Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/gdhlQw1uQTHpx60R6nj1fhsibOk.roa
File: gdhlQw1uQTHpx60R6nj1fhsibOk.roa (raw, json)
Hash identifier: 8gXCJOSQJxZ3qaN7sX5ryDl5inrQXyCHweetg8RswO4=
Subject key identifier: 81:D8:65:43:0D:6E:41:31:E9:C7:AD:11:EA:78:F5:7E:1B:22:6C:E9
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 01921A75ED197E3E69CB0D644AD1042F5918
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/gdhlQw1uQTHpx60R6nj1fhsibOk.roa
Signing time: Sun 22 Sep 2024 15:59:48 +0000
ROA not before: Sun 22 Sep 2024 15:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214402
IP address blocks: 2a0d:8140:5fff::/48 maxlen: 48
2a0d:8140:6fff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 14 Oct 2024 12:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1a:75:ed:19:7e:3e:69:cb:0d:64:4a:d1:04:2f:59:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Sep 22 15:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81d865430d6e4131e9c7ad11ea78f57e1b226ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:45:38:b5:3f:15:08:9b:af:75:e9:f0:ad:b4:
ca:83:1a:fa:bb:3a:9a:00:51:e6:2f:05:d0:a6:8f:
48:5e:3b:dc:d3:d2:68:b8:d9:a3:6b:c9:02:01:f4:
68:57:f2:88:3b:57:74:c9:ab:d9:6a:f3:1c:48:e0:
15:c2:0d:6d:03:25:78:e2:25:a4:9a:41:71:53:5b:
93:b0:8d:f2:80:df:a1:fc:4e:ea:ce:74:bf:e1:2e:
5b:13:29:b6:7a:03:d5:00:f1:3d:99:e4:d9:44:c7:
87:9a:82:42:d6:a3:b1:be:6e:ad:31:c8:76:5f:cb:
41:85:f7:9e:20:83:5a:55:74:ea:53:de:47:df:d5:
8b:9a:48:ce:6e:ce:03:af:aa:2a:97:d7:b0:d2:07:
ed:7a:78:4b:df:37:7d:92:27:15:ac:24:b4:c0:2d:
3a:7b:1a:ca:04:4a:27:da:30:8a:ee:6a:d1:e9:60:
a7:8f:37:60:28:e7:b1:93:de:77:1c:06:de:dd:94:
a5:7f:ba:3c:8e:10:c1:3c:34:3d:b9:22:41:7d:cf:
0e:aa:dc:db:3a:93:8e:d2:f8:ea:fb:48:74:21:29:
9e:37:f1:d6:43:fe:c3:9f:a6:3b:bd:3f:21:89:4e:
34:12:c3:5b:b8:33:08:23:ca:20:ec:24:f8:28:46:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:65:43:0D:6E:41:31:E9:C7:AD:11:EA:78:F5:7E:1B:22:6C:E9
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/gdhlQw1uQTHpx60R6nj1fhsibOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8140:5fff::/48
2a0d:8140:6fff::/48
Signature Algorithm: sha256WithRSAEncryption
6e:d1:01:ad:35:10:15:71:ed:72:82:ea:8d:0c:4f:7d:a1:16:
16:8f:90:67:f7:b8:07:a4:ca:f3:7a:7c:77:99:0e:33:f9:ef:
bf:9a:75:8b:87:0a:b1:31:28:36:09:3e:ea:13:96:55:c2:8d:
92:dd:79:b1:a4:4c:24:de:06:48:8b:25:68:da:be:f1:55:7d:
fc:63:0f:2c:aa:44:07:72:1d:c7:13:a5:92:2e:70:30:14:99:
76:68:55:2d:55:be:4d:52:eb:34:fb:23:59:a1:f2:5b:52:fd:
ea:c3:1c:59:6c:00:d6:dc:05:a7:97:24:4a:22:82:06:64:d5:
01:75:ef:be:cf:23:40:56:d3:01:ac:b7:21:65:43:e4:49:d8:
1f:20:2d:d9:79:27:39:f2:91:b8:a0:72:14:b6:69:2a:5f:42:
93:d5:af:28:e6:32:7c:8e:0b:0a:3b:90:96:90:89:f8:bc:2d:
7e:fa:c0:0d:fc:66:54:23:7b:c8:02:e6:6b:bb:9b:cb:71:56:
62:76:a2:46:58:5f:9a:07:e7:d7:c2:71:49:34:70:a8:dc:34:
fe:e0:55:da:9b:03:a1:2f:ba:df:69:ba:53:28:be:f9:d1:c7:
ac:f0:34:74:73:bd:63:56:46:d9:ba:ba:e5:27:f8:d9:1e:98:
eb:e6:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:58:38 2025 by rpki-client