Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/gshB-j4OHOvQueAzQ2VQ54MbGB4.roa
File: gshB-j4OHOvQueAzQ2VQ54MbGB4.roa (raw, json)
Hash identifier: 3SK6Uu8TI4v6SlCveHegSBprc93xBnuiip9+nky4UvM=
Subject key identifier: 82:C8:41:FA:3E:0E:1C:EB:D0:B9:E0:33:43:65:50:E7:83:1B:18:1E
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018C3A8DB6C963D66723C59A938571DD00A7
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/gshB-j4OHOvQueAzQ2VQ54MbGB4.roa
Signing time: Tue 05 Dec 2023 15:16:55 +0000
ROA not before: Tue 05 Dec 2023 15:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 2a0c:9e04::/32 maxlen: 32
2a0c:fe02::/32 maxlen: 32
2a0c:9e03::/32 maxlen: 32
2a0c:fe05::/32 maxlen: 32
2a0c:fe04::/32 maxlen: 32
2a0c:9e07::/32 maxlen: 32
2a0c:fe03::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:8d:b6:c9:63:d6:67:23:c5:9a:93:85:71:dd:00:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 5 15:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82c841fa3e0e1cebd0b9e033436550e7831b181e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:44:72:54:0c:e3:36:b6:b1:d0:49:2f:8b:
9b:f2:97:5f:cf:c3:63:4f:3e:5f:a2:f4:8a:d7:6d:
96:d4:53:91:70:63:e7:5d:15:8e:60:33:6d:21:70:
92:26:3b:3a:09:01:32:f8:50:4b:2d:0d:a1:e4:01:
ad:28:3b:de:3f:9f:21:a5:d3:5d:a1:fb:53:d2:fc:
f9:56:e8:59:d1:2c:f1:7e:ea:8d:ae:93:5b:57:da:
07:5a:0e:49:67:2a:e1:78:c1:02:eb:65:13:ec:19:
4e:aa:f0:81:58:0f:d1:dc:f6:09:39:98:7a:7c:eb:
cf:54:f8:83:39:7d:bc:9a:0d:6b:25:e4:2b:b0:e8:
a4:5e:2c:05:aa:f5:c9:d4:ab:74:17:7a:10:3b:ed:
24:1a:20:74:a9:cc:0b:0f:ec:b2:76:a8:9b:95:4a:
6f:f2:cf:0c:67:48:c1:91:1a:ef:bf:d4:d5:3d:83:
58:f1:99:35:4c:da:25:16:18:b3:68:46:45:a5:35:
66:ef:83:90:29:8b:17:3a:2a:04:9c:51:af:29:7d:
c8:74:71:9e:6b:3c:ef:0a:e4:66:69:d8:7e:bc:55:
92:ae:b1:00:81:55:de:46:06:64:c7:ff:f6:11:ea:
62:a1:30:40:5e:8f:d9:27:de:93:9f:a0:37:8e:d0:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C8:41:FA:3E:0E:1C:EB:D0:B9:E0:33:43:65:50:E7:83:1B:18:1E
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/gshB-j4OHOvQueAzQ2VQ54MbGB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9e03::-2a0c:9e04:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:9e07::/32
2a0c:fe02::-2a0c:fe05:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:98:94:a9:48:62:37:15:69:63:09:9f:46:08:e0:b4:74:39:
e0:21:71:32:d8:10:29:36:41:c4:1b:8e:72:25:e5:b9:a0:f0:
69:4a:b8:99:ca:be:99:8a:ae:e8:14:2c:aa:8a:70:83:3a:de:
45:3a:df:f4:9d:29:55:7f:49:36:38:1d:c7:7d:12:7a:e7:4d:
fd:7a:f7:6f:5f:51:28:67:ce:e2:75:34:ff:7f:f3:f5:75:36:
76:a2:60:55:cd:99:37:68:5e:9d:8a:6e:37:ea:29:f4:23:d4:
92:11:f0:05:b6:2b:e4:2d:d9:64:44:3d:93:d0:87:48:9b:42:
6d:04:c3:2b:7a:9c:29:d4:24:a1:a7:ed:18:05:5e:fc:45:9c:
bb:16:91:12:07:f0:f6:3d:2d:cd:e1:56:6f:29:9e:1e:98:24:
af:7a:4f:17:44:70:9f:21:d1:bb:ee:0a:b4:01:ae:93:60:fa:
79:c5:d4:a5:be:c8:fd:c0:80:1c:ad:fc:b5:85:2d:13:91:88:
1e:57:f8:16:a8:22:a2:0d:bc:c8:07:d3:14:1c:39:64:8c:f0:
92:8b:79:37:fb:08:20:73:7c:2e:fb:43:53:07:32:3c:d7:25:
c4:4c:14:b4:f1:16:21:6d:b2:ba:62:d9:e3:1f:d3:70:06:3e:
bc:bb:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org