Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gBu6pqNpqYY5rhGdaQKRcZfbmJ0.roa
File: gBu6pqNpqYY5rhGdaQKRcZfbmJ0.roa (raw, json)
Hash identifier: 1V9zW2gOfMcW9G2foCWYcYFB5ovlL1eANuu4KVCWWfQ=
Subject key identifier: 80:1B:BA:A6:A3:69:A9:86:39:AE:11:9D:69:02:91:71:97:DB:98:9D
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018F4D2C8EDB995BA8598C94028F73FD94DD
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gBu6pqNpqYY5rhGdaQKRcZfbmJ0.roa
Signing time: Mon 06 May 2024 09:11:56 +0000
ROA not before: Mon 06 May 2024 09:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205745
IP address blocks: 2a09:140::/29 maxlen: 29
2a0d:e0c0::/29 maxlen: 29
2a0e:1b40::/29 maxlen: 29
2a10:240::/29 maxlen: 29
2a10:740::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 06 May 2024 10:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:2c:8e:db:99:5b:a8:59:8c:94:02:8f:73:fd:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: May 6 09:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=801bbaa6a369a98639ae119d6902917197db989d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:3e:24:0b:be:6f:9e:d6:25:2e:c3:b8:4c:
3d:6b:97:cb:e3:de:36:d1:e6:04:c0:e8:48:6e:d1:
67:90:24:4d:c7:78:27:58:70:62:ec:c6:a5:01:64:
3e:8c:86:23:d4:9b:d0:98:18:25:16:10:0c:17:43:
fe:32:16:fa:37:c9:ad:2e:a3:01:d3:1b:a2:a6:30:
60:de:0e:7d:4c:11:fd:c5:09:27:79:c3:af:bd:a5:
ba:d8:fc:86:9d:ae:50:b3:e9:45:24:da:d1:33:f1:
91:88:ba:cf:ef:3d:10:f0:08:bb:e4:45:3a:db:72:
b6:b9:20:94:5f:a0:d5:b8:af:33:be:8b:d8:12:c1:
cd:2d:63:72:77:e8:af:a2:b4:86:08:54:c2:de:53:
dd:a6:1e:30:59:6e:ba:5f:14:46:9c:3c:f5:90:d0:
25:03:e2:e9:88:c3:44:c4:65:d9:00:38:de:8f:9f:
76:c1:8f:aa:27:05:2d:86:47:8c:f7:5b:d8:33:ef:
27:97:2c:8a:78:48:06:e4:90:32:d6:89:78:d1:d8:
eb:5c:28:9a:89:ee:6c:2b:d5:07:fb:7b:7a:f2:35:
cc:09:21:74:b7:0f:53:39:f3:a5:4d:59:42:14:f2:
6d:1c:85:e7:24:ac:29:2d:3b:cc:66:59:40:ca:48:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1B:BA:A6:A3:69:A9:86:39:AE:11:9D:69:02:91:71:97:DB:98:9D
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gBu6pqNpqYY5rhGdaQKRcZfbmJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:140::/29
2a0d:e0c0::/29
2a0e:1b40::/29
2a10:240::/29
2a10:740::/29
Signature Algorithm: sha256WithRSAEncryption
8c:a1:8b:9c:1d:46:e0:fa:12:a2:43:81:88:5d:59:06:8c:42:
30:71:13:dc:8b:01:14:60:57:dd:a5:20:91:33:10:c4:1a:92:
3c:0e:58:46:f3:75:60:2c:54:f4:55:8b:b9:67:a7:60:05:a7:
71:be:9b:7a:8c:7c:61:21:ab:29:39:c5:ab:61:f5:c2:13:ad:
23:81:86:7c:16:82:e4:87:a1:6e:9a:71:11:9e:32:50:ce:88:
cb:ed:81:8e:9c:b1:dd:0d:d6:9c:0c:49:8f:06:0e:bb:6b:38:
76:ef:20:27:5a:b6:99:7f:d9:1a:24:ce:b6:df:39:3b:97:9a:
20:c6:3a:f3:4a:29:ef:24:b5:80:8a:dc:02:f6:40:3f:35:ad:
e6:c2:b4:33:71:70:48:d6:ad:ff:94:90:b5:ca:97:44:c8:7e:
69:6e:68:8d:fa:4f:be:cd:2e:07:86:95:53:54:15:f4:07:31:
36:7f:e7:3d:86:b0:27:59:3c:c7:fe:94:92:91:b5:1c:3e:eb:
da:2a:90:ff:d7:1c:9d:13:2d:fa:87:87:65:b1:1c:e3:53:43:
46:97:fb:11:06:09:44:e4:4d:9f:86:7e:78:86:e3:9f:29:d8:
67:6c:15:e7:af:0b:46:b9:ac:89:44:ac:e6:54:53:11:d3:db:
ee:80:22:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:01:18 2025 by rpki-client