Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/gvS0qUHdTXh4aEpWDvZYL8z9L3Y.roa
File: gvS0qUHdTXh4aEpWDvZYL8z9L3Y.roa (raw, json)
Hash identifier: +EvSZblbE9qXk8jpRXfvd4YfUtdB6RRMU2HWbnavniM=
Subject key identifier: 82:F4:B4:A9:41:DD:4D:78:78:68:4A:56:0E:F6:58:2F:CC:FD:2F:76
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 0186E5F01F766D852BE2FDCB8196AE10A18F
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/gvS0qUHdTXh4aEpWDvZYL8z9L3Y.roa
Signing time: Wed 15 Mar 2023 15:42:44 +0000
ROA not before: Wed 15 Mar 2023 15:42:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199418
IP address blocks: 2a13:1c47:ffa0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:f0:1f:76:6d:85:2b:e2:fd:cb:81:96:ae:10:a1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Mar 15 15:42:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82f4b4a941dd4d7878684a560ef6582fccfd2f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:0f:da:ea:16:6b:e8:fe:f0:c7:a4:c0:ec:
1f:c7:b1:80:32:1b:0f:32:7f:60:a9:68:e0:5a:60:
44:b1:47:cf:32:8d:7f:b7:41:dd:dd:ea:8a:fd:37:
31:7a:74:7c:88:21:3c:bc:db:b4:79:37:53:29:2b:
5e:24:a4:6c:ff:98:7c:22:f9:05:02:1a:5b:88:b1:
00:1d:2e:7b:d6:f6:39:46:2c:0a:ec:8d:f7:62:6f:
10:71:f1:d8:e0:13:18:3e:2a:21:7d:3e:67:d1:65:
cf:5c:c5:e1:1f:5a:b4:95:55:6d:f3:c0:0b:90:14:
f2:c3:47:78:45:79:b7:a3:0d:d5:44:dd:3a:b7:c8:
6f:93:86:10:e4:0e:e7:e3:a5:63:dc:41:1b:a2:7c:
96:a2:bd:6f:29:1a:fb:91:69:89:4c:1b:bb:c3:bc:
a2:5a:82:80:90:1a:b6:3c:e4:93:86:88:4d:79:cb:
2f:f4:84:7a:4d:c4:e7:78:85:13:3d:78:8e:8b:c0:
93:3b:44:5e:a1:d9:2e:ad:54:e6:1f:46:ea:98:f9:
07:92:26:6a:8a:93:2b:f5:35:76:76:e7:cf:30:42:
11:a6:0e:a2:69:70:a8:cd:bb:c1:d6:3c:2e:ea:05:
d4:49:e8:74:41:a4:25:2f:d2:62:66:b7:25:fa:80:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F4:B4:A9:41:DD:4D:78:78:68:4A:56:0E:F6:58:2F:CC:FD:2F:76
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/gvS0qUHdTXh4aEpWDvZYL8z9L3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:ffa0::/44
Signature Algorithm: sha256WithRSAEncryption
d1:c6:05:7e:09:9e:4c:63:48:9a:91:b6:27:e1:1b:6a:f0:62:
57:c1:55:d7:10:f7:5e:af:53:be:ca:6a:2a:a9:12:ed:8e:80:
d7:df:c8:26:73:94:a3:3f:0e:2c:79:a9:85:c6:ca:e9:74:db:
bb:e4:ab:bb:8a:27:03:ec:7c:84:a7:ec:6c:a2:a2:06:fc:a3:
a7:83:5c:e5:be:cb:b3:ec:99:d1:45:b3:6b:c9:e3:0a:7a:f4:
5e:24:84:47:f2:e5:e7:e5:b6:8e:e4:7b:c9:73:65:1d:d6:e9:
d0:fe:40:ab:80:9b:89:1b:df:73:e9:8b:2d:14:a9:54:0c:c6:
04:80:a4:4d:99:20:a1:aa:68:17:9f:df:57:77:8e:9d:ec:9e:
e5:55:b6:be:36:02:dd:3a:dc:52:8d:0a:46:16:a7:ff:bd:ba:
98:d9:6f:d9:f5:7b:c8:29:9b:14:f3:3f:41:fd:c0:65:43:86:
7a:ec:c1:6f:0e:9a:c3:11:75:91:87:62:e8:10:d7:e3:a6:b9:
82:9f:09:d9:39:ea:e4:7e:6c:e4:59:3b:4d:08:c9:20:aa:46:
62:59:af:05:df:9b:e3:d7:54:61:f5:89:4c:74:c2:28:de:f1:
ee:c3:e2:f3:d2:85:3e:db:30:ca:5d:7a:6c:96:72:73:48:64:
6b:9e:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:09 2024 by rpki-client on console-ams.rpki-client.org