Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/GC7FP4urOQcO-nCzBZDJ34Iuzrg.roa
File: GC7FP4urOQcO-nCzBZDJ34Iuzrg.roa (raw, json)
Hash identifier: rKitzQ9HjTzgPKn24QL078+vEv7kOEGiOz020toNMPU=
Subject key identifier: 18:2E:C5:3F:8B:AB:39:07:0E:FA:70:B3:05:90:C9:DF:82:2E:CE:B8
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 01939B82D3176F1D79DD6CF713C32F3D8ABD
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/GC7FP4urOQcO-nCzBZDJ34Iuzrg.roa
Signing time: Fri 06 Dec 2024 10:27:42 +0000
ROA not before: Fri 06 Dec 2024 10:27:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213751
IP address blocks: 2a14:9400:666::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:82:d3:17:6f:1d:79:dd:6c:f7:13:c3:2f:3d:8a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Dec 6 10:27:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=182ec53f8bab39070efa70b30590c9df822eceb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:51:ed:75:10:a8:ba:e8:c6:a0:89:d2:52:
01:c8:20:ca:78:62:b2:d0:48:d8:03:6d:5b:59:f3:
be:61:72:7e:f8:64:b9:eb:56:c1:80:9c:70:7c:3d:
2d:70:18:d2:04:05:85:ed:08:32:91:55:6b:17:b8:
0d:d8:55:ee:56:33:47:48:20:5e:60:29:c4:0c:ea:
ee:e8:6e:b9:e0:20:6a:30:a7:7c:c2:80:c1:c0:42:
52:90:f0:70:c6:19:0a:64:7c:91:c9:7c:a6:51:e7:
2e:80:5b:15:b7:dc:1a:14:f7:ca:35:20:26:8e:41:
8f:6c:38:29:de:39:d0:51:c5:ab:8d:7d:b5:01:5b:
a3:b2:22:a4:c9:6c:fe:27:53:7f:df:46:30:17:6f:
f4:c7:e2:9f:4a:7f:17:56:3e:34:b7:85:4b:1b:43:
6d:a6:02:4f:3a:a9:fc:8f:26:1d:d8:e3:b7:ce:0c:
94:9d:4a:55:03:1e:b3:69:c7:ad:04:2c:9a:d1:28:
7b:4c:1a:83:f6:86:03:c8:99:ea:34:fb:91:50:24:
e8:dd:f0:38:4b:c9:91:33:f4:b9:7d:1d:de:64:5f:
a6:98:f7:b1:80:18:3b:35:ef:76:35:eb:be:ef:08:
bc:9b:4a:62:a0:0d:76:16:05:2e:32:25:ee:58:0b:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2E:C5:3F:8B:AB:39:07:0E:FA:70:B3:05:90:C9:DF:82:2E:CE:B8
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/GC7FP4urOQcO-nCzBZDJ34Iuzrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9400:666::/48
Signature Algorithm: sha256WithRSAEncryption
45:ee:f7:fa:be:e3:2a:98:9b:e3:12:a0:19:ab:95:24:88:39:
c6:c2:0d:35:15:7c:a1:41:67:3f:d2:45:fb:4b:be:da:5d:a3:
90:49:5b:fd:37:44:fd:12:b7:3c:94:c0:ee:a6:73:f6:b5:69:
91:92:a1:ae:0d:4b:c6:ab:50:56:0b:a4:93:da:b9:e3:10:1a:
cc:8e:f3:f5:a4:69:1e:8d:01:9e:87:e9:58:06:df:3c:06:f1:
cf:f1:3b:d6:a4:89:f3:48:4a:f7:3c:42:ed:da:a5:2e:1d:89:
cd:60:b7:ef:e8:a0:f3:7b:5d:f2:4b:86:f7:c4:db:9e:e3:07:
a0:90:fe:26:2e:bb:80:3c:b7:ef:ae:6e:6f:93:a3:14:c1:67:
c9:89:09:d3:88:ad:44:d0:36:ca:ef:87:dd:fd:f5:91:f1:df:
00:69:f3:aa:82:b1:47:05:98:fc:e2:9f:06:03:bc:49:78:99:
6c:33:1e:4b:d9:ae:3f:bc:ec:33:ae:d4:0d:84:82:23:60:72:
c3:c8:b2:8b:a0:f5:a1:63:ac:fc:12:30:c9:f4:f0:e8:ef:62:
19:5e:50:09:a1:d6:20:82:18:49:c3:82:72:8d:1a:ed:de:a2:
32:fa:a1:8c:04:b1:9d:02:22:df:4f:51:f3:24:ff:78:8d:21:
aa:9f:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:20 2025 by rpki-client