Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/GFjrq3fZp13mEgqBrkT8DR3Q4lA.roa
File: GFjrq3fZp13mEgqBrkT8DR3Q4lA.roa (raw, json)
Hash identifier: YKg/lJwSMVOUsGl+K/nZWeKL4kKEd4Qm31M8nUUirZY=
Subject key identifier: 18:58:EB:AB:77:D9:A7:5D:E6:12:0A:81:AE:44:FC:0D:1D:D0:E2:50
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF9F3C6A2AC50A8F437DEC70476944
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/GFjrq3fZp13mEgqBrkT8DR3Q4lA.roa
Signing time: Tue 02 Jan 2024 06:32:27 +0000
ROA not before: Tue 02 Jan 2024 06:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61400
IP address blocks: 2a0c:aa40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 06 May 2024 20:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9f:3c:6a:2a:c5:0a:8f:43:7d:ec:70:47:69:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1858ebab77d9a75de6120a81ae44fc0d1dd0e250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:d7:d2:06:61:b4:05:4d:d9:74:d1:71:f0:
38:0b:c1:71:48:e3:c6:b2:e2:56:af:49:c0:20:15:
ce:c1:7b:59:85:e7:22:6d:08:65:64:ac:2b:03:88:
8c:d4:c0:c7:eb:a8:96:dd:e6:b0:57:05:b2:bd:9a:
86:19:30:be:48:f1:12:71:31:fb:1b:c7:16:35:b2:
07:87:fb:4c:b6:60:b4:a3:c0:fd:b4:54:3f:5c:94:
a7:ca:ce:f0:7f:06:db:9e:5e:ec:bf:fb:29:97:c3:
19:ce:65:54:68:0c:e8:84:ce:9e:4f:94:3e:3a:31:
93:04:cb:0d:d8:a8:0d:fa:05:da:77:1b:6f:c6:d7:
9c:e1:8e:03:d9:0e:b6:f5:d7:5d:23:12:92:b1:de:
1d:e1:69:7b:a9:b0:86:4a:c6:c4:46:35:99:83:d0:
ca:fb:9c:f6:b7:56:7e:70:5d:90:a8:ca:c1:cb:95:
6a:3c:63:b7:ad:ae:a8:13:a5:e9:0c:a2:d4:22:8f:
95:4b:32:0e:f0:f0:e5:6f:2b:0a:b5:ca:66:0e:db:
ae:c3:2d:20:69:6d:1a:0b:0c:c2:05:80:dc:75:4a:
46:3f:4a:8e:8b:b3:96:0e:ca:6a:de:53:fe:23:26:
54:bb:44:43:6f:d8:23:88:4c:27:92:da:05:6c:a2:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:58:EB:AB:77:D9:A7:5D:E6:12:0A:81:AE:44:FC:0D:1D:D0:E2:50
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/GFjrq3fZp13mEgqBrkT8DR3Q4lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:aa40::/29
Signature Algorithm: sha256WithRSAEncryption
b4:34:1c:7a:4a:64:22:f1:ab:5f:b3:98:30:2b:89:8c:fe:91:
3c:a3:8e:fa:76:8a:e1:ba:e5:28:a0:55:00:6b:52:32:03:5f:
fa:db:3b:6e:c4:c2:a0:9b:79:5b:ed:1a:9e:11:f9:b3:ae:cd:
79:37:db:6b:65:dd:f4:5b:32:f1:b0:ab:6a:83:a1:86:89:33:
ea:21:45:91:c6:c0:ec:08:f1:2f:50:79:af:7c:f2:0c:7a:25:
b3:00:be:83:8b:6b:cb:ca:90:f2:28:de:0c:ea:87:f9:90:fb:
61:cf:0d:31:95:c7:4e:f1:96:11:82:48:8c:d2:50:84:cb:0d:
62:5f:fc:64:e9:5b:1c:06:5b:f6:25:bf:41:c2:0d:86:5e:e8:
fc:ac:57:a9:86:2f:dc:18:1f:63:14:02:4a:eb:97:ee:c3:a2:
ea:18:24:b1:96:b2:24:ef:ed:51:73:a2:83:0a:d3:ab:f7:5e:
fa:85:6a:6d:8a:a7:8f:eb:7d:ec:c7:51:62:21:30:8c:03:10:
44:f2:8d:f3:ce:00:71:f7:c0:cf:72:16:2c:4b:4b:27:ae:70:
9e:bb:ce:8e:5d:52:39:48:86:15:df:44:36:f4:ad:89:6e:92:
1e:58:2a:e4:0b:b5:33:c4:09:fe:9d:42:4d:21:52:5c:7f:d9:
da:e2:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org