Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/gonZ-DtPSWY3esWEqhq4m8Cc9xk.roa
File: gonZ-DtPSWY3esWEqhq4m8Cc9xk.roa (raw, json)
Hash identifier: i2qx2wpwI6dHJy5iA+o/YMXHOI/+URKBC9rfDdUiGXw=
Subject key identifier: 82:89:D9:F8:3B:4F:49:66:37:7A:C5:84:AA:1A:B8:9B:C0:9C:F7:19
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 0193A0656F2CE940F741A1952F7106BEF298
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/gonZ-DtPSWY3esWEqhq4m8Cc9xk.roa
Signing time: Sat 07 Dec 2024 09:13:42 +0000
ROA not before: Sat 07 Dec 2024 09:13:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57324
IP address blocks: 2a12:100::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 07 Dec 2024 09:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a0:65:6f:2c:e9:40:f7:41:a1:95:2f:71:06:be:f2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Dec 7 09:13:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8289d9f83b4f4966377ac584aa1ab89bc09cf719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:0f:c9:ec:45:d8:f3:d2:93:59:49:5a:df:
d5:dc:4d:68:e4:70:14:b7:84:b9:ac:7f:aa:30:52:
83:da:0d:c7:ef:ac:2e:c0:a4:7c:c0:2a:79:0e:1f:
2d:ec:fb:ad:bd:f7:3f:6d:4c:19:c6:69:86:56:cc:
5f:7c:5f:5f:25:18:43:0e:aa:76:76:97:b1:9f:a3:
3c:a6:52:b2:5b:d5:e7:40:39:76:32:b0:4d:71:f6:
bb:a2:cf:74:73:0f:c7:fd:08:f9:7f:8c:33:9e:4a:
ce:2f:ba:6c:8f:77:c6:9e:82:c4:08:27:da:17:b4:
e5:33:21:59:00:89:4e:7c:c3:6b:7d:cb:06:1f:f0:
ff:ca:c7:f7:74:62:35:a8:5b:ca:19:7b:ae:65:3c:
70:47:5d:57:5c:6f:dc:a8:d1:31:49:f4:63:29:9b:
05:fe:19:82:1e:45:21:37:e8:26:98:e3:92:40:55:
fd:3b:3f:0e:b8:02:69:51:cd:73:4a:cb:ea:df:2e:
51:98:20:f9:69:ab:2b:a0:45:8c:bb:f2:9d:43:ef:
57:1b:76:79:5d:c6:e9:9e:f0:a8:33:c1:11:02:23:
54:71:5a:eb:7c:64:15:a0:cc:64:fe:e4:24:1c:f7:
b0:a6:4e:06:46:3d:1b:4e:39:00:38:96:c6:28:35:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:89:D9:F8:3B:4F:49:66:37:7A:C5:84:AA:1A:B8:9B:C0:9C:F7:19
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/gonZ-DtPSWY3esWEqhq4m8Cc9xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:100::/29
Signature Algorithm: sha256WithRSAEncryption
79:24:ba:ff:22:f9:4b:01:37:50:40:b2:17:b5:a6:bd:13:33:
e8:cd:37:b4:22:f5:e1:1a:6a:15:63:e4:af:8c:5c:af:11:f3:
51:0b:a2:14:16:ee:d2:a4:58:40:f0:c8:ba:79:de:ae:b7:4f:
a7:30:43:16:cf:4e:ce:cb:76:08:bb:eb:65:36:f3:c1:11:df:
09:60:96:c5:2b:0b:b0:12:5d:aa:f0:a9:6c:06:47:ee:ca:09:
c1:a2:28:c6:55:f7:e8:0b:86:b3:ca:f6:49:8d:72:da:e6:e2:
1b:04:dd:5a:be:87:ee:3f:18:4e:f7:7a:82:4b:58:6f:e4:d6:
86:21:54:87:71:9b:78:70:4e:29:76:8d:b4:d0:c4:ab:c3:2e:
d8:58:90:f2:d3:bc:fd:d3:f8:66:b0:ab:66:3e:97:c6:f2:c8:
21:ed:cd:7a:ee:e5:b1:c2:8a:2e:65:91:e9:0c:85:43:67:1a:
4d:17:d1:c8:df:23:38:4f:f5:6d:35:bb:cf:b1:25:b7:11:46:
41:46:7e:51:e2:be:97:75:f6:9d:90:3e:3f:8a:85:92:05:e1:
63:b3:cf:93:5d:90:48:b0:5f:68:30:66:cc:06:17:7c:30:16:
25:27:ef:31:60:3b:aa:74:c1:90:ac:60:76:28:2b:bc:03:08:
30:21:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:24:02 2025 by rpki-client