Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/GypIvwLyTWEF01DsLvOFfvQ-klQ.roa
File: GypIvwLyTWEF01DsLvOFfvQ-klQ.roa (raw, json)
Hash identifier: h8qWp1LXtA5euylqV1H5ysy9VnzdlWz/sKDtO1194LI=
Subject key identifier: 1B:2A:48:BF:02:F2:4D:61:05:D3:50:EC:2E:F3:85:7E:F4:3E:92:54
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 01942862023FB6B50D76BEAA5A99564851C5
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/GypIvwLyTWEF01DsLvOFfvQ-klQ.roa
Signing time: Thu 02 Jan 2025 18:58:19 +0000
ROA not before: Thu 02 Jan 2025 18:58:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201966
IP address blocks: 2a14:8900::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 17 Jan 2025 20:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:62:02:3f:b6:b5:0d:76:be:aa:5a:99:56:48:51:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: Jan 2 18:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b2a48bf02f24d6105d350ec2ef3857ef43e9254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:30:ed:aa:43:8e:b3:b4:8e:9c:79:aa:4f:
98:a4:47:87:a1:da:c9:5f:7a:e7:6d:0f:07:4a:09:
39:4e:72:43:ef:1c:f9:4e:8a:c2:d5:53:40:66:9f:
60:14:b0:9e:7a:b6:f7:fc:c5:29:92:c4:43:49:7f:
2b:0b:4e:55:67:f7:4a:b5:79:2a:97:4f:5e:63:36:
a2:e9:81:a3:82:da:c9:fc:dc:76:7c:60:9d:51:09:
f6:03:50:a3:aa:7e:aa:3a:6c:25:68:bb:33:cd:0a:
5d:22:c1:55:0b:5d:ee:7c:9c:3b:75:66:8e:33:da:
7d:b8:9c:92:50:07:9f:8a:1b:67:1d:07:fc:c9:e3:
13:9d:d1:bb:70:08:85:f9:31:53:1c:12:70:d5:cf:
fe:0b:28:9d:e9:c7:7e:9b:6d:51:82:cb:75:1d:a6:
d6:9f:08:99:68:e4:ff:81:c9:a9:c9:48:f8:82:60:
7c:19:df:d2:9c:ab:43:5b:08:c1:5b:83:c6:d5:98:
1f:7f:ba:50:c3:64:bc:f3:47:39:a3:7c:e0:19:05:
48:7c:0d:76:32:ea:c5:b9:88:d4:a4:cf:79:08:60:
a4:f8:dc:e9:c3:0e:98:f7:cc:10:08:b8:50:8f:79:
f5:16:4d:c4:77:e1:f4:cc:ef:79:a6:93:2a:b4:fc:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2A:48:BF:02:F2:4D:61:05:D3:50:EC:2E:F3:85:7E:F4:3E:92:54
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/GypIvwLyTWEF01DsLvOFfvQ-klQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:8900::/32
Signature Algorithm: sha256WithRSAEncryption
a2:58:5d:ed:7c:eb:4c:46:c8:7b:43:10:3d:9e:cf:8c:97:1f:
e2:7d:4c:2d:95:b8:e0:ed:f7:1b:bd:07:3e:61:c5:22:33:a5:
91:22:0c:43:a0:50:a6:0d:20:ae:c3:7d:eb:b1:42:62:5c:3c:
ce:2c:de:94:cc:c6:1c:09:e9:1c:a7:79:c8:16:7e:31:5f:0a:
6b:c0:64:72:eb:0e:34:08:27:51:47:af:ee:b4:dd:1d:11:40:
a6:4a:bf:3d:4e:97:48:26:64:c8:15:37:f1:72:cb:de:96:b6:
40:11:73:b7:c7:3a:53:07:40:80:9f:94:f0:8d:60:86:69:10:
0f:5f:4c:6c:b8:f5:72:52:21:1d:ca:a3:73:8c:56:5a:5f:32:
b7:55:86:77:5b:18:08:61:7c:bf:b5:f2:e6:95:4c:bd:df:0d:
32:bb:8b:07:5b:73:49:65:b7:ff:6e:52:4c:9c:67:12:cd:8b:
43:50:f9:b7:8a:e8:0d:74:6c:59:5c:e2:d7:a9:0e:6a:c3:0e:
fc:a6:d4:34:ba:f2:1a:07:be:87:d8:59:30:00:d7:c2:36:2f:
f8:c5:5d:9d:c9:9a:fc:ee:ff:79:4a:04:0c:50:84:0a:be:c3:
09:43:9c:a1:8e:9a:91:43:4f:52:a2:76:4c:aa:a2:1e:8b:2c:
1f:82:08:9f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQoYgI/trUNdr6qWplWSFHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTU1MTdiMGIyMDMwOWU5MTY0MDViOWUxZWQyMWEwNDY5
YTY4OTUwHhcNMjUwMTAyMTg1ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjJhNDhiZjAyZjI0ZDYxMDVkMzUwZWMyZWYzODU3ZWY0M2U5MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq0w7apDjrO0jpx5qk+YpEeHodrJ
X3rnbQ8HSgk5TnJD7xz5TorC1VNAZp9gFLCeerb3/MUpksRDSX8rC05VZ/dKtXkq
l09eYzai6YGjgtrJ/Nx2fGCdUQn2A1Cjqn6qOmwlaLszzQpdIsFVC13ufJw7dWaO
M9p9uJySUAefihtnHQf8yeMTndG7cAiF+TFTHBJw1c/+Cyid6cd+m21Rgst1HabW
nwiZaOT/gcmpyUj4gmB8Gd/SnKtDWwjBW4PG1Zgff7pQw2S880c5o3zgGQVIfA12
MurFuYjUpM95CGCk+Nzpww6Y98wQCLhQj3n1Fk3Ed+H0zO95ppMqtPx21wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBsqSL8C8k1hBdNQ7C7zhX70PpJUMB8GA1UdIwQY
MBaAFPIVUXsLIDCekWQFueHtIaBGmmiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAt
Yjk1YTE2NDE2YjU2LzEvR3lwSXZ3THlUV0VGMDFEc0x2T0ZmdlEta2xRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAtYjk1YTE2NDE2YjU2
LzEvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhSJADAN
BgkqhkiG9w0BAQsFAAOCAQEAolhd7XzrTEbIe0MQPZ7PjJcf4n1MLZW44O33G70H
PmHFIjOlkSIMQ6BQpg0grsN967FCYlw8zizelMzGHAnpHKd5yBZ+MV8Ka8BkcusO
NAgnUUev7rTdHRFApkq/PU6XSCZkyBU38XLL3pa2QBFzt8c6UwdAgJ+U8I1ghmkQ
D19MbLj1clIhHcqjc4xWWl8yt1WGd1sYCGF8v7Xy5pVMvd8NMruLB1tzSWW3/25S
TJxnEs2LQ1D5t4roDXRsWVzi16kOasMO/KbUNLryGge+h9hZMADXwjYv+MVdncma
/O7/eUoEDFCECr7DCUOcoY6akUNPUqJ2TKqiHossH4IInw==
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:03:19 2025 by rpki-client