Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/Gscq1oEb-CKKtEc5k1aTGC8ivC4.roa
File: Gscq1oEb-CKKtEc5k1aTGC8ivC4.roa (raw, json)
Hash identifier: 7LIOvaRXoz9jT00nHk/eJrO7KIgEhWAEb1MtM6L4dj4=
Subject key identifier: 1A:C7:2A:D6:81:1B:F8:22:8A:B4:47:39:93:56:93:18:2F:22:BC:2E
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 0192D3351D10A4C73BC0863DDDAB5566B4FE
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/Gscq1oEb-CKKtEc5k1aTGC8ivC4.roa
Signing time: Mon 28 Oct 2024 12:58:46 +0000
ROA not before: Mon 28 Oct 2024 12:58:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398826
IP address blocks: 2a02:7080::/48 maxlen: 48
2a02:7080:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:35:1d:10:a4:c7:3b:c0:86:3d:dd:ab:55:66:b4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Oct 28 12:58:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ac72ad6811bf8228ab44739935693182f22bc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:70:a9:bb:ab:60:18:02:c1:af:ef:03:d1:ec:
5e:cd:20:d2:de:ce:c7:b5:0b:2b:bf:af:8c:57:36:
c5:15:e5:e5:34:74:be:d7:b1:0a:3a:56:c7:11:60:
51:e1:d0:3d:d5:01:02:0e:07:38:62:71:4b:31:79:
25:bb:e7:1c:e7:69:d3:95:bc:38:41:83:ba:e2:1f:
dc:58:6b:2f:41:19:0a:96:47:18:bd:4b:13:96:18:
75:36:0b:ad:90:24:b4:f2:83:46:4d:43:6f:bb:e8:
93:b5:52:d4:4e:56:57:bf:00:48:23:cb:99:ca:88:
68:31:7c:90:46:b0:24:13:0e:35:a9:05:a9:ef:d5:
9d:48:d7:d8:4e:0a:96:db:6f:e7:27:dd:9b:41:3c:
09:10:23:3e:2b:cf:14:20:3e:68:03:61:c5:5f:42:
f9:04:33:ce:1a:84:c0:a8:a3:5c:6e:e8:a9:6e:bd:
90:eb:ca:13:bf:4d:ad:65:8a:cc:65:f0:da:76:c2:
39:c9:d5:57:aa:d3:98:9e:e4:a8:a5:54:73:65:f3:
10:79:75:62:9d:95:b7:ca:bf:80:78:99:22:aa:1f:
d5:80:fb:c1:40:26:ef:5b:fa:f7:f4:13:c4:ac:4c:
ad:25:c2:83:25:48:ae:5c:77:ad:26:ff:e3:58:90:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C7:2A:D6:81:1B:F8:22:8A:B4:47:39:93:56:93:18:2F:22:BC:2E
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/Gscq1oEb-CKKtEc5k1aTGC8ivC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7080::/48
2a02:7080:1000::/48
Signature Algorithm: sha256WithRSAEncryption
16:f9:a4:1b:27:12:af:b3:02:f2:23:49:11:31:2a:04:c7:ad:
36:9c:4a:14:c6:6e:3b:42:76:6d:93:62:c5:92:a9:df:ca:d2:
29:82:6c:7d:c4:f4:00:b4:9c:15:2d:9d:63:93:f6:a3:85:15:
07:ea:98:b2:23:17:7a:e7:85:06:39:3b:17:7d:fa:78:2c:91:
05:9e:1f:bf:bb:0c:d3:02:f9:7b:42:48:ef:3e:09:53:4a:49:
b9:5b:6e:1a:4e:35:64:94:3d:91:cb:fa:b1:da:1b:23:fe:bd:
15:b2:ec:88:49:d1:70:37:b1:29:75:ca:d8:9c:e2:b3:8b:a8:
87:c2:f8:90:2b:8e:d9:38:f7:4a:2d:05:fa:18:5d:4b:42:7d:
ab:d1:d0:b6:94:3a:d0:f6:37:3a:c6:52:d2:e2:a4:e8:b1:bf:
7c:72:81:b6:83:97:51:1c:f0:0c:b5:3c:e0:3a:7b:86:c3:4a:
d9:e5:7a:e3:c9:e5:6c:3b:0c:a6:d8:e7:c7:47:cc:b9:6f:9f:
c1:2e:8a:3a:ee:aa:f1:cc:9a:21:eb:4a:6a:3b:7f:33:df:94:
ff:db:15:a3:20:3d:24:3f:ab:c5:af:69:50:71:3f:01:f7:bf:
bc:f4:98:16:b4:c6:a1:73:e9:ce:d7:48:a2:c1:c1:c1:4a:b9:
01:11:28:6a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZLTNR0QpMc7wIY93atVZrT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlY2MyMjllNTY5OTEwNTgyODU2NGI3ODUwOWYzYjcyZjMw
OTBhMjEwHhcNMjQxMDI4MTI1ODQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWM3MmFkNjgxMWJmODIyOGFiNDQ3Mzk5MzU2OTMxODJmMjJiYzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3Cpu6tgGALBr+8D0exezSDS3s7H
tQsrv6+MVzbFFeXlNHS+17EKOlbHEWBR4dA91QECDgc4YnFLMXklu+cc52nTlbw4
QYO64h/cWGsvQRkKlkcYvUsTlhh1NgutkCS08oNGTUNvu+iTtVLUTlZXvwBII8uZ
yohoMXyQRrAkEw41qQWp79WdSNfYTgqW22/nJ92bQTwJECM+K88UID5oA2HFX0L5
BDPOGoTAqKNcbuipbr2Q68oTv02tZYrMZfDadsI5ydVXqtOYnuSopVRzZfMQeXVi
nZW3yr+AeJkiqh/VgPvBQCbvW/r39BPErEytJcKDJUiuXHetJv/jWJAQdwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBrHKtaBG/giirRHOZNWkxgvIrwuMB8GA1UdIwQY
MBaAFI7MIp5WmRBYKFZLeFCfO3LzCQohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMt
M2M5ZWJjNDU2NjIzLzEvR3NjcTFvRWItQ0tLdEVjNWsxYVRHQzhpdkM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMtM2M5ZWJjNDU2NjIz
LzEvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgJwgAAA
AwcAKgJwgBAAMA0GCSqGSIb3DQEBCwUAA4IBAQAW+aQbJxKvswLyI0kRMSoEx602
nEoUxm47QnZtk2LFkqnfytIpgmx9xPQAtJwVLZ1jk/ajhRUH6piyIxd654UGOTsX
ffp4LJEFnh+/uwzTAvl7QkjvPglTSkm5W24aTjVklD2Ry/qx2hsj/r0VsuyISdFw
N7EpdcrYnOKzi6iHwviQK47ZOPdKLQX6GF1LQn2r0dC2lDrQ9jc6xlLS4qTosb98
coG2g5dRHPAMtTzgOnuGw0rZ5XrjyeVsOwym2OfHR8y5b5/BLoo67qrxzJoh60pq
O38z35T/2xWjID0kP6vFr2lQcT8B97+89JgWtMahc+nO10iiwcHBSrkBEShq
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:08 2025 by rpki-client