Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/GGx6UCskko_pICsl8yw48JT5LPo.roa
File: GGx6UCskko_pICsl8yw48JT5LPo.roa (raw, json)
Hash identifier: XXX4FYN7YyVLd69LSXlks0kiWbULhTVX2wGEJ7OH8bY=
Subject key identifier: 18:6C:7A:50:2B:24:92:8F:E9:20:2B:25:F3:2C:38:F0:94:F9:2C:FA
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 018CC34922045FA48CF4BD0335B51EA52712
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/GGx6UCskko_pICsl8yw48JT5LPo.roa
Signing time: Mon 01 Jan 2024 04:29:59 +0000
ROA not before: Mon 01 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209243
IP address blocks: 2a09:7cc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 09 Apr 2024 11:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:22:04:5f:a4:8c:f4:bd:03:35:b5:1e:a5:27:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=186c7a502b24928fe9202b25f32c38f094f92cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bc:db:ae:b8:7e:25:49:d6:a6:68:9c:27:74:
ad:ec:99:d4:af:d0:30:e0:9a:93:f8:84:94:5b:bf:
83:64:a7:d5:0f:94:e7:0c:69:02:e9:81:be:b4:13:
f4:09:1f:e3:b3:00:9e:d6:f7:02:c3:30:67:09:2b:
9f:5c:95:ad:f5:be:b3:32:21:8b:82:75:35:82:4b:
bb:13:a0:5b:6c:01:11:2f:70:b7:88:b9:12:1e:25:
8d:57:41:68:64:f9:0e:a3:42:b6:f4:b9:73:6f:42:
32:ea:df:6b:fb:3a:5b:46:3f:02:58:48:fa:6e:2e:
20:ea:1e:17:14:a4:1e:db:c4:69:68:b7:17:80:28:
17:b5:cf:a4:0e:fa:1d:cd:82:3b:aa:f4:1e:b1:db:
3d:58:76:bb:af:14:57:31:b8:17:37:d3:a4:5b:68:
cf:bd:51:7d:8d:d3:bc:c3:61:96:83:d1:c6:36:98:
03:82:fd:05:ad:6a:3e:30:fd:01:9a:e7:0d:93:50:
a4:5a:20:ab:0d:dc:78:80:d5:39:b4:d0:76:a9:4d:
9f:0e:28:36:5a:cd:52:e2:28:b6:8f:54:36:50:44:
78:db:e2:6b:e0:d3:4f:fd:b5:2a:2a:6c:bf:d9:e6:
eb:8e:37:6d:7f:74:79:92:84:52:88:5e:19:77:4a:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6C:7A:50:2B:24:92:8F:E9:20:2B:25:F3:2C:38:F0:94:F9:2C:FA
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/GGx6UCskko_pICsl8yw48JT5LPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7cc7::/32
Signature Algorithm: sha256WithRSAEncryption
04:65:22:ae:81:21:46:fe:b0:8e:cb:09:80:82:d6:a8:76:37:
81:c6:b5:d7:0e:76:9c:fc:5f:11:8f:70:7c:79:64:c5:d9:9d:
38:3a:62:fc:87:45:05:5f:1b:10:a8:99:e5:8e:23:4b:96:ee:
d6:cf:f9:48:95:31:84:a0:a1:bb:04:58:bf:7e:99:a0:15:fe:
42:ef:48:ac:f3:ab:08:d3:ac:79:f8:44:8d:06:0b:eb:e3:35:
48:3d:af:4c:88:2e:a3:ab:f6:fb:50:c0:b2:74:bb:83:41:98:
0a:17:58:1f:73:23:e0:6c:28:d8:a1:be:04:a6:56:84:bc:34:
97:8e:32:c3:53:d6:d3:e6:00:8e:fc:32:87:66:e0:a7:07:6b:
dd:fb:f9:40:59:03:68:80:83:8d:75:46:82:59:59:ed:42:e3:
f9:a6:44:9a:f4:8b:e2:d3:e4:18:91:8d:33:0c:a4:f6:e1:67:
c6:92:3a:1d:42:78:84:f0:b0:4f:5e:69:48:ae:b2:63:52:09:
8d:82:4a:3a:73:47:95:b7:e5:15:ba:62:d0:cc:10:1b:b5:38:
0e:e2:3b:85:c8:05:e1:d7:14:23:e2:05:52:6d:c5:a1:c4:c6:
87:c6:3e:63:ff:ad:7d:f0:e0:75:ff:0d:a7:1c:16:72:a5:71:
9a:ea:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:49:43 2025 by rpki-client