Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/GtYH7P8xDw8YQDzbRqId_W8lDcQ.roa
File: GtYH7P8xDw8YQDzbRqId_W8lDcQ.roa (raw, json)
Hash identifier: ugj6TSzEt10OnaWKcgkJeGg6cxeTCdRiWEuChyRUY2E=
Subject key identifier: 1A:D6:07:EC:FF:31:0F:0F:18:40:3C:DB:46:A2:1D:FD:6F:25:0D:C4
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F0E27872C24095586BB1E0B7ADF28
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/GtYH7P8xDw8YQDzbRqId_W8lDcQ.roa
Signing time: Sun 01 Jan 2023 08:24:55 +0000
ROA not before: Sun 01 Jan 2023 08:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211930
IP address blocks: 2a0e:46c4:1400::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Nov 2023 11:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:0e:27:87:2c:24:09:55:86:bb:1e:0b:7a:df:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ad607ecff310f0f18403cdb46a21dfd6f250dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:72:41:75:7e:9b:e5:27:19:47:cc:04:94:
eb:2e:b7:7f:64:d4:af:14:ff:c7:87:82:af:1b:1a:
ce:09:a4:cf:10:c2:61:f5:f0:a1:8d:01:d0:e6:5f:
14:e9:da:7c:80:17:62:40:9f:eb:6f:1a:fd:20:dc:
ff:e7:06:d1:0a:f4:8d:20:2f:96:2c:25:7a:c5:18:
82:bb:f3:7b:1c:ab:42:69:0e:bf:f8:8c:e7:ca:b9:
b9:37:a5:97:5d:8e:a1:27:df:55:12:96:d9:86:40:
ee:f3:c1:e5:5f:f5:1a:4b:23:d2:6c:b3:44:d9:f0:
92:53:13:96:b3:1b:63:6a:fb:d0:b3:fd:42:c3:dc:
b9:d2:5d:fb:31:4e:2c:2b:0c:b9:06:46:ea:9b:dd:
db:a1:33:2b:7f:9e:c6:86:88:ac:fe:aa:49:62:07:
97:98:58:3d:1b:00:4a:36:36:57:99:32:62:e0:40:
eb:01:e9:8f:42:38:bb:0b:7e:c3:ce:be:c5:94:68:
b0:cf:b1:85:23:40:7d:69:bd:d3:27:56:f1:c7:43:
8b:b3:47:f3:c2:6e:d0:79:65:2e:7e:37:dd:0a:ce:
f4:e6:47:b8:9d:64:d4:b6:94:ff:5b:7c:cb:5d:5d:
c2:c2:81:9e:72:79:64:2e:7b:92:0b:ec:7c:29:74:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D6:07:EC:FF:31:0F:0F:18:40:3C:DB:46:A2:1D:FD:6F:25:0D:C4
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/GtYH7P8xDw8YQDzbRqId_W8lDcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:1400::/40
Signature Algorithm: sha256WithRSAEncryption
35:7c:1f:6b:55:25:91:a3:06:92:2b:5b:85:4d:68:76:a5:4f:
ea:25:45:5f:52:9f:fd:38:c2:b9:40:66:46:31:31:a7:5a:71:
1d:0c:f4:4d:e4:25:0b:8f:86:82:4a:63:d5:47:38:d0:64:40:
cc:a1:99:6c:dd:e2:fc:f8:b3:6d:c7:c2:2d:d7:8b:c3:93:8f:
33:e0:9b:97:ce:39:2d:88:4e:c2:4c:3f:47:61:68:d4:85:e6:
07:23:14:4f:f9:7a:af:13:7b:c6:db:c2:d7:a9:7f:88:9b:44:
93:fc:f5:e5:b8:4e:10:46:3b:59:32:9a:11:2d:0b:90:45:92:
37:d5:e5:54:75:e5:b8:16:d2:0a:af:1e:0f:cf:44:88:42:b5:
b4:7f:06:f2:f7:0e:b0:d7:6e:0f:c9:ad:b6:fe:b2:35:c5:e5:
7b:4e:b1:c5:37:8b:61:be:bd:e3:5d:54:87:c1:de:ee:d9:f0:
a1:15:31:df:54:35:e6:fe:4c:a7:3b:c4:10:7f:f2:e7:53:16:
22:0d:06:a3:81:81:28:91:d8:e5:1a:2c:c2:07:50:82:5e:57:
1a:72:48:fc:34:5c:c3:e5:fa:5d:da:ff:a0:1b:ec:ff:d9:47:
96:64:1d:11:06:94:00:3e:95:cd:2d:db:fe:82:f8:c9:51:b0:
8e:76:3b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:15 2024 by rpki-client on console-fra.rpki-client.org