Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/GVLbZpr1diVvaEtQqVKWByLKQ_M.roa
File: GVLbZpr1diVvaEtQqVKWByLKQ_M.roa (raw, json)
Hash identifier: lFbUUGAz2QOvXTJH2//v4aU6X2evq4hLI6j673symFE=
Subject key identifier: 19:52:DB:66:9A:F5:76:25:6F:68:4B:50:A9:52:96:07:22:CA:43:F3
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019311D52545E77328670E2C19F0CE62215E
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/GVLbZpr1diVvaEtQqVKWByLKQ_M.roa
Signing time: Sat 09 Nov 2024 16:50:01 +0000
ROA not before: Sat 09 Nov 2024 16:50:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215355
IP address blocks: 2a14:67c0:100::/40 maxlen: 48
2a14:67c0:110::/44 maxlen: 48
2a14:67c0:200::/40 maxlen: 48
2a14:67c0:600::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Nov 2024 13:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:11:d5:25:45:e7:73:28:67:0e:2c:19:f0:ce:62:21:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Nov 9 16:50:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1952db669af576256f684b50a952960722ca43f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:ed:53:6d:d0:4b:0b:8c:ef:8e:ba:24:74:
48:78:db:52:6d:63:3f:27:c5:9e:1b:6e:25:a7:ff:
01:03:bf:8f:8e:f1:9f:d6:a2:c6:34:08:ea:46:61:
83:92:85:2f:38:27:57:33:a8:0e:36:48:f5:13:44:
5e:44:e6:e1:78:15:1d:bf:3c:3d:31:9f:6d:18:84:
3c:22:7c:84:1e:18:55:f3:bf:06:6a:36:c1:8a:e0:
81:a8:aa:42:0f:b9:01:4b:cd:5c:ec:f6:0a:19:69:
f0:23:54:36:da:4d:a7:48:e0:5d:53:ae:d4:69:fc:
60:ad:4d:1e:d9:22:19:e6:0b:1c:d4:75:46:39:cb:
c1:fc:14:0e:7c:54:98:e1:d4:ff:f1:f8:ca:cf:4c:
76:bd:cb:2a:3d:5c:37:70:b9:7b:97:44:eb:64:34:
01:5e:96:40:31:07:35:cf:8b:ee:8f:43:ad:9e:4d:
b9:a5:76:ab:0b:e5:6c:59:9f:dd:f3:6e:71:f1:6d:
88:e8:99:d5:d4:56:95:58:ca:68:a8:b4:19:8d:25:
0f:6c:fc:39:be:fb:5a:9b:4a:79:30:8f:c0:5c:a3:
ed:1f:e9:4e:73:ea:73:16:d8:51:fc:6b:86:b8:99:
42:9a:3d:4a:c0:28:ae:8f:29:81:b2:e1:4d:cb:eb:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:52:DB:66:9A:F5:76:25:6F:68:4B:50:A9:52:96:07:22:CA:43:F3
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/GVLbZpr1diVvaEtQqVKWByLKQ_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:100::-2a14:67c0:2ff:ffff:ffff:ffff:ffff:ffff
2a14:67c0:600::/40
Signature Algorithm: sha256WithRSAEncryption
da:f1:d4:02:95:21:5d:89:69:50:43:5c:96:c7:1c:42:b5:df:
9b:24:ce:7d:59:fc:8e:66:7c:63:8e:c3:df:a2:d0:8d:5e:50:
43:36:21:17:1f:2d:03:e0:fd:bd:fe:38:5e:48:3b:f1:31:fd:
eb:38:ad:d4:30:6e:27:c1:b5:63:78:40:f2:c9:b3:a4:9c:73:
49:b2:99:51:8e:f3:be:8a:a6:d5:78:67:77:1a:e1:fe:4f:68:
e9:3e:a7:54:de:58:11:f8:be:25:ef:95:ac:64:b6:2e:25:58:
79:a0:bc:63:f1:f6:72:41:d2:37:2d:e5:05:91:cf:ee:f6:51:
fc:8a:cc:dc:f0:9a:82:48:8d:ce:72:d1:29:38:a4:f6:45:5b:
3d:76:e6:19:ec:d3:6f:db:e5:66:27:5b:1c:d4:83:3b:c2:7b:
4a:07:a0:9d:fa:a5:d1:be:e6:c1:5c:64:98:63:6c:ab:86:da:
3a:52:ab:3b:cf:26:13:6a:d7:54:39:d2:50:29:a2:f8:db:d4:
54:63:1a:ef:45:4d:92:77:49:8a:d7:f6:38:b2:dd:bd:1c:d6:
5f:8f:1a:25:85:51:87:a0:8a:cd:e3:b8:09:14:a8:7c:c1:d5:
2b:de:84:26:f9:e5:7f:3d:42:2b:45:d7:15:3e:55:fd:4e:1b:
66:09:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:12 2024 by rpki-client on console-ams.rpki-client.org