Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/GX30V8pkD3bGjTrIkhSW72JuuKo.roa
File: GX30V8pkD3bGjTrIkhSW72JuuKo.roa (raw, json)
Hash identifier: QEw5/LuqIOlrADf0tGVrtqYITqQvThk+RhZbm30DWpU=
Subject key identifier: 19:7D:F4:57:CA:64:0F:76:C6:8D:3A:C8:92:14:96:EF:62:6E:B8:AA
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01930B4F39173544CB864A48C91A37464A3D
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/GX30V8pkD3bGjTrIkhSW72JuuKo.roa
Signing time: Fri 08 Nov 2024 10:26:01 +0000
ROA not before: Fri 08 Nov 2024 10:26:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213893
IP address blocks: 2a0d:d940:10::/44 maxlen: 44
Validation: Failed, certificate revoked on Sat 09 Nov 2024 04:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:4f:39:17:35:44:cb:86:4a:48:c9:1a:37:46:4a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Nov 8 10:26:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=197df457ca640f76c68d3ac8921496ef626eb8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:8e:d5:46:6b:32:e1:34:35:44:98:b8:2b:
67:93:77:01:f7:e2:28:1e:c6:2b:f7:76:0d:b0:95:
7e:4b:58:90:b3:48:3d:7b:1e:ed:f8:58:8f:dc:21:
3e:87:39:c3:3f:1d:84:f5:6b:13:4c:61:a8:a1:04:
1c:68:c2:11:b8:e2:e3:eb:86:89:14:12:a4:2c:9a:
0e:c1:78:31:4d:5a:24:c1:30:ff:7b:3a:d9:4d:db:
bb:3b:91:18:bf:81:f6:e6:29:1e:8c:b6:7c:ac:54:
7b:d4:ed:8e:10:e6:0c:9c:96:71:d4:56:fd:e0:dc:
64:62:af:42:86:30:31:61:93:e3:cb:50:7b:50:bb:
29:fe:26:99:13:cb:0a:81:41:29:b1:96:fb:3d:7a:
8a:25:7e:c9:cc:6e:72:19:f1:4d:76:a3:01:ed:20:
de:45:98:34:02:dc:d3:69:07:7e:56:45:32:e6:cd:
76:c1:1e:23:51:96:ce:a6:c0:ca:a8:5f:54:e5:47:
92:a1:ff:0c:56:4b:7d:8b:6e:73:5f:2c:ba:20:82:
00:35:11:e3:f9:c0:42:29:84:73:e7:5c:54:1d:25:
c2:c9:c8:00:0b:62:e5:5a:34:6b:41:40:cf:b4:ff:
1e:4e:fe:ff:af:ac:bb:a7:da:9e:f3:2c:32:8a:c7:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7D:F4:57:CA:64:0F:76:C6:8D:3A:C8:92:14:96:EF:62:6E:B8:AA
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/GX30V8pkD3bGjTrIkhSW72JuuKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:10::/44
Signature Algorithm: sha256WithRSAEncryption
a2:18:f5:0e:c9:f5:d8:d2:7f:35:20:13:d3:d3:f9:1d:a2:13:
2b:26:55:bf:6f:c7:14:f5:a6:bc:f2:4a:ab:2e:09:76:93:f1:
c4:e0:de:9c:4f:e3:e5:f6:27:11:5a:fa:b7:54:81:a0:3d:f9:
79:2f:c1:1a:97:39:a2:5b:a1:af:9a:6c:72:09:9f:87:0f:fe:
31:38:71:59:7b:49:a1:2a:f9:0d:2b:eb:1e:04:88:70:33:71:
b3:d6:76:a5:96:4d:bb:a9:0b:ad:bd:ca:e4:1a:0d:c8:9d:d3:
31:94:72:37:34:a3:f8:49:69:24:a5:ac:33:2c:93:88:19:60:
64:bc:9a:4a:c7:3f:f5:17:9b:f4:25:4b:01:9b:df:e2:ea:e3:
3e:75:16:3c:3e:b8:92:8c:ac:de:e2:ab:aa:19:fc:02:de:fa:
4c:6c:58:3f:29:4a:6d:25:b4:b3:34:5f:ae:a8:cf:46:75:5b:
eb:8d:d9:fb:ce:e4:9f:b2:13:37:45:7d:a5:9d:ce:db:16:40:
b5:f2:80:88:21:3f:c7:c0:e8:e7:cc:03:45:9b:9d:a2:3e:16:
cb:59:ed:b7:b8:99:ca:fd:5c:80:85:55:25:06:c3:b4:fd:6c:
67:88:68:35:7f:ff:35:69:02:4d:22:fa:5c:9a:88:2d:71:63:
58:2f:5d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:08:09 2025 by rpki-client