Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/GFGnCo3fn0p7IZm6rXzyCZOdVcU.roa
File: GFGnCo3fn0p7IZm6rXzyCZOdVcU.roa (raw, json)
Hash identifier: eyiMchNEhpf+0pLndxUpO39jlRmeuNlfo227huS6B6M=
Subject key identifier: 18:51:A7:0A:8D:DF:9F:4A:7B:21:99:BA:AD:7C:F2:09:93:9D:55:C5
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018CC49372FF133B85C251566CABA42C541D
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/GFGnCo3fn0p7IZm6rXzyCZOdVcU.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216308
IP address blocks: 2a10:4646:390::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 22 Jan 2024 21:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:72:ff:13:3b:85:c2:51:56:6c:ab:a4:2c:54:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1851a70a8ddf9f4a7b2199baad7cf209939d55c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e7:4f:5a:36:f0:92:39:3b:41:0a:e7:10:9f:
8e:1a:f0:fe:14:b9:7f:e9:cc:6f:f4:a2:d9:44:b9:
6e:13:20:7c:5c:0e:c8:f5:eb:e7:34:7e:9e:99:58:
dc:5f:55:b4:22:93:a7:a9:26:38:51:b1:c6:c8:ad:
20:86:a4:b1:90:af:9d:50:11:2c:a1:97:34:67:0f:
bd:fb:29:1f:08:66:78:b5:58:a6:cf:76:6e:56:9c:
9a:83:1f:b2:58:9d:99:5b:2f:59:84:51:36:6f:c0:
d2:d8:bb:c0:bf:ed:f1:31:52:d9:0b:64:c9:a3:73:
db:28:d2:8b:c6:e3:08:b8:a4:a8:a7:7f:a6:ea:1e:
64:61:29:ba:95:c7:df:67:43:94:01:c7:7e:21:e9:
e0:73:5f:bf:6b:08:e4:1d:2e:15:1c:96:7d:03:70:
90:da:76:5c:23:94:78:80:bf:94:9e:d8:15:d3:28:
6d:cc:2f:95:30:0a:f3:e9:47:10:35:70:0a:d3:49:
99:ad:26:4d:fb:e4:2e:1a:39:72:01:40:41:35:d2:
30:a5:c5:2a:41:f6:90:57:73:d7:5a:0f:d5:6b:13:
04:11:c5:44:b4:df:8a:25:cc:e9:e0:45:5b:4c:a2:
b4:7a:29:06:e7:f8:49:18:6f:28:3c:90:4d:01:aa:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:A7:0A:8D:DF:9F:4A:7B:21:99:BA:AD:7C:F2:09:93:9D:55:C5
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/GFGnCo3fn0p7IZm6rXzyCZOdVcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:390::/44
Signature Algorithm: sha256WithRSAEncryption
a5:cb:da:cc:ea:8c:3e:76:9d:2f:e2:d8:a5:8a:4d:39:82:2d:
19:3b:4d:fe:77:d1:2a:24:21:56:58:4d:3a:3a:8d:4a:73:48:
ca:26:42:5a:f1:be:07:e4:c1:90:1e:28:bd:1b:88:22:e8:09:
84:dd:ac:1e:f4:a4:2f:60:33:07:d7:9c:81:04:b4:ea:b5:8a:
5f:a4:6d:f0:6b:bd:36:9a:93:32:93:e0:41:ce:c2:28:83:9a:
b3:0a:f9:75:eb:b0:9a:58:c7:f4:ad:83:16:ca:c0:7a:5e:70:
e6:1b:f1:b1:e6:9a:1f:c6:5b:0d:96:39:60:09:2b:b0:1b:14:
f6:d7:39:06:1d:c8:8d:8a:44:66:0a:15:96:ed:96:37:53:44:
17:e4:b6:f6:2a:e9:9c:e0:c0:40:cf:1c:a5:79:54:46:ef:bc:
82:22:9f:80:28:5b:10:51:27:79:57:d3:e8:93:c2:1b:1b:eb:
a5:83:eb:0d:15:ab:f3:c5:8c:4d:09:c0:69:44:ed:a1:8f:e3:
bd:c2:f3:21:54:eb:f5:77:cb:46:9a:b2:44:d2:d6:ed:da:41:
8d:2f:f4:1b:27:25:c9:8c:be:e2:ed:fb:6a:9d:df:42:ff:7c:
53:b6:d0:53:53:da:7d:aa:9e:b2:d5:b3:e6:6a:cd:96:67:05:
89:46:a7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:43 2024 by rpki-client on console-ams.rpki-client.org