Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GWuxA7P7igZHZMD7kwe-eO69rNw.roa
File: GWuxA7P7igZHZMD7kwe-eO69rNw.roa (raw, json)
Hash identifier: dVVjNVpAAV87Od/c0kRevRxPNG4OjVU0k7WoEc2Rir4=
Subject key identifier: 19:6B:B1:03:B3:FB:8A:06:47:64:C0:FB:93:07:BE:78:EE:BD:AC:DC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E4495C3DE9A98EA904D744F3D0E47
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GWuxA7P7igZHZMD7kwe-eO69rNw.roa
Signing time: Mon 02 Jan 2023 06:14:47 +0000
ROA not before: Mon 02 Jan 2023 06:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57853
IP address blocks: 2a0c:b641:190::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:44:95:c3:de:9a:98:ea:90:4d:74:4f:3d:0e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=196bb103b3fb8a064764c0fb9307be78eebdacdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:0e:88:e0:7f:c9:5f:ae:bf:74:42:ea:56:
1c:0d:d0:42:e6:e4:8d:7f:3f:97:23:37:c2:8a:af:
36:a0:f2:7e:6b:a3:36:10:f9:84:63:ab:5f:7e:af:
df:6b:61:5c:95:4b:36:6d:b7:4c:73:1f:2f:3b:06:
02:10:16:ab:3d:0f:e6:df:12:dd:2b:b2:44:f2:ac:
ae:06:37:63:0c:59:53:f5:9d:7e:4f:eb:cf:d7:36:
70:a8:e5:a2:b8:ad:ea:78:0f:2d:fc:c9:c5:b7:6f:
ce:d1:94:bf:2e:4c:33:b4:07:7e:60:10:cf:8c:74:
1c:63:67:65:11:94:f8:b5:5b:e8:42:69:69:54:82:
b2:49:7f:f1:c7:72:ab:5b:35:22:ae:e0:f6:c1:07:
17:c2:c2:3f:03:db:b1:69:0e:2f:c2:df:13:41:29:
98:c2:fb:5a:a1:dc:2e:5a:a7:91:59:e8:90:b5:83:
b1:c1:6d:18:00:f9:9f:8f:f7:74:15:de:61:f9:f8:
7f:a3:6a:3b:55:7c:66:f0:ea:6a:3e:3a:a8:42:51:
d4:b3:e7:bf:b7:99:b6:9a:e2:88:8b:81:f3:c8:74:
b8:9b:95:7e:8f:56:c4:ed:ff:ac:03:26:2d:98:9c:
e9:1e:72:17:62:a9:ea:2b:1c:3b:cc:b5:99:df:a8:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6B:B1:03:B3:FB:8A:06:47:64:C0:FB:93:07:BE:78:EE:BD:AC:DC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GWuxA7P7igZHZMD7kwe-eO69rNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:190::/44
Signature Algorithm: sha256WithRSAEncryption
2e:95:e0:d7:1d:28:87:c7:eb:9a:da:b0:af:ca:a0:6c:b8:37:
d7:6b:02:b4:83:c3:52:ec:33:05:62:83:ca:cb:84:e9:3d:18:
80:f2:76:d3:59:ec:b1:a8:ad:a0:8a:04:4c:e1:ba:34:91:ae:
9e:e0:ab:27:e3:b2:ca:99:ae:4d:b8:dc:d1:e5:78:d3:f5:c8:
11:ab:3c:7b:49:df:54:c4:fc:af:3a:86:fa:02:ac:9a:ed:f4:
bc:de:54:f1:fb:f9:5f:5e:9e:68:51:3e:0b:63:15:7f:95:45:
4a:54:b0:20:e8:58:21:f8:83:33:8d:ec:89:4f:76:45:b9:84:
82:b8:b3:c6:ae:e9:05:64:18:d9:c2:7b:79:5c:b8:a4:5f:2d:
65:c9:cf:88:6f:94:47:4a:c0:85:f3:fd:ae:c2:e2:fb:10:dc:
3c:0f:05:55:17:8f:b1:73:77:20:88:c7:ac:e2:27:fb:f9:1f:
8c:6d:ed:bc:03:7c:84:af:dc:cc:a3:80:41:c6:97:ce:3b:a0:
e0:00:e5:76:cd:52:cf:1e:fc:2e:db:16:b7:68:72:49:7f:99:
b5:8a:52:44:f5:05:75:26:3f:e8:8f:a8:ec:4d:13:6a:6e:0e:
f4:87:f8:e8:1e:bf:19:dc:94:61:fc:a9:01:88:76:92:62:e6:
be:72:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org