Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GNV795g4voMAOLlge8-GfW6C7YI.roa
File: GNV795g4voMAOLlge8-GfW6C7YI.roa (raw, json)
Hash identifier: BdPZW8sRI9F9CQX9MSlEfZkEPBopD3RVR3qcB4dJAfg=
Subject key identifier: 18:D5:7B:F7:98:38:BE:83:00:38:B9:60:7B:CF:86:7D:6E:82:ED:82
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191CE8AB592A7EF0ED3FF241581A75B193C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GNV795g4voMAOLlge8-GfW6C7YI.roa
Signing time: Sat 07 Sep 2024 22:11:22 +0000
ROA not before: Sat 07 Sep 2024 22:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 07 Sep 2024 23:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ce:8a:b5:92:a7:ef:0e:d3:ff:24:15:81:a7:5b:19:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 7 22:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18d57bf79838be830038b9607bcf867d6e82ed82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:fe:2c:f2:74:14:d6:c1:a0:24:1d:5d:e4:
25:52:cd:e4:c8:96:7a:ec:d4:f6:7b:30:d8:7b:ee:
bd:52:d5:39:b5:da:84:2d:33:e8:6b:9f:18:27:f0:
48:b1:57:f5:4d:ac:9b:07:ca:73:7e:ba:39:fc:90:
d2:4f:25:ea:c3:f1:48:cf:68:7d:d0:d7:a7:6b:99:
ab:88:cc:f0:f7:55:36:ba:6c:69:bf:1d:57:d9:ed:
be:1e:7a:6d:4a:96:b5:90:e8:d6:f2:9a:6e:20:cd:
ad:26:f2:0a:2d:3c:c6:cf:c9:a2:fa:2a:f2:91:b2:
57:e9:3b:92:1a:87:45:d2:ec:56:fd:67:28:34:24:
e8:a7:a3:0d:05:af:e0:55:63:da:84:f6:9e:4c:3b:
c6:7f:76:7c:46:ae:33:71:a7:1c:ef:2a:c5:17:2c:
fa:49:98:fd:c6:a2:c3:46:6f:ec:f8:cc:7b:ba:cb:
88:bb:bd:d6:dd:a8:69:43:88:d3:69:40:46:83:58:
51:44:81:75:85:b4:da:60:b0:e7:18:eb:1a:b4:67:
6f:06:38:a7:cb:39:e5:eb:48:6b:85:6b:85:63:e9:
79:bb:53:e9:3d:f3:3c:75:85:6d:b1:52:4a:3c:82:
78:34:01:6a:df:00:30:82:af:64:79:34:d7:26:a1:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D5:7B:F7:98:38:BE:83:00:38:B9:60:7B:CF:86:7D:6E:82:ED:82
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GNV795g4voMAOLlge8-GfW6C7YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
47:99:72:8c:2c:f0:d6:d0:4d:1e:c9:9b:1c:e8:5f:21:fc:00:
e4:db:cc:aa:aa:ee:f4:25:99:94:93:02:7a:c5:6f:36:94:3c:
ed:00:7c:82:a8:a4:c0:76:de:7d:08:93:db:f3:1a:7c:8a:82:
5e:77:7b:ab:ae:55:07:d4:0a:2f:99:5c:1b:4a:52:19:02:fd:
8e:c5:7e:b8:ef:39:6f:03:eb:37:c3:43:ee:52:26:0e:11:c4:
e7:43:b8:cc:2f:df:4a:ac:89:48:81:52:5b:51:80:ff:ea:0d:
4b:36:3e:e5:81:ae:bc:bd:37:d3:26:2d:44:90:e8:f3:2c:03:
e4:e5:fc:a1:2f:fe:7a:fa:e7:80:28:f2:29:61:08:66:15:0a:
99:9b:4f:ed:c2:2c:22:a4:2e:ef:4b:10:0a:2e:d8:cd:50:fb:
db:6c:37:7c:55:cb:6e:6a:67:90:81:83:8d:35:a5:37:f3:13:
fa:26:41:54:e4:fe:63:fe:e9:60:20:97:1a:57:c5:cd:ee:a4:
04:11:0e:73:10:d3:a1:ee:d7:5b:9d:f0:78:56:9f:a1:45:62:
27:e2:e6:76:7c:d7:0b:5a:2b:aa:19:ad:09:cc:9f:06:77:bc:
0e:de:a5:bb:d4:c7:c3:d6:b5:58:4c:a0:31:0f:77:cd:3d:6f:
ff:be:65:ab
-----BEGIN CERTIFICATE-----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==
Generated at Sun Sep 8 00:22:51 2024 by rpki-client on console-fra.rpki-client.org