Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/GQcEDsZIsm_yza5D9td_iRI6fRA.roa
File: GQcEDsZIsm_yza5D9td_iRI6fRA.roa (raw, json)
Hash identifier: su8//uZNUhBJyx+sckNF/eoOh74fDi1AQcj4FfXyiH0=
Subject key identifier: 19:07:04:0E:C6:48:B2:6F:F2:CD:AE:43:F6:D7:7F:89:12:3A:7D:10
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 0194074E4B0E615834A7B39B08DA49FEAECF
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/GQcEDsZIsm_yza5D9td_iRI6fRA.roa
Signing time: Fri 27 Dec 2024 08:49:19 +0000
ROA not before: Fri 27 Dec 2024 08:49:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 2a01:e5c0:2000::/36 maxlen: 36
2a01:e5c0:3000::/36 maxlen: 36
2a01:e5c0:4000::/36 maxlen: 36
2a01:e5c0:5000::/36 maxlen: 36
2a01:e5c0:6000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:4e:4b:0e:61:58:34:a7:b3:9b:08:da:49:fe:ae:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Dec 27 08:49:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1907040ec648b26ff2cdae43f6d77f89123a7d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:8b:b5:ea:1e:2f:92:6c:ce:ed:a9:08:e6:
3f:e7:04:51:20:23:f5:f8:d2:b4:63:85:b1:93:ae:
5f:f6:ef:92:97:ac:82:dc:c7:b4:7c:a7:0d:e5:a8:
0d:53:77:da:fa:5e:fb:fc:7c:74:7f:6f:70:b9:7e:
8b:87:e9:1b:55:bb:2f:0c:50:45:f2:2c:bb:dd:ad:
26:1f:d4:4c:7e:bf:06:d2:30:e3:b3:a3:ff:57:bb:
73:14:e3:93:b0:8e:e4:53:46:d2:9f:0d:13:51:5b:
92:2d:e0:36:81:c0:17:5f:f9:80:e4:7d:1c:67:4d:
d8:9a:13:1d:dc:f5:7b:f1:c3:dd:2b:7e:ba:0c:67:
43:2d:12:2b:a9:2f:35:05:76:df:8e:9d:d2:19:9a:
c8:56:ae:25:a2:da:44:73:a8:95:62:fb:58:27:a1:
e3:0b:c0:41:cc:4b:c6:10:7a:f6:87:8c:b0:92:28:
3d:e9:ca:fc:9b:4f:94:4f:ac:81:a3:a4:60:c9:e1:
4b:30:fa:f6:18:20:df:f8:4c:8a:08:7b:0c:24:5c:
86:5b:6f:9c:98:cf:5c:21:6f:6c:1d:72:67:40:1d:
ca:5a:c8:a8:df:99:98:ac:23:9d:49:fc:2d:f1:7f:
f0:f8:7f:48:1b:84:16:40:f5:96:15:6e:dd:b9:a2:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:07:04:0E:C6:48:B2:6F:F2:CD:AE:43:F6:D7:7F:89:12:3A:7D:10
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/GQcEDsZIsm_yza5D9td_iRI6fRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e5c0:2000::-2a01:e5c0:6fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6f:13:c5:15:dd:5e:3e:c5:ec:07:f4:c9:e4:c3:fc:74:e4:7a:
6b:f3:81:83:d3:fa:d8:36:9d:6e:91:ad:f2:8d:05:22:aa:3c:
14:87:0b:ae:61:93:9b:7c:4c:c9:de:e6:12:7e:4e:91:4d:fd:
08:0c:79:81:c3:66:9a:ea:43:d0:47:87:b7:26:a5:df:55:51:
33:a5:f4:b0:89:39:dc:44:d4:cc:90:4b:70:2d:7e:59:a2:98:
21:25:fe:ea:c9:30:8b:54:f2:8a:9b:ad:bc:9f:e7:f2:1c:cb:
b7:f0:d7:c3:c1:03:68:d1:26:91:3c:7e:62:76:d7:12:7b:46:
da:bd:c9:1f:d6:84:ad:06:72:73:1c:7e:52:2e:b7:9a:61:50:
ad:20:94:7a:da:8b:1f:c1:92:02:f8:11:d4:4b:c3:47:73:a8:
d8:3e:e7:62:92:bc:1d:b1:df:c3:d4:1f:ff:b1:a5:6e:19:88:
10:44:6a:7c:d1:3a:ae:6d:51:1e:d9:83:7e:e2:a0:80:71:c1:
55:53:43:97:5c:dd:da:eb:22:e0:58:a6:a5:23:5c:df:c9:29:
ab:c5:77:08:f2:42:64:c3:68:06:83:0a:54:77:d9:f3:f3:47:
90:da:7b:e4:31:95:2a:93:4c:67:43:71:85:2f:d5:13:87:bd:
49:1a:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:14:58 2025 by rpki-client