Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GWtl-o18AirzAyVaa5vwTOKdFdc.roa
File: GWtl-o18AirzAyVaa5vwTOKdFdc.roa (raw, json)
Hash identifier: P4etHjLTLZ3AI8gP0yToGVMFENY4m8nNJ50dtsDHhw4=
Subject key identifier: 19:6B:65:FA:8D:7C:02:2A:F3:03:25:5A:6B:9B:F0:4C:E2:9D:15:D7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A3D8598F0AC9DD62024C3832B7EA330F9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GWtl-o18AirzAyVaa5vwTOKdFdc.roa
Signing time: Mon 28 Aug 2023 19:01:20 +0000
ROA not before: Mon 28 Aug 2023 19:01:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 2a0e:b107:27c7::/48 maxlen: 48
2a0e:b107:27ac::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Sep 2023 02:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:85:98:f0:ac:9d:d6:20:24:c3:83:2b:7e:a3:30:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 28 19:01:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=196b65fa8d7c022af303255a6b9bf04ce29d15d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:35:84:12:26:76:c8:21:82:05:0a:03:52:
73:57:5a:c0:67:16:d2:a6:7e:cf:bb:2f:df:26:89:
6a:ad:98:44:d9:e6:0e:b3:bd:eb:e2:08:46:38:f9:
5e:32:45:05:9e:18:2e:d0:de:c7:b9:1c:41:3a:05:
ed:f7:94:38:d6:a7:47:57:05:7d:35:a4:2b:72:2a:
86:01:df:7f:7e:cf:cf:ea:e5:fe:41:65:7b:67:90:
b5:f6:8a:72:8c:54:6b:ac:2f:f3:4c:a3:41:a3:35:
d6:5d:fe:67:93:60:c1:a2:40:dd:49:c7:2a:98:b5:
98:02:88:1c:7a:cd:c4:c4:75:fe:32:8d:15:af:05:
b1:6f:67:df:37:28:60:08:12:35:7f:1e:5c:66:94:
34:0d:04:d9:d2:3e:ea:07:81:4b:2d:80:5a:ea:4a:
cd:ff:99:c7:6c:af:c3:6b:3e:0e:39:d1:9e:fc:11:
e7:21:a4:f4:af:b8:fa:52:cb:38:6d:26:8a:9e:84:
a5:6d:d7:74:67:c6:95:c1:bd:30:6b:6d:85:b0:5c:
28:81:06:8e:21:79:2f:df:5d:47:4e:df:a8:4c:1b:
f9:9a:c3:73:33:34:de:35:7b:cb:c4:be:94:ec:99:
c8:73:d7:81:9c:3e:5a:3b:fb:15:c5:93:65:7a:f7:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6B:65:FA:8D:7C:02:2A:F3:03:25:5A:6B:9B:F0:4C:E2:9D:15:D7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GWtl-o18AirzAyVaa5vwTOKdFdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27ac::/48
2a0e:b107:27c7::/48
Signature Algorithm: sha256WithRSAEncryption
c6:58:d4:92:c6:69:7a:b9:bc:2c:2c:11:ab:78:b4:af:0b:8e:
ae:b1:ed:03:91:96:a0:66:3d:51:5b:ed:61:49:30:ab:2a:a4:
10:41:92:e9:42:6c:54:bd:15:51:08:b4:2f:04:68:b9:7e:13:
45:0b:43:f1:46:6e:e8:d1:6a:0b:1b:bd:67:b4:10:ab:c9:8d:
15:6b:c9:1c:a6:92:0e:c3:b2:7b:a3:87:69:ce:1e:6e:4a:01:
2c:1a:a0:1e:0a:2e:8f:b6:3b:0b:aa:2c:ff:d2:b1:aa:fa:84:
09:cc:ee:20:dc:63:db:fb:e7:10:09:a1:61:a0:31:05:89:0b:
33:9b:d5:4c:4d:35:9a:9b:24:31:d4:91:0d:96:1e:8c:5c:4a:
43:1a:6e:b5:23:39:91:bd:3d:92:b2:4b:66:41:18:82:30:49:
6f:49:63:74:34:83:e4:cc:e8:d5:4f:4d:e2:06:11:d4:7e:15:
6c:25:1d:12:f9:ab:e6:20:c6:1b:48:2f:74:02:8d:4c:eb:5d:
69:1f:6e:10:8b:f6:96:4b:ef:02:df:76:61:0d:a0:17:bf:e4:
82:8f:19:ed:2b:f6:22:4e:67:f8:49:a9:b0:86:c4:a8:e4:40:
ca:a8:38:5e:29:ef:91:86:c4:3c:2f:b5:b5:31:b1:0c:fc:89:
29:72:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:58 2024 by rpki-client on console-ams.rpki-client.org