Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GddGspxSI-3SGHJLp0gVHPM_56Q.roa
File: GddGspxSI-3SGHJLp0gVHPM_56Q.roa (raw, json)
Hash identifier: aDJ++Uf65GizqDGxOX6ngQqZrvAxMu6QaQ6ZEJV+5X0=
Subject key identifier: 19:D7:46:B2:9C:52:23:ED:D2:18:72:4B:A7:48:15:1C:F3:3F:E7:A4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E82B6A0863A482130BDF964D3E733B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GddGspxSI-3SGHJLp0gVHPM_56Q.roa
Signing time: Mon 02 Jan 2023 05:15:41 +0000
ROA not before: Mon 02 Jan 2023 05:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213366
IP address blocks: 2a0e:b107:5c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:2b:6a:08:63:a4:82:13:0b:df:96:4d:3e:73:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19d746b29c5223edd218724ba748151cf33fe7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:bc:69:54:85:f3:a0:83:33:38:58:8d:02:
1f:ba:3c:4b:d5:95:58:b5:e6:76:99:0a:92:b6:e9:
4e:30:10:a1:56:98:9e:af:90:21:f5:e1:ab:93:51:
05:b7:b9:13:45:ce:a4:1a:1f:13:1f:c6:76:b8:ae:
d3:96:54:c4:e1:e3:a0:64:53:b1:95:c4:e9:c0:c4:
7b:37:96:49:d0:60:01:e9:00:02:9b:65:ab:30:d8:
6c:76:c8:b7:0d:35:0c:ad:91:c4:eb:4a:ea:10:06:
b7:15:d6:44:c2:38:09:99:60:32:b6:67:87:c7:3c:
05:d2:cd:f0:7d:9d:60:29:9e:98:5d:e2:83:bf:d9:
7a:93:7c:f7:47:bb:38:fb:81:00:53:75:3e:ea:62:
bb:aa:c1:1e:c4:80:a3:c3:cd:2a:fb:d5:2b:2b:a2:
7e:4c:35:d5:86:c2:99:db:e8:01:77:05:11:46:5f:
ac:9b:67:88:cf:87:bc:2d:17:37:6b:d0:2f:cf:ff:
b2:14:a1:af:50:7e:bf:12:93:fd:e2:71:43:d1:e4:
cc:d2:ef:02:4f:d6:c9:af:4f:9f:95:c3:8e:e2:77:
14:c5:16:7e:55:10:d0:e6:69:53:82:3f:76:f6:17:
60:b8:7c:12:b3:d9:8f:ec:b2:57:0e:29:66:3c:d2:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D7:46:B2:9C:52:23:ED:D2:18:72:4B:A7:48:15:1C:F3:3F:E7:A4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GddGspxSI-3SGHJLp0gVHPM_56Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:5c0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:73:f2:32:27:78:99:90:9d:76:bd:39:dd:8c:af:a1:ba:ed:
ec:99:4e:52:7c:5f:bc:54:6e:51:07:fd:12:4d:41:ea:ed:3d:
eb:9a:65:4a:24:e4:3d:61:76:e0:98:7a:73:f2:b7:18:1b:55:
da:3d:11:63:8f:43:87:f1:70:f5:4b:72:4a:86:36:5a:69:99:
80:6a:cc:c2:ca:a0:18:e0:ec:da:5b:09:19:9a:f4:9e:a2:4c:
7f:9a:7c:67:ec:53:81:b8:d4:b4:4e:92:12:96:0e:01:cb:85:
d5:0f:8b:77:46:8b:b5:96:86:74:5b:18:ee:ee:81:40:f0:f8:
a7:ef:95:c0:f1:00:ae:4b:9e:72:a1:c5:f3:d6:98:b3:37:c8:
cb:ab:f6:51:05:5c:ab:b7:9a:68:d2:8b:e0:5e:53:a6:1d:e1:
a4:c0:7c:11:93:80:fc:40:90:b1:94:bf:75:ad:01:61:cf:68:
9b:02:7d:e3:e4:62:8b:c9:50:53:44:32:c9:73:03:0d:58:aa:
3a:69:90:be:60:9f:d0:5b:cb:66:19:6d:7e:f0:25:aa:5c:32:
f9:18:80:ec:af:e9:f1:5b:fd:d3:a9:e4:77:66:cb:d7:f1:36:
df:1e:12:8f:98:b9:7a:31:e7:f3:5a:b7:14:1e:0f:a3:2d:af:
30:02:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:58 2024 by rpki-client on console-ams.rpki-client.org