Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GdaGSXS9aDx7whaC3Ot-ChiaDDw.roa
File: GdaGSXS9aDx7whaC3Ot-ChiaDDw.roa (raw, json)
Hash identifier: EIODEUF/1esXaESCUnmCx5omGbjE2l2f3djrzujy3ck=
Subject key identifier: 19:D6:86:49:74:BD:68:3C:7B:C2:16:82:DC:EB:7E:0A:18:9A:0C:3C
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0197496FDF266CDED9261D13E6431FF994C7
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GdaGSXS9aDx7whaC3Ot-ChiaDDw.roa
Signing time: Sat 07 Jun 2025 08:09:17 +0000
ROA not before: Sat 07 Jun 2025 08:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9080:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 15 Jun 2025 04:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:6f:df:26:6c:de:d9:26:1d:13:e6:43:1f:f9:94:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jun 7 08:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19d6864974bd683c7bc21682dceb7e0a189a0c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:0b:1f:86:d0:40:60:73:31:d5:71:19:02:
86:c2:29:22:da:5c:6a:ca:c8:41:0a:1e:87:4e:2c:
99:9b:aa:04:4f:0b:67:84:df:87:68:ee:ca:e6:33:
e0:bd:e0:f2:01:2f:52:7f:3f:19:42:61:3b:e9:2f:
58:2f:7f:fc:69:74:26:ff:df:c7:c6:8b:be:d9:2e:
31:a2:55:69:05:7d:be:bd:3d:aa:ed:27:c8:cc:16:
46:d0:ec:af:d6:4e:db:00:fc:cc:d2:1c:9a:86:ed:
4e:43:cc:60:e6:3c:e0:81:73:3e:27:03:71:26:fc:
34:4c:60:84:6b:fa:30:b1:c0:a3:36:8b:a5:58:ac:
0d:ec:31:82:22:9a:ad:7f:02:3b:e1:5a:dd:7a:21:
58:91:de:e9:9d:d0:1e:9a:e7:ca:66:cd:20:d6:78:
97:b6:ca:00:c9:58:d5:e0:03:0a:f0:b6:7f:ac:3b:
7d:a7:79:a8:58:ad:c6:15:98:dd:1a:bf:27:94:e0:
9b:a6:20:6b:6b:44:19:42:39:d7:35:90:42:f4:38:
4d:cc:c8:e6:76:06:de:3a:86:56:20:74:0e:4a:5d:
33:09:93:ad:7b:9f:a8:fb:11:23:2c:a8:bc:07:6c:
ef:6b:80:0c:41:ff:08:45:8a:0c:cf:3c:b7:55:9a:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:86:49:74:BD:68:3C:7B:C2:16:82:DC:EB:7E:0A:18:9A:0C:3C
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GdaGSXS9aDx7whaC3Ot-ChiaDDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:1::/48
Signature Algorithm: sha256WithRSAEncryption
94:a2:89:70:8f:4a:65:c3:2a:0a:4e:94:a7:bc:55:66:91:b2:
21:f1:86:84:02:f5:5f:89:66:9e:9c:39:e2:e8:a7:e9:1e:9e:
9f:04:45:6e:43:ec:38:85:ba:5c:98:79:a1:cf:1c:89:bf:7e:
3b:a4:51:a8:ea:a1:f9:a7:8c:aa:51:d4:85:c8:96:23:c5:f4:
38:d9:f8:a2:b7:d3:8e:57:d7:03:7d:46:b8:87:59:5a:7c:0a:
73:a1:35:cf:f6:85:af:e9:41:e7:3d:cf:6a:d3:85:84:0b:6b:
2d:2a:39:3f:68:38:85:14:7d:a7:d7:c5:0c:68:f8:7a:46:68:
56:c9:74:b2:7d:04:a6:a5:a6:dc:9d:b4:b8:47:19:ea:53:36:
1f:09:27:67:84:24:d5:90:bb:1e:d0:b2:90:da:41:2f:ed:45:
41:5a:8e:e2:dd:57:4e:9f:43:87:b6:62:33:15:88:be:60:bb:
64:2f:44:bb:3d:b6:10:86:ff:c4:ec:50:4c:35:55:80:12:bd:
79:67:fe:84:a6:4c:bb:63:9a:bf:84:b6:59:5a:78:21:98:08:
d0:73:ab:19:9a:3a:2f:a0:ec:5f:5a:67:1a:3c:e1:f2:39:1f:
99:12:aa:9e:68:fe:7d:f0:ec:c5:3d:45:e1:fc:39:e9:5c:d6:
06:d6:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:03:02 2025 by rpki-client