Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/GdvkiAz_a_X3KGOJQ2lldH4yrfY.roa
File: GdvkiAz_a_X3KGOJQ2lldH4yrfY.roa (raw, json)
Hash identifier: oZpaesI4mjnk0ItYGYT+kyotIK3khERwM+jlyDra9Ws=
Subject key identifier: 19:DB:E4:88:0C:FF:6B:F5:F7:28:63:89:43:69:65:74:7E:32:AD:F6
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 01856F42B0CB6ED0B8436E7DC10D77199CDF
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/GdvkiAz_a_X3KGOJQ2lldH4yrfY.roa
Signing time: Sun 01 Jan 2023 21:35:19 +0000
ROA not before: Sun 01 Jan 2023 21:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212002
IP address blocks: 2001:67c:229c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b0:cb:6e:d0:b8:43:6e:7d:c1:0d:77:19:9c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Jan 1 21:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19dbe4880cff6bf5f7286389436965747e32adf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:c9:ae:84:05:68:ca:b8:15:d9:10:d1:57:
68:c5:a1:dd:d4:41:90:84:bf:4a:63:fc:8b:63:c3:
25:d6:79:8d:9f:f7:14:05:87:30:92:39:70:a4:22:
9d:66:e9:84:b4:af:da:f8:b4:5b:93:ec:60:67:4d:
1a:ff:7e:47:5f:44:32:5b:cc:e5:ad:24:62:51:68:
92:cd:c2:3f:77:03:86:99:49:62:32:dd:9f:ee:22:
6a:dc:b2:f1:14:5d:0f:21:b3:1c:44:ac:6e:19:3e:
2b:94:54:6c:80:5d:55:e2:21:03:81:f7:56:db:23:
9d:27:f0:9b:da:70:f4:51:2c:18:88:d4:13:e7:7c:
ca:3f:54:c7:7f:1a:5f:30:f1:bc:78:78:b7:6f:a6:
6c:41:4d:2d:84:3d:fa:17:f3:1e:d1:75:24:c5:42:
57:ac:c3:ca:a4:98:19:e1:2d:fa:d8:20:04:c4:41:
22:96:51:4f:8f:08:c3:a3:a7:6e:d9:e0:96:94:56:
48:45:5f:d7:48:35:c4:80:06:c8:f0:39:25:5f:80:
3d:80:a5:ef:8a:1f:18:1c:83:fa:c2:3d:96:a7:13:
6a:7e:96:a2:99:68:98:d7:1c:79:e7:05:ba:c0:18:
72:8c:1a:40:c0:98:68:6c:68:25:68:ea:e4:a3:9b:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DB:E4:88:0C:FF:6B:F5:F7:28:63:89:43:69:65:74:7E:32:AD:F6
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/GdvkiAz_a_X3KGOJQ2lldH4yrfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:229c::/48
Signature Algorithm: sha256WithRSAEncryption
41:94:36:c4:24:c4:f9:a3:11:bc:57:a3:9c:6d:88:d8:66:8c:
17:e0:e9:15:8b:65:62:6e:b5:0c:c9:f7:a0:35:49:6c:59:d5:
b2:8d:56:30:db:a1:3e:3b:f8:e1:74:68:a4:41:4c:03:e2:3d:
5a:5c:b2:58:07:25:fa:93:d8:96:b2:6e:e4:95:5d:fd:3c:22:
ff:b5:91:31:f8:91:e4:da:ff:90:83:5d:ac:f3:33:b4:d8:0a:
31:bf:be:04:44:80:00:63:a4:f0:10:05:b7:9d:62:f0:79:c5:
82:96:d1:f3:2a:f4:08:06:bc:67:3b:9c:57:6a:44:d0:23:3e:
ae:69:fa:8a:17:76:4a:a5:9b:61:67:10:b1:c9:4a:ee:2d:26:
e8:16:de:32:99:45:b5:85:83:26:b5:8d:d2:03:b7:1b:ff:48:
ef:0d:fa:2b:ec:2a:a4:9d:8c:74:86:66:08:b0:ae:80:ec:81:
10:49:ba:0f:ab:2f:7b:d1:ff:f1:09:49:98:36:db:af:86:e9:
93:8a:81:9e:22:b8:6e:e9:2c:80:6c:e9:10:ad:99:75:a8:e3:
00:02:a7:86:7d:4d:1e:bb:f9:b4:ae:42:9f:be:2a:65:1c:0b:
38:dd:bf:b7:11:45:dd:36:93:2c:c5:f7:90:fe:43:13:12:36:
3e:cc:ef:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:46 2024 by rpki-client on console-ams.rpki-client.org