Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GMZweTFbAw9D8Vzj5KPZmvZQ3Ps.roa
File: GMZweTFbAw9D8Vzj5KPZmvZQ3Ps.roa (raw, json)
Hash identifier: KKGwTOsp5DqrNEtiC/9yej6Tcp1MCB0QTCxPXp7AYns=
Subject key identifier: 18:C6:70:79:31:5B:03:0F:43:F1:5C:E3:E4:A3:D9:9A:F6:50:DC:FB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E799CC830AD6BD6B41681F1BE0072C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GMZweTFbAw9D8Vzj5KPZmvZQ3Ps.roa
Signing time: Mon 02 Jan 2023 05:15:04 +0000
ROA not before: Mon 02 Jan 2023 05:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142588
IP address blocks: 2a0e:b107:1991::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:99:cc:83:0a:d6:bd:6b:41:68:1f:1b:e0:07:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18c67079315b030f43f15ce3e4a3d99af650dcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:14:d7:86:e8:a9:88:a6:84:15:53:aa:25:
cf:3e:53:40:ba:ba:cf:08:57:f1:73:95:10:1c:6e:
11:e3:10:48:67:cc:cf:a3:48:a4:4c:81:7e:ef:28:
63:fe:c2:39:59:a0:52:16:fa:06:86:c0:f4:ab:9e:
b3:4a:97:3e:f9:ec:05:02:78:27:56:c7:09:4d:7f:
32:ee:e6:c6:9a:81:7f:7b:17:09:b3:77:e2:24:8e:
9e:b7:21:b3:18:97:c9:7c:0b:88:11:fd:fd:8d:e3:
e3:80:b0:4b:56:8f:0b:1d:63:7d:79:e0:4a:38:40:
9b:34:d3:37:b4:33:30:74:41:af:88:da:18:44:e1:
46:99:a5:09:48:f5:94:4f:19:e4:d4:ad:a4:b9:51:
73:12:d5:54:08:f6:d0:13:16:d5:10:bc:57:13:58:
91:60:61:ed:83:67:d5:86:00:d2:74:83:f3:43:ef:
f6:b8:04:f0:37:e6:3a:90:be:aa:12:32:ad:99:cd:
52:2d:66:71:95:3f:d7:00:b3:1d:9f:ab:8b:02:16:
81:5f:2d:0c:68:45:6f:48:56:d1:e3:da:d3:f9:85:
cb:9f:0e:ae:d5:76:cd:36:0f:12:22:ab:e9:9c:e7:
04:72:2f:29:cf:8e:9d:16:be:a4:96:14:1d:19:42:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C6:70:79:31:5B:03:0F:43:F1:5C:E3:E4:A3:D9:9A:F6:50:DC:FB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GMZweTFbAw9D8Vzj5KPZmvZQ3Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1991::/48
Signature Algorithm: sha256WithRSAEncryption
a7:69:85:ca:24:d4:95:ef:3c:c5:38:68:1f:3a:81:8d:5b:55:
e7:f2:3c:77:51:99:57:e9:03:2f:40:43:d7:76:bb:fa:7b:5f:
28:35:e7:46:39:7e:85:68:b2:73:3b:e6:01:9b:18:96:84:b9:
80:a1:71:4d:5b:b4:ee:ea:01:cb:bd:f0:42:f0:fb:ec:7b:51:
80:fb:b2:06:39:15:e1:e5:a8:eb:67:64:89:64:a9:e1:c3:30:
83:e3:2e:88:70:85:78:96:0b:07:ff:24:64:08:7a:23:d9:a0:
b0:41:84:22:00:49:30:84:a9:10:89:08:f7:7f:2c:47:25:47:
d4:86:bf:28:d5:77:4b:11:d2:f0:d1:f9:71:8c:c5:5b:f6:2c:
91:63:a1:65:e9:95:4b:68:53:31:6a:d5:c8:c0:cf:9a:a5:ce:
84:62:26:27:f5:5e:3b:ad:52:09:4d:5b:dd:db:7a:ff:15:72:
b8:75:c3:18:c1:85:dc:19:3f:cf:34:e0:35:fe:bc:77:d9:dc:
fd:f6:37:f2:fd:17:1e:12:8c:0c:78:fe:34:93:59:f7:f7:92:
34:8d:7b:fb:24:71:75:00:9a:17:a3:80:cb:65:56:aa:10:41:
d9:8d:92:c6:8a:34:f1:2b:67:bc:ce:a2:a4:a5:2b:29:b1:bd:
c4:98:8c:84
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw55nMgwrWvWtBaB8b4AcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGM2NzA3OTMxNWIwMzBmNDNmMTVjZTNlNGEzZDk5YWY2NTBkY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxkU14boqYimhBVTqiXPPlNAurrP
CFfxc5UQHG4R4xBIZ8zPo0ikTIF+7yhj/sI5WaBSFvoGhsD0q56zSpc++ewFAngn
VscJTX8y7ubGmoF/excJs3fiJI6etyGzGJfJfAuIEf39jePjgLBLVo8LHWN9eeBK
OECbNNM3tDMwdEGviNoYROFGmaUJSPWUTxnk1K2kuVFzEtVUCPbQExbVELxXE1iR
YGHtg2fVhgDSdIPzQ+/2uATwN+Y6kL6qEjKtmc1SLWZxlT/XALMdn6uLAhaBXy0M
aEVvSFbR49rT+YXLnw6u1XbNNg8SIqvpnOcEci8pz46dFr6klhQdGUJqCQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBjGcHkxWwMPQ/Fc4+Sj2Zr2UNz7MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvR01ad2VURmJBdzlEOFZ6ajVLUFptdlpRM1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxmR
MA0GCSqGSIb3DQEBCwUAA4IBAQCnaYXKJNSV7zzFOGgfOoGNW1Xn8jx3UZlX6QMv
QEPXdrv6e18oNedGOX6FaLJzO+YBmxiWhLmAoXFNW7Tu6gHLvfBC8Pvse1GA+7IG
ORXh5ajrZ2SJZKnhwzCD4y6IcIV4lgsH/yRkCHoj2aCwQYQiAEkwhKkQiQj3fyxH
JUfUhr8o1XdLEdLw0flxjMVb9iyRY6Fl6ZVLaFMxatXIwM+apc6EYiYn9V47rVIJ
TVvd23r/FXK4dcMYwYXcGT/PNOA1/rx32dz99jfy/RceEowMeP40k1n395I0jXv7
JHF1AJoXo4DLZVaqEEHZjZLGijTxK2e8zqKkpSspsb3EmIyE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org