Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GDpvRozh_wTwW5yEucerK1PX4qg.roa
File: GDpvRozh_wTwW5yEucerK1PX4qg.roa (raw, json)
Hash identifier: 2GeE6h5UDhqg9ybdsAAfL1tJVacRUmy5KL21MOyWa64=
Subject key identifier: 18:3A:6F:46:8C:E1:FF:04:F0:5B:9C:84:B9:C7:AB:2B:53:D7:E2:A8
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FDE0C4E7F5F0E3B2CE6591AFD4A50
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GDpvRozh_wTwW5yEucerK1PX4qg.roa
Signing time: Sun 01 Jan 2023 21:14:45 +0000
ROA not before: Sun 01 Jan 2023 21:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48266
IP address blocks: 2a0e:aa07:e033::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 05 Mar 2023 14:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:de:0c:4e:7f:5f:0e:3b:2c:e6:59:1a:fd:4a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=183a6f468ce1ff04f05b9c84b9c7ab2b53d7e2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:50:79:87:a5:ff:bf:94:08:82:06:69:6a:
8b:7e:3b:48:cc:98:eb:24:c2:97:88:07:8a:f2:0d:
47:bf:57:bb:f3:44:48:e2:be:f6:20:15:60:7b:0b:
94:34:5e:7a:e7:8f:04:14:e1:6e:41:ef:7b:7b:d6:
e9:53:fc:2a:ff:ce:5d:ba:85:3a:c8:db:b3:50:2d:
90:97:4b:c1:6d:3b:72:08:08:bd:e8:bc:b5:51:4a:
bb:78:b5:56:db:ce:7f:90:5d:44:e4:d1:f1:87:b2:
6b:6c:3d:d5:3e:a7:d0:94:b8:a0:96:f8:42:45:b4:
07:f1:13:fa:58:22:ca:80:fd:a4:22:25:77:85:d2:
53:1e:5d:cb:72:24:2b:28:f8:6f:38:5c:55:73:56:
75:cf:2b:a2:32:cd:e5:8c:81:6b:b5:07:b7:2e:9a:
4e:a3:1a:d0:11:e3:58:9c:c0:71:4c:93:25:d8:78:
d2:77:d0:df:39:5c:88:c7:78:6a:ff:bb:6f:af:9f:
31:b4:ad:89:88:a8:61:51:a5:bc:cd:0f:2d:8c:e1:
a8:83:37:56:dc:56:f7:23:30:55:9d:bd:02:1c:6b:
55:1e:b5:e0:25:90:80:06:ad:f8:aa:38:be:83:3a:
0b:32:72:61:c5:7c:16:f9:37:39:91:67:45:9d:90:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:6F:46:8C:E1:FF:04:F0:5B:9C:84:B9:C7:AB:2B:53:D7:E2:A8
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GDpvRozh_wTwW5yEucerK1PX4qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e033::/48
Signature Algorithm: sha256WithRSAEncryption
a4:13:25:99:d1:d8:9c:02:49:b3:25:58:fd:95:a0:ba:a5:0a:
d5:49:32:41:f1:76:a3:9b:c0:eb:91:cd:5a:c1:78:ae:8d:3e:
7b:18:2b:16:f5:3d:6d:ee:d9:84:15:c6:4b:b5:50:9a:c0:e3:
dc:ae:49:b7:ca:56:fa:a8:3a:c5:6b:cd:82:68:48:6f:df:bd:
bc:1d:d1:37:7f:4f:0c:c8:04:e2:7b:04:98:5c:ba:d5:e8:14:
db:2e:fe:cf:98:4b:5a:6e:48:51:ba:be:68:08:3a:55:1a:9d:
c2:2a:1d:ab:ce:1c:7e:e9:d8:11:d0:01:f3:11:ff:28:48:b8:
12:08:8d:d2:1d:f0:a3:65:ec:df:2f:0e:ec:c1:57:f8:c7:21:
7e:68:23:1f:2f:dd:d9:cc:e5:1b:a5:39:db:5b:a8:1f:87:7e:
52:dd:aa:e1:75:95:45:c7:8c:81:6f:6f:6f:79:aa:a7:83:f5:
43:5a:9d:0e:f4:14:08:c7:72:46:88:3c:8e:6b:27:1a:27:ac:
ba:c1:87:16:f0:f3:67:4c:7b:99:d4:15:f1:8c:61:e2:82:d7:
31:9d:fb:6d:f6:8a:68:47:21:e8:4a:ad:e0:58:eb:fb:09:76:
26:28:08:65:80:d7:58:60:9c:95:18:01:6b:3b:99:df:84:c5:
88:3f:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org