Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GcDebf5akviF13RNtuqfqD_x3SM.roa
File: GcDebf5akviF13RNtuqfqD_x3SM.roa (raw, json)
Hash identifier: v/X8mXczvhEaJoETNaNzmc0zeGcIbTDLqZGz2OJkvfs=
Subject key identifier: 19:C0:DE:6D:FE:5A:92:F8:85:D7:74:4D:B6:EA:9F:A8:3F:F1:DD:23
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F390DCCACAA19C4D63DAC9FF5E8E20E67
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GcDebf5akviF13RNtuqfqD_x3SM.roa
Signing time: Thu 02 May 2024 11:25:56 +0000
ROA not before: Thu 02 May 2024 11:25:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:7884::/32 maxlen: 32
2a0e:15c0:4::/48 maxlen: 48
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a0f:ea00::/29 maxlen: 29
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 May 2024 17:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:0d:cc:ac:aa:19:c4:d6:3d:ac:9f:f5:e8:e2:0e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 2 11:25:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19c0de6dfe5a92f885d7744db6ea9fa83ff1dd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:c4:51:98:38:4d:d7:bd:92:69:dd:bd:4f:
78:c8:f5:a3:86:c4:05:22:79:ab:bf:c3:54:57:f6:
f8:9e:35:e2:14:d8:0b:44:10:99:43:48:3f:ec:e9:
bc:fd:a5:32:a4:19:d4:87:94:64:ac:8c:4a:11:32:
4d:de:d0:18:de:ca:70:6e:16:0b:05:b8:b4:c3:ce:
49:40:a7:82:ae:07:6b:43:7c:5a:e1:a0:e9:36:3c:
dc:ca:b8:2c:7f:3c:a0:19:49:90:99:dd:c4:4f:46:
5e:38:71:f0:e9:9c:8f:a6:3c:b8:1a:10:11:dc:d7:
ac:e5:10:54:a4:7a:e7:a4:96:da:aa:49:51:d0:be:
6d:3a:12:28:b4:e2:59:fb:a9:bf:c1:5e:f9:24:47:
fc:31:de:d9:72:0e:b0:17:d4:52:c6:bc:79:89:c7:
6a:90:05:14:df:18:0f:4f:19:08:eb:28:f0:a4:6b:
0e:ad:a4:9a:29:1f:d8:54:28:17:e5:86:0e:6c:db:
57:df:e5:87:eb:8d:26:92:31:eb:bb:da:75:d5:5e:
c0:02:8c:4e:29:50:9f:a1:75:3a:aa:90:97:78:b1:
b5:7e:66:89:57:e6:f6:1a:13:fa:af:e1:36:b5:ee:
c2:6a:dd:33:fb:87:d0:99:bd:ed:38:2d:68:ca:8e:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:DE:6D:FE:5A:92:F8:85:D7:74:4D:B6:EA:9F:A8:3F:F1:DD:23
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GcDebf5akviF13RNtuqfqD_x3SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0e:15c0:4::/48
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:7d01::/32
2a0f:ea00::/29
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
8b:2a:6e:e4:d0:2c:43:8f:82:0d:a0:b2:0f:bd:7d:8d:61:49:
8c:72:2b:a4:47:37:75:72:47:f6:ce:0d:de:d7:49:4e:fb:02:
fc:dc:17:fb:70:e2:d7:65:62:e0:58:4b:68:0e:28:55:19:b6:
e4:ce:d6:27:70:87:ab:7e:7c:20:85:9c:e5:0e:36:f3:cc:62:
57:b0:d6:7b:8c:85:1b:4e:8e:14:36:f1:73:11:a0:9b:b6:4c:
d1:ec:0e:45:f0:99:90:56:4d:cd:c9:2d:36:38:de:1d:ab:fe:
4b:dd:bb:4e:2c:d0:d2:9f:8c:44:42:81:bc:d5:3d:c3:25:c7:
32:bb:3d:78:c1:69:90:28:52:0b:6b:9b:c8:db:e0:49:7f:93:
16:ef:a6:e0:f3:35:73:c3:5d:c0:11:f7:8a:c6:4c:d2:96:0d:
53:2c:9a:9b:fb:da:c0:89:5f:59:9f:69:9b:21:26:94:e4:82:
92:10:43:14:d3:39:d5:bd:32:ca:b5:ab:c7:b9:84:d1:34:1b:
02:b1:df:0a:73:06:2e:81:7f:76:fb:0f:be:2f:ac:25:0a:28:
da:a3:65:f2:df:ef:32:9d:ee:78:bb:45:ad:52:c6:ae:87:58:
48:8c:ad:d5:85:8d:c3:a4:20:4c:df:68:d9:b9:08:2e:61:7d:
9d:11:e2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:08:14 2025 by rpki-client