Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/gpV_TxdRAmycFo0h-MU1KBK5-N8.roa
File: gpV_TxdRAmycFo0h-MU1KBK5-N8.roa (raw, json)
Hash identifier: kW+7cPh4Na/SSc/kjnTJl09tW/Wcm1/vkUqMMjEglV8=
Subject key identifier: 82:95:7F:4F:17:51:02:6C:9C:16:8D:21:F8:C5:35:28:12:B9:F8:DF
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 0189A557752AAAFD5ED142C44D73F01D88A8
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/gpV_TxdRAmycFo0h-MU1KBK5-N8.roa
Signing time: Sun 30 Jul 2023 05:48:39 +0000
ROA not before: Sun 30 Jul 2023 05:48:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207947
IP address blocks: 2001:67c:964::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a5:57:75:2a:aa:fd:5e:d1:42:c4:4d:73:f0:1d:88:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Jul 30 05:48:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82957f4f1751026c9c168d21f8c5352812b9f8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:f6:7f:f9:46:25:3b:71:95:a7:77:57:c4:
21:64:ff:c4:86:99:dc:5d:53:42:64:82:b3:ba:be:
da:0d:64:43:11:2c:95:10:49:97:1a:ea:f0:ec:e8:
99:99:47:99:65:5f:00:1e:f6:d1:c6:aa:95:0c:f2:
d5:d3:f7:2b:db:e5:c0:a7:60:48:65:46:58:64:1c:
02:44:86:92:ab:be:f8:89:09:f3:ed:65:0e:50:32:
65:a8:b9:95:86:74:aa:68:11:45:e5:06:9d:1d:a3:
b6:9b:5b:ef:2b:5c:31:00:a3:f7:57:65:eb:24:37:
8f:55:36:7e:dc:6c:47:38:7e:32:a0:f9:78:58:11:
a0:04:17:3d:da:58:c3:82:99:9f:65:ee:b9:30:30:
67:4f:c1:13:fa:76:42:d6:22:24:b7:ef:1d:91:48:
be:10:0a:86:52:a2:82:e2:30:67:3c:aa:be:8f:47:
b3:2c:1a:25:41:5a:88:ca:b9:e3:eb:85:84:cd:39:
fd:d3:b4:55:8a:60:33:da:de:21:15:7c:f9:fc:3e:
20:97:39:ab:00:8b:1d:bd:71:06:5f:20:a1:8b:73:
e8:ad:6d:ed:b4:ee:a9:67:70:26:80:3f:0f:f3:ed:
94:20:79:cb:60:f6:29:5c:cb:eb:9a:ab:1a:8c:2a:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:95:7F:4F:17:51:02:6C:9C:16:8D:21:F8:C5:35:28:12:B9:F8:DF
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/gpV_TxdRAmycFo0h-MU1KBK5-N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:964::/48
Signature Algorithm: sha256WithRSAEncryption
12:2b:25:7e:ad:57:de:7f:0a:94:dd:11:a1:c6:2e:b4:96:05:
19:ee:18:f7:1e:a2:b7:94:f3:4d:fe:4e:9d:0b:27:fc:a3:e6:
e3:9b:dc:0f:ae:b8:18:df:4d:d9:7c:6a:a4:9f:49:4a:61:3c:
57:50:dd:73:a7:b8:db:97:d3:5e:35:8e:28:a7:ad:ff:7c:db:
c9:af:8d:4e:13:00:4f:de:db:f2:2a:bb:96:eb:f3:af:04:05:
d8:4c:9b:95:7c:5d:9d:c2:d8:5e:34:9a:0b:f1:5d:56:a8:20:
e2:66:f2:bd:27:49:93:b6:c0:b8:47:95:61:68:70:93:8a:9b:
9b:49:e6:16:fe:43:2b:4e:53:07:58:e9:59:c5:52:39:0a:e3:
5e:10:45:e2:e3:fb:9b:8b:e5:cb:2d:b7:70:1c:da:de:bb:97:
33:c4:75:b1:6a:27:cd:a3:f2:ce:0f:91:aa:bb:9c:46:77:1f:
6a:f0:94:2f:2b:d4:11:82:0b:59:71:05:35:15:37:c4:64:d7:
8f:4c:8a:59:8f:2e:e8:06:8d:31:bb:18:2c:8c:85:eb:f3:d3:
ab:74:15:7d:61:e7:7f:e7:77:80:d4:71:2d:19:5f:38:81:19:
a0:fb:ea:cf:d4:d9:d7:79:f6:13:2e:31:d4:dc:6b:e9:47:ec:
f7:23:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:09 2024 by rpki-client on console-fra.rpki-client.org