Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gulY006I-RY4fbelZuzlG4xKwOg.roa
File: gulY006I-RY4fbelZuzlG4xKwOg.roa (raw, json)
Hash identifier: 8Se1oJutuBGcb5TwfLPNjZTE18ZGxRoYCdtkaJEs3ss=
Subject key identifier: 82:E9:58:D3:4E:88:F9:16:38:7D:B7:A5:66:EC:E5:1B:8C:4A:C0:E8
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FF34636E90EC6D7971546D7DE33EF
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gulY006I-RY4fbelZuzlG4xKwOg.roa
Signing time: Mon 02 Jan 2023 17:38:11 +0000
ROA not before: Mon 02 Jan 2023 17:38:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60113
IP address blocks: 2a0b:b86::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Jun 2023 12:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:f3:46:36:e9:0e:c6:d7:97:15:46:d7:de:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82e958d34e88f916387db7a566ece51b8c4ac0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:c4:94:90:90:f2:d5:d1:c2:34:ad:c8:64:
17:47:60:23:3d:a0:4d:24:9b:6e:bb:9c:fb:0a:11:
c8:97:a5:65:93:51:d1:2f:ef:5b:13:b4:47:e2:08:
5b:4b:69:70:54:a8:dc:48:00:1d:a4:b1:0a:0d:4f:
7d:19:65:82:ea:81:e3:a7:c3:e6:8e:fc:c7:9d:c2:
b7:7e:f4:5e:c6:4d:d5:80:83:6b:bd:f5:08:a5:a8:
78:eb:f6:29:37:f8:e5:71:9e:b4:0e:6a:5e:59:84:
16:b2:ab:af:49:22:b6:25:59:b2:fe:c5:c6:d7:24:
41:cd:26:e5:72:c4:ba:84:42:cc:c5:b1:ad:97:56:
d6:44:11:cf:56:98:72:1d:bf:2d:0d:a1:da:66:97:
fe:7f:7d:38:0b:4e:ea:ae:2c:86:dc:c8:ef:c6:8c:
12:48:7b:da:65:3a:40:23:3d:0c:a7:1b:a6:8d:69:
8c:06:42:a3:97:63:fd:bc:df:c2:51:a1:d0:d2:10:
ce:67:7f:59:c6:3d:83:a0:28:17:58:1b:72:55:fa:
06:d5:53:1c:aa:08:dc:49:9c:eb:e3:b7:3b:8c:d1:
e0:a6:cc:3b:d6:fa:e7:ba:18:55:26:e8:8f:2b:d7:
ef:bb:bb:47:c6:ae:84:34:fe:2a:99:d6:d2:ad:13:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E9:58:D3:4E:88:F9:16:38:7D:B7:A5:66:EC:E5:1B:8C:4A:C0:E8
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gulY006I-RY4fbelZuzlG4xKwOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86::/40
Signature Algorithm: sha256WithRSAEncryption
d3:00:f7:59:d3:e0:34:62:e6:31:37:8e:d1:da:2f:8b:6d:eb:
28:7a:74:00:19:e9:25:2f:12:91:a7:64:d2:24:ea:c1:ed:a6:
a2:0f:08:bb:4e:61:0d:5b:a2:ae:c7:cf:10:37:e1:4d:e8:33:
fa:60:2d:ec:af:d4:aa:95:b8:68:26:ae:a9:5a:50:b5:76:4d:
3b:ed:93:57:56:f0:2c:df:5b:48:9b:7a:4e:5c:2c:f1:eb:ac:
da:ec:9e:e2:4b:d1:09:83:dc:c2:dc:ee:0b:c4:53:f4:36:27:
cc:a8:53:d9:aa:25:7c:91:fb:db:e2:2b:f2:fd:9d:1d:66:98:
1e:a4:8c:4f:1a:ea:b0:e5:57:bb:22:37:cd:51:38:84:f0:c7:
44:ad:75:3b:57:64:80:a3:d0:4d:59:78:a3:f6:cd:80:be:ac:
c2:6d:d7:98:00:d9:62:44:c4:f3:1a:c2:64:48:3a:df:6d:a2:
82:88:fa:c7:f0:38:c5:d1:7f:e7:02:60:9a:f7:44:ff:71:eb:
32:86:6a:39:6a:31:07:9d:7b:98:f2:d8:85:cd:cc:1a:39:a8:
1d:1a:0d:07:1e:b5:0a:da:a0:e9:c3:3a:41:ec:4b:d6:2d:d3:
b5:66:a1:ed:aa:15:85:76:c3:e8:96:df:8c:89:93:16:2f:90:
29:56:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org