Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/gzBj3P1VHg1kOoGcZBLN8M_0Wfw.roa
File: gzBj3P1VHg1kOoGcZBLN8M_0Wfw.roa (raw, json)
Hash identifier: LVK5DWVA5LlG7SLRJnFlOIF14bhkp/2jLil7dO3I+rA=
Subject key identifier: 83:30:63:DC:FD:55:1E:0D:64:3A:81:9C:64:12:CD:F0:CF:F4:59:FC
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 018CC6B7891FA96063EEE7307EF740263E58
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/gzBj3P1VHg1kOoGcZBLN8M_0Wfw.roa
Signing time: Mon 01 Jan 2024 20:29:26 +0000
ROA not before: Mon 01 Jan 2024 20:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206059
IP address blocks: 2a0e:3780:8150::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:89:1f:a9:60:63:ee:e7:30:7e:f7:40:26:3e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=833063dcfd551e0d643a819c6412cdf0cff459fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:3b:89:51:25:29:26:a7:a7:48:59:c3:8f:
e2:1a:7f:c4:8a:1a:ce:24:80:68:ec:10:8e:a3:a4:
fd:1c:7a:4b:21:a1:d9:9f:3c:a8:46:7a:ae:57:92:
6d:2b:62:d5:0f:22:7b:45:4f:37:92:b2:2a:95:96:
04:1d:66:25:59:8e:7d:5d:72:b1:a4:f0:62:cb:7f:
03:3a:52:a5:cc:1a:8a:20:4c:ee:f2:81:93:69:16:
9b:83:21:de:9a:e9:98:f3:53:fb:21:f2:c7:a7:98:
7b:1e:28:a8:fd:4f:85:dc:15:65:b3:f5:ab:b5:7e:
cb:7a:69:56:13:6f:37:48:04:ff:a2:d5:55:d6:9a:
bb:65:f8:af:2a:e7:2b:46:e1:fe:1a:60:81:54:83:
bd:cd:5a:bb:88:ec:5b:60:97:49:4a:1f:14:ed:87:
3f:e3:0d:5f:92:b7:37:3f:d2:e6:42:4e:b4:e6:d1:
20:c3:ce:59:61:a0:b3:5f:73:47:3c:ec:bc:3d:5a:
a3:1d:f5:f9:bd:89:d9:ce:45:42:b8:5c:c9:00:c6:
17:29:35:84:b8:61:5e:b5:e7:a2:15:98:1e:09:ae:
ce:61:25:c7:81:41:b3:ad:17:42:cf:2b:9c:e3:a9:
5b:f5:50:e0:92:bc:45:9b:8d:01:4a:89:40:6e:de:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:63:DC:FD:55:1E:0D:64:3A:81:9C:64:12:CD:F0:CF:F4:59:FC
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/gzBj3P1VHg1kOoGcZBLN8M_0Wfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3780:8150::/48
Signature Algorithm: sha256WithRSAEncryption
c0:20:5c:82:6b:38:ad:e4:b7:b5:e6:a3:61:f1:af:a0:fe:e2:
2e:29:dc:73:0a:fe:52:c1:8e:08:4e:de:d8:9b:dc:23:0f:b5:
9b:54:b4:54:22:8f:dd:74:e8:6d:26:25:da:66:85:0f:94:80:
37:80:ea:cd:e8:b2:0a:1b:8b:4e:82:38:59:76:71:1c:72:ef:
2a:8d:45:a2:ea:70:47:10:51:26:00:b5:21:5a:54:a0:30:3d:
1c:f5:55:c9:95:fe:df:1e:ed:ed:10:da:64:d9:c5:34:55:26:
f7:f6:d8:c7:0c:39:0c:79:3f:33:d1:67:94:1a:fd:f1:2e:84:
66:96:6a:80:1e:cd:aa:4c:8e:48:ca:a6:05:ea:33:0a:d4:af:
4c:31:e8:97:b6:56:b2:90:85:05:86:5d:34:02:d2:69:c2:bb:
44:32:46:90:68:d7:07:53:82:fc:3d:51:c3:ff:ab:51:1a:22:
6b:56:1a:65:7f:3c:4b:61:d4:10:6b:a1:66:6e:53:8d:e5:8a:
42:19:b4:dc:cf:aa:56:b4:85:b0:dd:25:3c:7e:ba:e8:2b:25:
6e:9c:50:b2:aa:a7:76:ca:ba:d4:d9:c0:be:e1:f6:f7:45:84:
79:a4:7e:c5:50:e8:28:64:7c:c2:85:de:47:67:f7:c5:32:ff:
94:8b:16:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:44 2025 by rpki-client