Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GdDnWdDVtMVci2h9mCJji5Vtmyw.roa
File: GdDnWdDVtMVci2h9mCJji5Vtmyw.roa (raw, json)
Hash identifier: zPfAKn0emACNflVled92F6iB2UtGHAAFhBwkQI+1Krw=
Subject key identifier: 19:D0:E7:59:D0:D5:B4:C5:5C:8B:68:7D:98:22:63:8B:95:6D:9B:2C
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8D1831B38980DBEF3FB0A1F401620
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GdDnWdDVtMVci2h9mCJji5Vtmyw.roa
Signing time: Mon 01 Jan 2024 20:30:50 +0000
ROA not before: Mon 01 Jan 2024 20:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3280
IP address blocks: 2a0c:9a40:8086::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 19:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d1:83:1b:38:98:0d:be:f3:fb:0a:1f:40:16:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19d0e759d0d5b4c55c8b687d9822638b956d9b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:99:ff:f7:7f:4c:8f:f2:6b:9c:f3:e6:7c:
c5:8d:fb:52:4c:2e:d2:a6:2b:8d:ba:96:a4:d6:83:
be:6e:ef:80:39:f2:17:63:40:99:33:ae:17:dd:d1:
a6:98:af:62:3d:74:6d:fd:b5:52:f4:f9:82:10:9b:
15:fa:97:13:c1:61:3d:5e:bc:b6:7e:a6:26:0a:32:
80:fb:9a:67:9f:ad:4f:76:01:5b:eb:d5:77:5f:6d:
68:3e:2e:a7:0e:94:cc:11:8e:2f:8a:75:64:95:cb:
42:c3:23:e5:57:eb:ab:7c:34:22:d4:44:e9:10:50:
84:d4:51:79:27:00:06:3a:fb:1b:3d:37:a1:06:62:
21:84:5a:f5:4b:30:0e:48:ae:d2:1b:0a:01:9b:ef:
c3:26:e3:d3:a8:69:ee:28:39:aa:e4:4a:d6:a1:f6:
ae:97:01:5e:c5:f8:fd:1e:7b:d8:34:4c:1c:89:a5:
c6:b3:cb:32:99:f8:d4:d0:0f:fd:fa:95:6a:ac:5c:
46:7d:84:bd:96:47:0b:91:19:45:ab:1f:fa:a6:30:
05:23:62:a0:52:66:16:f2:6e:00:92:2c:6f:9f:79:
54:c1:73:18:60:b6:a5:d1:75:0d:fb:37:cb:db:13:
99:dc:4e:48:4a:14:8a:e1:13:61:fd:29:df:22:76:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:E7:59:D0:D5:B4:C5:5C:8B:68:7D:98:22:63:8B:95:6D:9B:2C
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GdDnWdDVtMVci2h9mCJji5Vtmyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8086::/48
Signature Algorithm: sha256WithRSAEncryption
14:2b:cf:65:36:ff:16:be:de:d7:69:50:47:b9:a7:76:a0:cd:
3d:d0:b0:f8:09:1a:09:47:49:64:ca:c1:cc:5d:87:c3:9f:ad:
db:f6:57:b0:32:e7:c2:35:f8:c8:eb:fd:b4:a8:8e:64:b1:97:
1d:23:8f:17:0f:4f:34:7f:33:cf:41:9d:fd:1c:b2:c6:01:0d:
53:7d:e6:84:f6:fa:7c:54:bc:ec:9e:ee:c9:ba:5e:95:00:a2:
65:b2:8d:06:17:19:b5:2d:84:08:e1:37:1b:16:3f:1e:2b:7f:
8e:e5:d2:f1:3e:af:1a:33:9e:30:2d:2e:38:13:42:2b:04:6a:
a6:83:8c:ca:ea:d7:52:98:f2:f8:89:b5:c9:dc:fb:ea:26:64:
0b:37:a0:d0:e8:86:f6:78:29:53:93:41:e9:93:e3:a4:dd:db:
0f:d8:91:9c:26:01:ce:44:cd:d4:32:88:15:4f:bb:99:86:58:
bd:9c:64:b1:f7:61:4b:e2:9f:d4:47:c4:c2:14:b6:5d:85:72:
4c:d4:f4:2c:c7:48:3c:00:c0:6c:31:22:81:c8:01:15:c0:cb:
a2:bd:c5:6a:e5:4f:04:8e:14:86:26:b7:b7:78:50:7a:87:58:
9e:4a:8a:c1:b6:32:a1:44:be:2f:2e:aa:69:45:bb:a0:f8:87:
64:bd:60:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:48 2025 by rpki-client