Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/_gcW0tKXN7nRYgKpDPPGpnfqFec.roa
File: _gcW0tKXN7nRYgKpDPPGpnfqFec.roa (raw, json)
Hash identifier: QQCEZitAkMWQnoObM21okZ710hwOIrhdrKp3XywcXoI=
Subject key identifier: FE:07:16:D2:D2:97:37:B9:D1:62:02:A9:0C:F3:C6:A6:77:EA:15:E7
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 0194FEFCB7E582A2C3719AD7AC384BF4386D
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/_gcW0tKXN7nRYgKpDPPGpnfqFec.roa
Signing time: Thu 13 Feb 2025 11:06:02 +0000
ROA not before: Thu 13 Feb 2025 11:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213426
IP address blocks: 2a09:9340:1808::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Feb 2025 19:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:fc:b7:e5:82:a2:c3:71:9a:d7:ac:38:4b:f4:38:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Feb 13 11:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe0716d2d29737b9d16202a90cf3c6a677ea15e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:5e:8a:0d:03:95:26:5f:99:ff:f6:3a:ba:
57:8f:19:c1:39:0e:c4:cc:09:00:9a:18:1b:e1:b5:
c4:c0:31:1d:c0:a4:4d:f9:5b:64:20:41:13:ec:a4:
e0:40:f6:13:ae:bc:46:ab:82:68:e0:3c:6b:64:76:
13:d7:0b:6b:42:e4:c1:ee:54:59:02:2b:9d:89:8e:
85:7e:26:4f:ed:af:fb:d9:99:b8:62:13:76:b9:6e:
e5:69:05:11:be:a8:d2:fa:34:98:a9:43:26:dd:6d:
c3:99:ce:2a:0b:9b:22:ac:7a:1c:2c:4e:31:91:5b:
0c:2d:75:5a:3a:45:5a:fb:c5:98:5e:6e:07:d2:a4:
55:cf:b0:87:07:26:fd:eb:b6:0b:95:a3:8a:40:20:
98:5d:42:3c:28:39:20:48:eb:01:a3:21:ac:e1:1c:
ae:3c:af:1f:46:d4:b2:82:47:2a:86:15:d9:4f:9a:
bd:e8:14:29:3c:3f:2a:fd:d7:dc:67:7f:10:6c:1d:
4d:a0:7b:de:8b:0c:c6:cf:a0:a6:53:92:05:7b:68:
98:bf:8d:ce:0a:e3:28:95:47:b8:ae:6a:59:a8:08:
d8:42:8f:95:c6:b3:b1:dd:60:e4:84:67:b6:f6:40:
56:1f:b1:42:47:be:93:8c:51:90:54:6d:db:fc:93:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:07:16:D2:D2:97:37:B9:D1:62:02:A9:0C:F3:C6:A6:77:EA:15:E7
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/_gcW0tKXN7nRYgKpDPPGpnfqFec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9340:1808::/48
Signature Algorithm: sha256WithRSAEncryption
21:79:66:9f:77:02:a5:83:1e:f1:4a:3a:79:49:f8:e6:8d:dd:
f1:17:ac:87:e5:a8:a6:ca:37:a6:70:c8:94:09:6d:64:ff:5e:
24:b2:d8:e3:1e:f5:b9:80:bc:46:54:e5:39:ad:be:f5:6f:18:
c8:50:0e:c7:1a:c2:a0:e7:ef:f0:8d:ae:92:be:ae:f1:cf:96:
e7:71:84:a9:03:cf:32:d3:dc:8c:00:17:d5:c6:b0:a6:02:b6:
44:1c:30:0c:d9:20:65:88:6b:5a:44:7d:e3:23:5d:cd:23:72:
c3:d0:4c:8a:53:1f:7c:24:50:14:7e:3c:b4:70:50:9f:c6:ef:
9e:97:b6:b4:42:80:23:12:6b:0e:1e:19:64:be:a3:b6:8c:ad:
24:db:7a:1e:ca:5e:e5:87:22:3b:db:fa:e2:7d:27:66:2c:6e:
c1:c1:a3:e4:fe:8b:09:3d:32:04:3f:8a:0b:b8:a1:c7:1c:da:
b8:c4:08:09:85:50:ed:1a:7d:3e:d4:be:d0:5f:e6:8e:30:82:
e8:6b:ee:ca:f6:23:13:cc:3c:df:4e:e4:6b:f6:03:1b:ff:89:
16:10:5f:a7:03:8d:80:62:57:65:a4:d5:c9:ac:0d:db:c3:ad:
7e:dc:31:9a:6a:44:20:c5:d1:b4:39:9f:42:53:7e:dd:f3:06:
d1:e0:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:11:51 2025 by rpki-client