Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/GfbTc61yb7_CmXqcgMiviz-eBCo.roa
File: GfbTc61yb7_CmXqcgMiviz-eBCo.roa (raw, json)
Hash identifier: hxpPP9VsB7TQVCDgfpKYFNecAZd5zf6gyIO13HZkWco=
Subject key identifier: 19:F6:D3:73:AD:72:6F:BF:C2:99:7A:9C:80:C8:AF:8B:3F:9E:04:2A
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 0186598637255D75B66B450C6D3E4EA1744B
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/GfbTc61yb7_CmXqcgMiviz-eBCo.roa
Signing time: Thu 16 Feb 2023 09:20:13 +0000
ROA not before: Thu 16 Feb 2023 09:20:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 2a0c:b6c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 03 Sep 2023 09:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:86:37:25:5d:75:b6:6b:45:0c:6d:3e:4e:a1:74:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Feb 16 09:20:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19f6d373ad726fbfc2997a9c80c8af8b3f9e042a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:a9:9e:83:5c:29:e1:98:68:9d:65:2f:ed:
e5:ad:87:30:39:48:72:d4:e7:b3:02:2b:81:d6:25:
9a:01:79:c0:62:b2:76:32:5f:44:47:f5:77:71:3e:
44:e9:98:cc:71:21:46:cd:f7:36:02:ec:63:4f:ee:
53:2e:8f:93:0b:24:fe:b3:26:26:57:bd:b0:b8:9f:
09:c4:3d:63:87:d2:46:30:8b:18:b1:0f:1b:8d:ec:
ec:f3:9b:81:01:0d:4e:c9:2b:2f:2e:ec:dc:cd:71:
2c:dc:89:6f:5f:3a:cc:24:21:dc:48:8c:d1:c8:e6:
04:94:d1:58:1b:60:80:c5:62:21:78:27:65:6b:04:
fc:02:a8:0d:b5:3e:1e:51:fb:d9:5d:d2:77:24:95:
0e:cf:d8:b5:e0:37:56:d0:9b:dc:79:7f:22:d8:1e:
8c:4d:cc:a1:de:58:de:d6:45:7f:82:77:ce:77:b7:
9b:8b:dd:23:91:80:92:82:54:f6:90:11:df:f5:67:
eb:b7:d1:b1:4c:1a:8b:f0:17:ca:37:76:57:e9:76:
65:c7:f6:e2:8b:2a:bc:75:dd:7d:16:62:11:09:83:
b8:56:cd:17:e7:e9:c3:e7:e5:48:b9:a3:eb:54:40:
35:51:2b:5f:23:56:bf:ae:d6:84:43:9b:1d:a7:72:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:D3:73:AD:72:6F:BF:C2:99:7A:9C:80:C8:AF:8B:3F:9E:04:2A
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/GfbTc61yb7_CmXqcgMiviz-eBCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b6c0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:6b:6c:56:40:26:0b:90:00:92:b5:a5:bc:70:1e:ce:be:f2:
71:4b:2f:8f:1b:82:e8:92:db:8c:ee:ea:ef:b7:c1:38:2c:b5:
4d:ad:94:c1:49:58:4f:35:03:a9:ac:2c:c6:e5:4f:b6:c2:3b:
74:d1:a0:af:8a:19:b1:3c:8f:77:f5:95:6b:5c:30:09:ac:22:
05:fc:95:c3:3f:fb:d0:46:ab:a1:f0:1e:03:4b:87:21:e0:a1:
09:04:16:3b:c0:44:22:61:e3:40:45:f3:45:83:0a:7c:41:f3:
2a:0d:fb:4e:ea:71:3c:3d:d8:70:e8:c3:ac:37:65:be:47:1d:
96:ea:f1:7f:21:ca:1e:b0:a6:84:40:5c:55:dc:c5:ef:42:d1:
cb:2a:17:b4:fa:78:fe:67:dc:7d:1f:71:1e:36:1f:13:2f:03:
2a:d9:44:01:e3:35:49:d8:ad:45:c5:ef:cb:ac:73:29:a1:56:
8d:41:4d:3a:73:dd:7c:e7:11:ee:00:5d:fd:ca:f3:14:1f:ae:
aa:31:64:f9:52:68:2b:4d:e6:74:68:aa:28:1d:a7:00:52:0f:
31:32:73:84:8d:4b:8f:35:77:07:53:48:53:f6:db:39:fa:c9:
71:75:24:6c:d8:24:1f:ab:34:57:61:74:15:a6:9f:17:35:c9:
56:9e:3d:2b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYZZhjclXXW2a0UMbT5OoXRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3
ODdmYmMwHhcNMjMwMjE2MDkyMDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWY2ZDM3M2FkNzI2ZmJmYzI5OTdhOWM4MGM4YWY4YjNmOWUwNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcepnoNcKeGYaJ1lL+3lrYcwOUhy
1OezAiuB1iWaAXnAYrJ2Ml9ER/V3cT5E6ZjMcSFGzfc2AuxjT+5TLo+TCyT+syYm
V72wuJ8JxD1jh9JGMIsYsQ8bjezs85uBAQ1OySsvLuzczXEs3IlvXzrMJCHcSIzR
yOYElNFYG2CAxWIheCdlawT8AqgNtT4eUfvZXdJ3JJUOz9i14DdW0JvceX8i2B6M
Tcyh3lje1kV/gnfOd7ebi90jkYCSglT2kBHf9Wfrt9GxTBqL8BfKN3ZX6XZlx/bi
iyq8dd19FmIRCYO4Vs0X5+nD5+VIuaPrVEA1UStfI1a/rtaEQ5sdp3IP0wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBn203Otcm+/wpl6nIDIr4s/ngQqMB8GA1UdIwQY
MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt
OTQxY2M2YTdiYWQ5LzEvR2ZiVGM2MXliN19DbVhxY2dNaXZpei1lQkNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5
LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgy2wDAN
BgkqhkiG9w0BAQsFAAOCAQEAHWtsVkAmC5AAkrWlvHAezr7ycUsvjxuC6JLbjO7q
77fBOCy1Ta2UwUlYTzUDqawsxuVPtsI7dNGgr4oZsTyPd/WVa1wwCawiBfyVwz/7
0EarofAeA0uHIeChCQQWO8BEImHjQEXzRYMKfEHzKg37TupxPD3YcOjDrDdlvkcd
lurxfyHKHrCmhEBcVdzF70LRyyoXtPp4/mfcfR9xHjYfEy8DKtlEAeM1SditRcXv
y6xzKaFWjUFNOnPdfOcR7gBd/crzFB+uqjFk+VJoK03mdGiqKB2nAFIPMTJzhI1L
jzV3B1NIU/bbOfrJcXUkbNgkH6s0V2F0FaafFzXJVp49Kw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:38 2024 by rpki-client on console-ams.rpki-client.org