Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/GT6kM4hD-mST1bO_nKcB-ZMAEnk.roa
File: GT6kM4hD-mST1bO_nKcB-ZMAEnk.roa (raw, json)
Hash identifier: fR0EetKyyDG/oFEJ6MN+dMKfOahnY1Li9lRuRMetN0g=
Subject key identifier: 19:3E:A4:33:88:43:FA:64:93:D5:B3:BF:9C:A7:01:F9:93:00:12:79
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FE394533406446EBAA35D3A35D43E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/GT6kM4hD-mST1bO_nKcB-ZMAEnk.roa
Signing time: Mon 02 Jan 2023 17:38:07 +0000
ROA not before: Mon 02 Jan 2023 17:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35029
IP address blocks: 2a0b:b86:ffc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:e3:94:53:34:06:44:6e:ba:a3:5d:3a:35:d4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=193ea4338843fa6493d5b3bf9ca701f993001279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:69:64:96:8c:ca:96:3c:c0:da:da:aa:43:
a1:26:62:82:da:1d:bc:0c:a1:00:0d:9c:7e:6d:21:
23:4b:be:1d:63:cf:ad:9b:93:b7:84:18:58:61:78:
b8:99:96:1f:f4:50:0e:e0:4a:8a:65:78:d6:e4:95:
7d:76:fd:56:b9:c5:f2:86:30:77:ba:ec:77:c9:b7:
0e:0e:92:c9:63:6e:75:f0:55:c6:0b:a3:88:da:ed:
06:af:6b:2c:f2:9e:cd:5b:0f:4b:43:6c:ff:b4:5b:
f7:7a:e4:1f:2b:82:0f:ea:32:91:f6:45:bc:d9:a0:
f2:17:85:db:aa:16:73:02:3b:d0:01:85:d4:5b:b8:
6a:dc:70:7f:ab:5d:85:a1:a7:5b:f6:d7:db:14:d9:
f0:90:7f:34:f3:ea:2f:54:ad:62:f0:ae:c4:54:bd:
f8:2b:25:5b:b8:39:ae:ec:a5:f5:ed:62:d7:06:c0:
87:54:21:76:ce:dd:d7:77:ef:0c:48:7a:a9:f4:c5:
67:82:0e:c1:f4:d3:74:12:05:3f:13:22:42:1f:54:
b3:70:29:13:c0:56:54:1d:cb:2d:51:be:a8:fb:82:
8c:5c:e2:b9:cb:67:b9:58:d7:36:88:29:ff:20:0b:
15:71:f6:df:c3:b6:19:39:9f:97:13:6b:2d:fa:cf:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3E:A4:33:88:43:FA:64:93:D5:B3:BF:9C:A7:01:F9:93:00:12:79
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/GT6kM4hD-mST1bO_nKcB-ZMAEnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
94:1f:f9:d3:e1:f4:5d:c8:08:ae:6a:db:2d:15:e5:f7:c9:58:
62:c8:35:62:ce:fb:00:68:54:0a:67:89:e0:6d:1c:e1:d8:77:
d9:5f:80:f6:cc:30:e7:20:68:76:ca:76:35:81:e7:02:61:d6:
97:f2:d3:f3:49:61:4a:03:ca:ed:2b:8a:3c:9d:d8:dd:04:d3:
3d:93:9d:04:16:16:ba:9a:eb:08:a8:fd:17:65:e7:eb:3b:c7:
bc:56:9a:99:95:19:d5:0d:b5:ab:42:49:37:7e:69:f0:6f:50:
82:5b:d8:22:5d:4b:af:63:32:24:1d:89:b2:f3:68:40:c2:3e:
bf:fc:bf:6f:e5:50:44:16:84:6b:35:9f:61:07:03:01:b8:59:
49:23:2d:f5:67:9f:4f:fd:f1:0c:69:36:8d:ee:e4:6b:dc:64:
cb:15:86:0d:98:58:93:9a:bb:e9:bf:d1:d9:44:7d:b3:38:1e:
1a:43:09:83:cf:dc:3d:6b:08:81:0c:0f:63:47:03:3e:03:af:
33:e6:e6:0e:6d:e4:57:d1:f8:03:08:5a:93:36:48:9a:d9:85:
6f:74:2d:57:f2:29:22:d7:cf:49:37:f2:75:1a:2f:52:dd:d5:
7a:c5:9c:9f:6c:83:2c:b6:de:26:06:31:ad:dc:ff:34:83:fd:
bc:4a:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org