Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/GC-hLqa9i8GhX0Q52krhdyQIAck.roa
File: GC-hLqa9i8GhX0Q52krhdyQIAck.roa (raw, json)
Hash identifier: Ac/fNNcDu+HBgslhNH4C7vAruVX3vrVne3kweoaH7Qg=
Subject key identifier: 18:2F:A1:2E:A6:BD:8B:C1:A1:5F:44:39:DA:4A:E1:77:24:08:01:C9
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01857227F6BD8905E456AC35DC1B8536E977
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/GC-hLqa9i8GhX0Q52krhdyQIAck.roa
Signing time: Mon 02 Jan 2023 11:04:59 +0000
ROA not before: Mon 02 Jan 2023 11:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47484
IP address blocks: 2a10:4646:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 23 May 2023 21:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:f6:bd:89:05:e4:56:ac:35:dc:1b:85:36:e9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 11:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=182fa12ea6bd8bc1a15f4439da4ae177240801c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:4a:7c:d6:b3:91:88:ff:9e:57:ad:3c:09:
e2:ff:6f:2c:37:f3:94:07:d7:ee:88:8f:48:c7:c3:
9d:2c:55:25:51:24:53:44:e2:de:d7:87:19:34:f8:
0f:c9:86:f7:fc:1b:7b:06:8f:5e:f2:50:55:17:0b:
85:75:51:1b:a5:27:48:f4:fc:41:09:08:20:47:cc:
b3:ad:f3:eb:02:19:52:60:30:65:58:52:14:bc:03:
ba:21:92:a8:a9:64:bf:6f:f5:8d:23:89:f3:62:cc:
0d:0f:2c:bb:94:70:d4:78:88:a6:ee:d9:2d:ae:c2:
80:b5:0c:18:ea:28:d9:91:e1:86:4a:fc:7d:28:0c:
e5:22:b2:90:61:b7:76:49:7d:b9:31:86:0c:a5:b4:
55:b5:a9:c2:84:01:b6:a6:b7:a8:5a:0b:9a:25:ab:
a1:0c:58:c9:f3:bf:8b:d8:f9:55:dc:76:e4:43:49:
90:4a:22:b1:6d:7d:58:1a:9b:c6:1c:4b:2a:37:99:
a0:bc:32:4a:e2:69:2b:8b:0a:b7:2a:1a:ec:d8:cd:
3f:0e:15:6d:f2:b0:5c:39:ee:d7:a1:af:8a:d9:3c:
b5:57:25:67:a7:e7:e1:72:6f:94:5c:dc:1f:d7:d3:
6b:7c:11:d2:c0:20:ad:5f:be:1e:1a:81:d3:58:aa:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:A1:2E:A6:BD:8B:C1:A1:5F:44:39:DA:4A:E1:77:24:08:01:C9
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/GC-hLqa9i8GhX0Q52krhdyQIAck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:6::/48
Signature Algorithm: sha256WithRSAEncryption
ba:2a:6e:3d:7b:63:6c:6e:3c:72:69:12:45:37:3f:b7:6c:fd:
e4:3f:97:38:80:07:45:cf:97:ff:d3:49:ff:0d:58:1f:c1:d9:
f0:d9:98:39:76:e2:54:56:e6:42:c0:2c:79:d9:0f:a8:80:cb:
ca:0e:e9:78:c0:f3:78:f3:e1:c6:91:20:e1:67:cd:a2:50:0b:
5d:4f:ae:e1:6c:13:09:bb:08:86:dc:dc:9a:52:76:d2:45:18:
44:56:a4:8d:85:cf:c7:8f:cb:40:52:a5:92:a6:02:2d:af:34:
ab:ad:0d:9b:35:ae:8e:ec:f3:87:e0:4c:4a:f1:c1:41:b6:5a:
24:f1:1d:5b:b1:f9:13:d8:c8:d0:4e:97:71:6c:6f:3a:03:ed:
12:39:05:c8:7b:a8:e6:3f:2d:d4:4e:c1:fd:0a:f4:e2:fc:d3:
b3:f4:e8:19:51:0c:4b:08:37:5f:dc:a0:3c:be:7d:a0:04:b7:
22:89:0e:f1:11:01:82:df:dc:6e:a0:1c:6d:1b:4a:a2:a8:96:
29:6d:1e:ec:39:17:3e:3e:ea:e5:dd:bc:fd:09:87:2e:40:93:
6c:4c:90:75:ae:8f:8e:07:fa:f4:e2:d5:0d:de:05:c4:27:77:
1a:ae:fc:33:c4:8e:50:1c:47:54:8f:3e:ad:04:46:b7:16:af:
03:dc:87:06
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyJ/a9iQXkVqw13BuFNul3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjMwMTAyMTEwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODJmYTEyZWE2YmQ4YmMxYTE1ZjQ0MzlkYTRhZTE3NzI0MDgwMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy5KfNazkYj/nletPAni/28sN/OU
B9fuiI9Ix8OdLFUlUSRTROLe14cZNPgPyYb3/Bt7Bo9e8lBVFwuFdVEbpSdI9PxB
CQggR8yzrfPrAhlSYDBlWFIUvAO6IZKoqWS/b/WNI4nzYswNDyy7lHDUeIim7tkt
rsKAtQwY6ijZkeGGSvx9KAzlIrKQYbd2SX25MYYMpbRVtanChAG2preoWguaJauh
DFjJ87+L2PlV3HbkQ0mQSiKxbX1YGpvGHEsqN5mgvDJK4mkriwq3Khrs2M0/DhVt
8rBcOe7Xoa+K2Ty1VyVnp+fhcm+UXNwf19NrfBHSwCCtX74eGoHTWKo8oQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBgvoS6mvYvBoV9EOdpK4XckCAHJMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvR0MtaExxYTlpOEdoWDBRNTJrcmhkeVFJQWNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGRgAG
MA0GCSqGSIb3DQEBCwUAA4IBAQC6Km49e2NsbjxyaRJFNz+3bP3kP5c4gAdFz5f/
00n/DVgfwdnw2Zg5duJUVuZCwCx52Q+ogMvKDul4wPN48+HGkSDhZ82iUAtdT67h
bBMJuwiG3NyaUnbSRRhEVqSNhc/Hj8tAUqWSpgItrzSrrQ2bNa6O7POH4ExK8cFB
tlok8R1bsfkT2MjQTpdxbG86A+0SOQXIe6jmPy3UTsH9CvTi/NOz9OgZUQxLCDdf
3KA8vn2gBLciiQ7xEQGC39xuoBxtG0qiqJYpbR7sORc+Purl3bz9CYcuQJNsTJB1
ro+OB/r04tUN3gXEJ3carvwzxI5QHEdUjz6tBEa3Fq8D3IcG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:05 2024 by rpki-client on console-fra.rpki-client.org