Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/GNVIsbhrWBUJTfmdKiPf2gzFQSM.roa
File: GNVIsbhrWBUJTfmdKiPf2gzFQSM.roa (raw, json)
Hash identifier: Zn+gmCy6tKqtSdphivTbjKi3CtT6diIeWPRdYsNSrRc=
Subject key identifier: 18:D5:48:B1:B8:6B:58:15:09:4D:F9:9D:2A:23:DF:DA:0C:C5:41:23
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018571D7CC44B053520FDFB0721789C9C246
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/GNVIsbhrWBUJTfmdKiPf2gzFQSM.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46475
IP address blocks: 2a11:840:35::/48 maxlen: 48
2a11:840:38::/48 maxlen: 48
2a11:840:36::/48 maxlen: 48
2a11:840:39::/48 maxlen: 48
2a11:840:34::/48 maxlen: 48
2a11:840:37::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cc:44:b0:53:52:0f:df:b0:72:17:89:c9:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18d548b1b86b5815094df99d2a23dfda0cc54123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:4c:e0:2b:75:cb:ec:01:a3:9d:ca:59:a9:
2d:de:a2:cc:56:c8:04:cf:53:1d:84:a9:3c:38:27:
1a:e2:1e:36:c5:c1:a0:d0:e7:2b:e7:8a:37:57:50:
b0:f5:60:94:8f:4f:00:83:59:ad:e4:11:1d:16:d6:
0a:b2:69:b3:50:56:89:d1:ff:f7:eb:ee:a3:e1:dc:
9e:d9:2a:c5:ec:24:c2:d6:50:77:29:8c:c1:92:b0:
00:58:63:36:ac:47:82:6e:dc:b3:6a:fc:36:1b:a6:
2d:cd:1b:dc:aa:51:79:6c:79:40:38:bb:14:b9:59:
f1:be:37:66:bb:96:75:00:f3:e9:b7:6a:5b:fe:87:
e3:08:5f:6d:39:52:6f:77:54:73:99:95:f1:05:c5:
f1:22:de:c8:9c:9d:7e:00:6b:75:1d:1d:17:02:2a:
83:78:c4:48:cd:da:99:6f:fb:36:2c:91:30:5a:04:
fd:55:d1:f4:31:56:8f:8b:e2:d4:aa:7d:a2:02:0d:
2f:ba:56:28:0c:0c:75:39:8b:8a:76:74:b6:6f:50:
6f:18:5c:a7:8d:da:8d:db:9f:51:4d:fb:3e:fd:25:
c4:73:e6:a1:b5:2e:82:8c:dd:dd:b7:19:5b:38:14:
85:0d:6e:9f:63:58:72:87:45:26:53:a9:95:f7:48:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D5:48:B1:B8:6B:58:15:09:4D:F9:9D:2A:23:DF:DA:0C:C5:41:23
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/GNVIsbhrWBUJTfmdKiPf2gzFQSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:34::-2a11:840:39:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:3f:3e:c8:58:42:44:b8:27:ae:01:97:a4:5a:e8:47:24:bf:
f8:84:56:11:4f:91:f5:99:76:02:bb:00:b6:1b:0c:d1:b8:17:
8b:93:36:d4:bd:11:0f:99:eb:16:a1:a3:84:1c:e4:5a:3a:2a:
6a:5e:64:e9:7f:7c:26:40:05:09:fa:24:3d:f5:98:c0:97:6b:
93:eb:bb:e0:4e:ac:f7:2c:88:86:b3:f8:1f:43:d4:49:0e:27:
3e:bb:37:60:7b:36:b0:e3:3e:77:90:3d:8e:f9:88:5c:44:48:
4e:a0:a8:b9:58:5a:fd:b3:66:9c:0d:f2:3d:95:77:79:da:f9:
76:82:69:35:96:5f:f8:1b:06:ca:d5:58:74:3a:8a:b0:c6:73:
92:67:55:d2:03:07:e6:fe:74:15:c8:42:79:c9:f3:75:e3:c1:
9b:c7:96:fd:1f:0f:1b:40:bb:2f:e6:31:ed:ab:fc:2b:58:5b:
a3:02:59:44:95:53:5a:e7:34:b7:ea:51:ae:4f:5c:ab:0b:90:
40:a9:b2:9f:0d:0f:0b:13:a7:32:a8:18:8e:83:d2:5f:9c:ff:
8c:3f:79:f9:55:04:34:0e:f0:f2:30:8c:23:63:bc:83:38:ec:
c8:0d:73:a3:3d:f7:d6:c3:85:ba:5e:f8:df:2b:75:10:5b:35:
96:5f:90:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org