Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gGKtjO389yksm3CKJCDRe_y4BIk.roa
File: gGKtjO389yksm3CKJCDRe_y4BIk.roa (raw, json)
Hash identifier: Ze3oBJjKHR+qeSBwVMlW0Yrg2e+nq7hr3mr51+MIsw4=
Subject key identifier: 80:62:AD:8C:ED:FC:F7:29:2C:9B:70:8A:24:20:D1:7B:FC:B8:04:89
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193AFC98FDFB27AA32A0E53A8D985A1B20A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gGKtjO389yksm3CKJCDRe_y4BIk.roa
Signing time: Tue 10 Dec 2024 08:57:22 +0000
ROA not before: Tue 10 Dec 2024 08:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54852
IP address blocks: 2a0f:1640::/29 maxlen: 29
2a11:7440::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 16 Dec 2024 07:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:c9:8f:df:b2:7a:a3:2a:0e:53:a8:d9:85:a1:b2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 10 08:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8062ad8cedfcf7292c9b708a2420d17bfcb80489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:db:07:c1:09:76:fa:d7:c3:d3:86:6c:62:
f9:7d:81:24:dc:1d:ed:c0:04:f7:83:f4:a1:23:45:
8e:77:59:8c:e9:bd:03:de:e1:c5:87:3b:17:1b:cb:
5f:50:30:e3:fe:f1:81:1b:02:e8:32:b7:ca:44:0c:
b0:e1:43:54:b7:ed:46:cc:bb:19:da:cb:c0:28:7e:
4f:dc:4e:a0:44:ef:4d:39:b5:a4:04:1d:e4:55:70:
84:bb:a7:41:dc:c0:32:6b:2c:cb:f5:49:30:ce:ce:
3d:17:b1:a7:a6:eb:16:96:45:d4:30:c9:fa:13:01:
4b:7d:c2:23:4e:23:ed:ad:27:c8:96:82:09:0f:5e:
de:64:df:ee:2e:50:5d:93:29:63:68:5c:70:ec:81:
dc:aa:38:cf:9d:1a:fb:50:f7:a3:5d:ca:49:a4:16:
20:84:a6:b2:a6:8f:ab:8e:a2:ce:df:b6:f0:e3:74:
22:de:ef:ed:57:c4:a0:49:be:b6:39:99:67:57:43:
26:ae:aa:e9:5c:70:0e:cd:d7:5f:8d:79:14:6b:4a:
23:f6:27:9d:79:fd:fa:b6:a1:7b:3b:ef:04:06:41:
57:b6:15:de:98:b0:f7:6c:b0:f5:8e:66:15:8c:db:
61:05:79:b3:d9:98:84:32:e2:f9:8c:61:6e:ba:75:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:62:AD:8C:ED:FC:F7:29:2C:9B:70:8A:24:20:D1:7B:FC:B8:04:89
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gGKtjO389yksm3CKJCDRe_y4BIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1640::/29
2a11:7440::/29
Signature Algorithm: sha256WithRSAEncryption
84:b8:3e:c8:58:15:a4:54:f0:da:ff:9e:86:fb:92:1a:ca:e5:
b1:1f:96:8a:20:11:8d:57:64:b7:5d:22:2a:0c:ad:76:38:d3:
dc:f4:c2:7b:a9:61:99:df:77:70:55:46:f1:76:8e:84:a6:39:
e4:67:54:1e:f8:34:4d:1a:ed:d5:6c:7e:49:a6:ae:54:8f:c2:
ef:66:b5:45:b8:c6:1b:f5:6c:db:51:2d:ec:96:81:29:9e:82:
f1:c9:20:94:f0:06:48:0e:c2:c4:84:5f:22:f2:39:fa:53:07:
8b:cd:aa:8f:6d:f4:4f:c3:a0:8d:aa:e9:e0:03:70:28:a6:1f:
09:ea:ba:3a:6e:02:fa:6d:31:5a:f0:a2:4f:6b:2b:a3:38:92:
05:85:48:44:6e:b3:29:ac:93:9a:71:fd:23:2b:f2:95:fe:9b:
78:bd:21:c3:bc:7f:04:47:6c:68:32:b0:59:24:4a:57:6c:79:
67:cd:4e:38:f8:49:6d:c9:77:8b:87:88:53:c4:8a:d9:f7:55:
bf:58:d3:3b:55:9d:b3:91:fb:60:ca:02:ca:63:f6:76:78:50:
f1:9b:2b:22:80:1a:b2:35:e7:5e:51:e4:83:23:9b:09:9a:90:
4c:2a:ba:c5:9b:32:4c:2a:57:44:2d:78:ae:55:8c:ad:3c:5c:
49:31:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:17 2025 by rpki-client