32:bb:5e:e8:75:dd:2c:ec:88:1a:6d:36:b8:
d9:f8:ea:48:29:70:b4:6c:87:26:40:97:3c:cc:b6:
cb:a8:d4:57:31:97:0f:9c:40:ae:2c:d9:86:b3:23:
a5:0d:fb:d2:99:ba:63:95:19:20:5d:0a:19:01:ff:
4a:a5:ac:6f:98:18:1e:44:a1:a2:49:65:bc:80:3c:
2d:02:ab:02:9b:0c:61:45:90:4e:97:90:26:49:80:
d6:23:08:c1:a5:0e:09:53:6f:0d:ad:bf:08:f4:04:
a6:e5:09:78:90:94:75:f9:ce:a0:7c:70:19:95:77:
63:68:00:18:2f:ab:b1:c6:a7:2d:5b:da:72:99:22:
eb:c4:2f:32:e7:70:e4:64:73:1e:38:2b:d3:3d:61:
61:75:f5:37:e0:9d:ff:8d:a4:1e:02:88:40:34:00:
be:4c:59:7c:84:a9:0c:17:83:e5:fe:02:a9:31:0a:
5a:e4:64:5a:ba:a7:fb:18:8d:2e:7b:f4:72:d2:91:
a4:df:4a:59:36:2f:87:e6:a0:a2:00:9f:d5:8f:6f:
84:74:b4:27:b6:10:f0:db:35:84:c5:68:77:40:e7:
b2:3e:19:97:5b:4d:23:a4:50:60:d9:b9:bc:7d:da:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:23:47:49:33:FA:D3:74:37:F1:01:A5:62:D7:96:B3:CD:5B:1B:64
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gyNHSTP603Q38QGlYteWs81bG2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d8::/48
Signature Algorithm: sha256WithRSAEncryption
88:fc:84:e8:c8:71:c2:2d:7c:a2:d4:dc:ee:3b:e5:62:2c:ce:
c4:65:9b:e0:c3:43:37:e8:e4:43:d9:af:e7:a9:02:3a:16:bb:
b0:c9:04:db:96:ac:e9:ff:44:57:db:3e:fd:95:11:66:cf:4c:
ed:3b:05:8a:4b:fd:c8:17:b0:c1:47:e4:ff:f8:a7:2c:85:99:
ea:1b:99:e4:e1:06:2b:9a:55:f0:c3:9b:75:86:cf:0d:ef:73:
82:3f:f2:d5:57:ec:9c:55:cc:35:61:78:e9:d8:39:7d:37:ec:
c1:5d:97:57:41:10:40:8e:c3:f6:5e:b7:c2:de:b5:f8:a2:93:
e9:f2:58:00:15:49:ce:8e:3a:0c:db:04:49:5f:31:55:89:37:
09:70:db:c6:d8:1e:8c:ca:21:9b:5c:c8:25:8d:a7:90:34:e2:
f8:9f:1c:c8:55:3a:cf:13:38:f5:2c:af:98:ad:cb:3c:b4:02:
c7:c7:06:b1:3d:99:25:a8:c9:93:15:2c:21:bb:dc:9d:af:52:
bf:0a:d2:5d:0c:08:89:31:ad:06:a1:e2:c0:05:0e:ac:90:a0:
bb:ea:87:a5:6d:b2:c7:58:15:0e:0d:89:e9:7a:51:37:18:85:
b1:fc:6e:15:ca:b1:a7:1a:5c:01:98:63:77:7a:e0:d6:a7:1a:
cb:42:a2:9c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/qej+UfWF29hDSMw5oft9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzIzNDc0OTMzZmFkMzc0MzdmMTAxYTU2MmQ3OTZiM2NkNWIxYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB+ZVCWr0GTW9MSXju20DTK7Xuh1
3SzsiBptNrjZ+OpIKXC0bIcmQJc8zLbLqNRXMZcPnECuLNmGsyOlDfvSmbpjlRkg
XQoZAf9KpaxvmBgeRKGiSWW8gDwtAqsCmwxhRZBOl5AmSYDWIwjBpQ4JU28Nrb8I
9ASm5Ql4kJR1+c6gfHAZlXdjaAAYL6uxxqctW9pymSLrxC8y53DkZHMeOCvTPWFh
dfU34J3/jaQeAohANAC+TFl8hKkMF4Pl/gKpMQpa5GRauqf7GI0ue/Ry0pGk30pZ
Ni+H5qCiAJ/Vj2+EdLQnthDw2zWExWh3QOeyPhmXW00jpFBg2bm8fdpsMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIMjR0kz+tN0N/EBpWLXlrPNWxtkMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvZ3lOSFNUUDYwM1EzOFFHbFl0ZVdzODFiRzJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDY
MA0GCSqGSIb3DQEBCwUAA4IBAQCI/IToyHHCLXyi1NzuO+ViLM7EZZvgw0M36ORD
2a/nqQI6FruwyQTblqzp/0RX2z79lRFmz0ztOwWKS/3IF7DBR+T/+KcshZnqG5nk
4QYrmlXww5t1hs8N73OCP/LVV+ycVcw1YXjp2Dl9N+zBXZdXQRBAjsP2XrfC3rX4
opPp8lgAFUnOjjoM2wRJXzFViTcJcNvG2B6MyiGbXMgljaeQNOL4nxzIVTrPEzj1
LK+Yrcs8tALHxwaxPZklqMmTFSwhu9ydr1K/CtJdDAiJMa0GoeLABQ6skKC76oel
bbLHWBUODYnpelE3GIWx/G4VyrGnGlwBmGN3euDWpxrLQqKc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org