Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/6GSV_HnAT2kkdKwSLYwfwlT4QAo.roa
File: 6GSV_HnAT2kkdKwSLYwfwlT4QAo.roa (raw, json)
Hash identifier: GDEX8n2O0rz7eomhaptLr+2b/T5t+rBv7iMWq4lU1ts=
Subject key identifier: E8:64:95:FC:79:C0:4F:69:24:74:AC:12:2D:8C:1F:C2:54:F8:40:0A
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01901BE4713522351F831FD290547EC96787
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/6GSV_HnAT2kkdKwSLYwfwlT4QAo.roa
Signing time: Sat 15 Jun 2024 12:34:34 +0000
ROA not before: Sat 15 Jun 2024 12:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.3.60.0/22 maxlen: 24
2a0d:c980::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:e4:71:35:22:35:1f:83:1f:d2:90:54:7e:c9:67:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jun 15 12:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e86495fc79c04f692474ac122d8c1fc254f8400a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:7f:de:49:12:60:49:07:ab:25:2b:0a:67:
e1:c3:0a:64:d5:f5:e0:87:7e:7e:21:ea:56:16:21:
43:c0:b3:2e:82:1a:e5:23:b3:9e:8a:aa:5d:04:86:
b6:13:5c:18:f3:3b:14:33:80:ef:43:52:43:d9:8d:
f7:73:d9:80:91:34:24:d3:cd:a4:42:57:1b:08:9a:
8b:1b:f6:6f:4d:ad:1d:58:92:23:5e:12:74:78:ae:
79:8f:16:f3:32:c5:db:ea:92:53:c4:fe:fc:1c:01:
44:38:b9:af:e5:92:c8:ac:d6:50:67:30:dd:06:4f:
e8:b2:fb:67:b6:45:ab:07:64:63:3f:4b:35:71:ac:
f5:71:ad:e0:59:d1:21:0a:0a:df:16:7a:88:a3:5d:
c2:81:eb:08:ca:de:9f:14:c6:1f:1b:57:1b:4f:e6:
af:a6:26:67:9d:88:56:59:4e:ea:bf:47:cf:d6:d4:
28:67:64:e0:97:61:61:68:b5:c6:72:48:f7:0e:62:
d6:f0:35:47:25:b2:71:4c:8e:b1:40:e7:74:a0:da:
68:45:82:72:d5:a6:d4:03:f4:56:85:4e:bf:da:25:
6d:ff:20:3c:f6:72:7a:e1:c6:28:93:0a:c9:9e:86:
18:2b:14:7d:2a:0a:e9:20:bd:12:d2:36:1f:a2:14:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:95:FC:79:C0:4F:69:24:74:AC:12:2D:8C:1F:C2:54:F8:40:0A
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/6GSV_HnAT2kkdKwSLYwfwlT4QAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.60.0/22
IPv6:
2a0d:c980::/29
Signature Algorithm: sha256WithRSAEncryption
10:c7:62:c9:ef:26:43:7a:cf:59:b8:fe:f4:cc:3d:b4:34:c3:
7b:70:c6:99:e4:05:d3:60:71:ab:83:b7:57:ff:71:74:38:fb:
9c:1b:98:6f:67:6f:58:cf:ea:06:40:1d:82:46:20:05:b3:f7:
c4:41:e5:3d:f7:0b:f0:89:af:79:e7:7d:e1:93:39:fd:a7:fd:
c2:a3:06:bf:07:28:4e:d7:cf:f3:5d:2c:c9:da:99:e3:a9:1b:
73:5f:28:8b:37:10:63:85:22:20:f3:65:db:fb:98:be:a8:8e:
95:f5:35:de:a0:d7:ea:a1:49:ff:b8:01:36:cf:9b:a7:3e:05:
5d:36:1e:2b:04:cb:7d:72:3b:21:37:83:9a:f5:b8:9d:ba:fd:
cc:c8:24:6d:23:4d:03:e7:57:c4:2d:05:e0:ad:b5:1f:a2:7f:
e8:39:58:f4:47:c8:31:46:f2:0f:f1:24:b2:8c:e1:42:ce:50:
b7:73:f9:25:8b:5b:f2:ca:5e:7d:d4:a8:cb:c2:b9:bf:1d:65:
f0:44:28:ad:bf:b1:1e:21:08:69:da:b9:d9:6f:fa:93:61:94:
bc:3b:b2:02:35:37:68:34:40:79:e8:7e:99:e5:3d:72:92:90:
e1:4c:f4:a7:03:cd:54:e9:09:78:68:e6:d6:92:d5:f4:bc:2b:
1c:4a:27:cd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZAb5HE1IjUfgx/SkFR+yWeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjQwNjE1MTIzNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODY0OTVmYzc5YzA0ZjY5MjQ3NGFjMTIyZDhjMWZjMjU0Zjg0MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv75/3kkSYEkHqyUrCmfhwwpk1fXg
h35+IepWFiFDwLMughrlI7OeiqpdBIa2E1wY8zsUM4DvQ1JD2Y33c9mAkTQk082k
QlcbCJqLG/ZvTa0dWJIjXhJ0eK55jxbzMsXb6pJTxP78HAFEOLmv5ZLIrNZQZzDd
Bk/osvtntkWrB2RjP0s1caz1ca3gWdEhCgrfFnqIo13CgesIyt6fFMYfG1cbT+av
piZnnYhWWU7qv0fP1tQoZ2Tgl2FhaLXGckj3DmLW8DVHJbJxTI6xQOd0oNpoRYJy
1abUA/RWhU6/2iVt/yA89nJ64cYokwrJnoYYKxR9KgrpIL0S0jYfohQGRwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOhklfx5wE9pJHSsEi2MH8JU+EAKMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvNkdTVl9IbkFUMmtrZEt3U0xZd2Z3bFQ0UUFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQM8MA0E
AgACMAcDBQMqDcmAMA0GCSqGSIb3DQEBCwUAA4IBAQAQx2LJ7yZDes9ZuP70zD20
NMN7cMaZ5AXTYHGrg7dX/3F0OPucG5hvZ29Yz+oGQB2CRiAFs/fEQeU99wvwia95
533hkzn9p/3Cowa/ByhO18/zXSzJ2pnjqRtzXyiLNxBjhSIg82Xb+5i+qI6V9TXe
oNfqoUn/uAE2z5unPgVdNh4rBMt9cjshN4Oa9biduv3MyCRtI00D51fELQXgrbUf
on/oOVj0R8gxRvIP8SSyjOFCzlC3c/kli1vyyl591KjLwrm/HWXwRCitv7EeIQhp
2rnZb/qTYZS8O7ICNTdoNEB56H6Z5T1ykpDhTPSnA81U6Ql4aObWktX0vCscSifN
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:12 2025 by rpki-client