Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GdkXMjguqcg1MZHEhMQGbfvzivo.roa
File: GdkXMjguqcg1MZHEhMQGbfvzivo.roa (raw, json)
Hash identifier: l4HngJCBSwvNVNdMIIdlpkV3h8S15H+N4U4vvalywdY=
Subject key identifier: 19:D9:17:32:38:2E:A9:C8:35:31:91:C4:84:C4:06:6D:FB:F3:8A:FA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48B04972FA9BA08FD7CFC3ED0B289A8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GdkXMjguqcg1MZHEhMQGbfvzivo.roa
Signing time: Tue 24 Jan 2023 16:09:53 +0000
ROA not before: Tue 24 Jan 2023 16:09:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212294
IP address blocks: 2a0e:b107:1ba0::/44 maxlen: 48
2a0e:b107:1bb0::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8b:04:97:2f:a9:ba:08:fd:7c:fc:3e:d0:b2:89:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19d91732382ea9c8353191c484c4066dfbf38afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:b2:b2:57:d9:58:20:23:b9:77:b4:8f:80:
ca:37:d5:a3:2d:5d:b2:6a:03:db:77:d2:f1:78:e5:
73:96:58:9e:de:c6:60:33:72:2e:64:d6:a7:1f:23:
8b:45:be:00:82:2b:41:b7:44:bf:03:f0:0c:78:9b:
48:23:15:e6:73:17:b3:a9:76:dc:29:91:4c:21:8a:
87:62:0a:60:b7:2e:ef:40:5f:09:6a:75:ae:2e:2d:
ea:e8:47:6e:43:34:a2:6f:b9:5a:2b:61:11:d4:30:
b3:b1:8c:19:81:19:b8:d4:84:85:f9:f2:78:72:af:
22:aa:8a:16:97:30:9d:ce:93:2d:56:66:fb:35:98:
0e:99:9e:41:9d:1a:7d:24:1e:a5:cb:75:60:d5:a1:
f6:e0:f4:8e:15:39:b0:e2:3a:98:6d:61:07:67:7b:
bb:e2:c2:ef:a0:18:12:a5:4e:0c:3a:17:40:ce:a1:
e3:34:fb:4e:03:0e:6d:1e:89:31:4e:24:fb:b4:83:
be:d2:d3:ae:d3:a3:5c:f3:92:72:7c:89:52:ab:8a:
0d:de:45:42:09:92:45:66:6a:e2:bc:81:b9:34:f2:
73:e4:8e:e4:c1:8b:ff:20:3d:3f:22:bf:f3:74:03:
29:48:cd:30:03:4a:5a:42:8f:88:95:89:df:42:ee:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D9:17:32:38:2E:A9:C8:35:31:91:C4:84:C4:06:6D:FB:F3:8A:FA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GdkXMjguqcg1MZHEhMQGbfvzivo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ba0::/43
Signature Algorithm: sha256WithRSAEncryption
ab:e4:f0:ad:b7:e2:8e:a5:74:82:e9:8c:bc:26:ce:74:ad:bf:
f2:f7:25:13:d9:60:11:1c:e3:2d:88:95:6b:5b:0a:01:9c:fc:
11:e6:cb:67:9c:4c:c1:cf:6c:a3:78:96:c8:52:dd:62:1f:eb:
10:74:68:dc:e1:5a:4d:d6:e5:6f:14:d2:ca:a0:ed:b5:29:05:
9e:94:ab:6c:35:af:1d:8c:31:4e:25:1d:ad:68:9c:cf:2f:f7:
c8:38:56:35:75:ad:29:e5:7d:52:5a:ad:c5:28:d6:91:de:36:
90:db:f5:60:0d:29:91:71:29:29:16:9e:88:8f:3b:8c:9e:9a:
7b:b7:fc:6b:7d:20:35:62:31:48:d5:0d:13:de:b0:6b:ad:5f:
4a:62:2f:d6:8b:88:d4:1a:aa:9b:d6:f2:89:d7:19:2e:f6:01:
aa:36:d8:32:a8:06:0b:19:db:21:fb:66:9b:fc:80:74:d5:22:
8d:f5:74:5d:23:e6:64:54:1f:0f:4a:ff:bf:9f:8e:a6:ce:27:
f4:02:f3:09:02:c1:35:3b:f4:75:4f:d0:06:03:33:29:d6:4b:
3f:0e:d9:06:21:f5:be:3c:0e:8b:72:ff:8a:b9:80:75:45:ac:
f0:83:4e:da:67:56:d2:63:9d:b7:d9:52:75:d4:52:5e:8c:76:
73:81:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org