Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/gzyhoB4xkg_NSfCI0wu0alxIN6A.roa
File: gzyhoB4xkg_NSfCI0wu0alxIN6A.roa (raw, json)
Hash identifier: TwzquZs8/+VGkzMd96VsL2ND5Om29p6vI2qYSEKpPYY=
Subject key identifier: 83:3C:A1:A0:1E:31:92:0F:CD:49:F0:88:D3:0B:B4:6A:5C:48:37:A0
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E14C2E7063728F8A4A8A5434B858562D7
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/gzyhoB4xkg_NSfCI0wu0alxIN6A.roa
Signing time: Wed 06 Mar 2024 17:15:01 +0000
ROA not before: Wed 06 Mar 2024 17:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 2a02:26f0:9700::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Mar 2024 14:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:c2:e7:06:37:28:f8:a4:a8:a5:43:4b:85:85:62:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 6 17:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=833ca1a01e31920fcd49f088d30bb46a5c4837a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:b4:f4:0f:1a:7a:46:9e:24:4a:5f:ef:d5:
4a:f5:a1:56:5d:2b:ad:54:2a:25:56:bf:b4:01:c1:
38:b4:70:61:96:41:45:eb:2b:b8:3d:ef:ce:e2:22:
35:96:03:05:2f:1b:10:89:35:8d:26:73:96:b4:27:
09:d0:a9:bf:db:b5:f8:d5:d3:ec:75:f2:91:4b:a5:
25:e0:b0:51:30:4c:3f:e3:7d:87:2a:d0:b9:b4:61:
43:3a:e4:fb:6c:8f:65:34:af:74:d8:75:b8:39:ef:
9b:1c:ea:57:4f:39:f7:6c:43:e9:c2:d4:1c:bd:d5:
e6:17:86:1a:ee:1c:c1:ff:be:7e:15:0b:b1:02:8d:
47:37:34:3a:c0:ab:16:c2:12:d4:21:58:25:76:4f:
2a:62:12:b1:e3:32:b0:a3:7a:a4:24:1e:b3:77:71:
fb:fd:83:a4:f6:b8:f7:2f:8c:ef:bb:fc:90:35:99:
55:74:04:12:bb:e4:1f:86:d0:d6:26:86:3b:7a:91:
25:43:5d:1a:fb:fc:07:1f:ee:f5:e2:69:bf:22:24:
c8:b7:78:fc:0c:82:75:df:08:6d:32:c8:31:2f:0f:
7d:87:b5:4e:4f:5a:6c:35:93:fe:fa:a5:89:02:7f:
b7:69:34:23:16:fa:ed:42:b4:96:c0:14:97:e5:f9:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3C:A1:A0:1E:31:92:0F:CD:49:F0:88:D3:0B:B4:6A:5C:48:37:A0
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/gzyhoB4xkg_NSfCI0wu0alxIN6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:26f0:9700::/48
Signature Algorithm: sha256WithRSAEncryption
2b:65:cf:80:e8:fc:2b:70:10:2a:8f:41:38:07:ba:c1:72:d3:
02:6d:c0:c2:53:4f:81:07:c7:c4:6a:b1:d0:30:3b:6a:85:d6:
31:09:1c:6a:a3:37:d9:27:e2:60:c7:90:c5:e2:39:90:6e:58:
6e:75:4c:fe:0d:c3:5d:69:10:43:dc:71:04:4d:01:25:4d:ba:
d6:c3:b0:07:f7:bf:4e:27:0f:72:6f:ec:3a:2c:d0:9f:28:b9:
a9:ef:76:3d:1d:b2:ce:bd:29:be:33:70:46:92:56:bd:c0:0e:
79:6b:40:45:1d:e2:48:d5:a6:07:90:16:84:39:24:ee:5c:48:
5a:2b:47:b8:e0:b8:9a:8d:c8:43:b6:73:5f:b7:1b:a7:99:04:
88:a7:a6:08:a2:ac:fa:6d:9c:86:96:20:32:7e:18:b3:7b:46:
d9:71:a6:88:31:2a:9c:bc:50:69:a5:96:fe:c2:3e:9d:bd:7b:
5f:11:62:55:68:65:75:3b:d4:2a:b0:5c:c0:1d:7f:de:1e:1d:
9c:a0:92:41:c4:7a:71:60:0e:3a:61:08:e6:74:57:f3:9c:ba:
4d:fd:ad:80:2a:5b:04:29:bd:12:a1:c5:5e:cf:80:e2:88:ac:
ab:2c:a8:c6:d8:48:35:65:5c:a8:b7:52:be:7d:24:db:d4:14:
7c:f3:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:58:05 2024 by rpki-client on console-ams.rpki-client.org