Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/GJL_N0PMcHvvztIK0_44a-PdYjs.roa
File: GJL_N0PMcHvvztIK0_44a-PdYjs.roa (raw, json)
Hash identifier: CVBLrz43jLOgMgYY3qD7m2JpHZz+KRRx1G5h/EfKDgQ=
Subject key identifier: 18:92:FF:37:43:CC:70:7B:EF:CE:D2:0A:D3:FE:38:6B:E3:DD:62:3B
Certificate issuer: /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Certificate serial: 018BE72BAE4D7B30CAE945EE8591A1F26FC7
Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/GJL_N0PMcHvvztIK0_44a-PdYjs.roa
Signing time: Sun 19 Nov 2023 10:41:21 +0000
ROA not before: Sun 19 Nov 2023 10:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29686
IP address blocks: 195.28.12.0/23 maxlen: 23
91.199.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:2b:ae:4d:7b:30:ca:e9:45:ee:85:91:a1:f2:6f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Validity
Not Before: Nov 19 10:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1892ff3743cc707befced20ad3fe386be3dd623b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:c2:d1:08:2b:3d:06:b0:ba:e2:ba:9f:1c:
f2:a8:f8:59:58:c5:99:01:18:12:e1:ea:ca:fb:67:
8d:17:21:08:30:07:95:d2:58:30:61:f8:0c:21:84:
b2:81:7a:c6:04:73:cd:07:0d:a1:69:d5:4d:08:12:
a3:7c:85:8c:ca:46:9d:61:8e:5f:62:29:ce:6d:f2:
99:00:db:70:3f:48:0c:67:5c:67:98:67:9c:3d:c1:
ef:ba:9d:5b:96:ae:95:ec:12:12:d5:28:86:c5:ac:
a0:4d:c4:4d:5f:84:f0:66:72:9c:f0:7a:c8:9b:86:
50:18:d9:9e:c4:cb:d4:1f:e3:84:86:b5:f2:43:f3:
98:3f:dc:3f:94:f6:ef:c7:5c:2f:ba:dd:98:cb:69:
78:25:cb:13:a0:b0:55:ae:9f:eb:b9:8e:4e:dc:50:
7b:a8:14:47:0f:59:cc:75:df:1f:8c:ce:56:38:c4:
bb:14:a1:25:3e:10:d0:66:1b:e7:c4:7d:7e:43:b2:
4c:f4:7f:fc:fe:55:01:db:6a:cb:5f:7a:be:5f:39:
6d:e7:53:02:eb:4a:9a:48:d4:fe:6a:b4:51:75:0d:
3b:d6:e1:07:29:86:be:f5:17:7b:a3:49:b9:e4:e2:
a2:2e:c6:d6:6f:23:ee:21:98:b1:fc:00:31:c8:20:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:92:FF:37:43:CC:70:7B:EF:CE:D2:0A:D3:FE:38:6B:E3:DD:62:3B
X509v3 Authority Key Identifier:
keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/GJL_N0PMcHvvztIK0_44a-PdYjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.225.0/24
195.28.12.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8e:7f:19:51:f8:07:49:90:06:08:c7:ec:c4:04:65:32:14:
6e:9e:7a:e9:2c:7a:c2:89:0f:c0:00:31:0f:5a:97:34:f6:d2:
b7:9f:21:fd:64:b5:63:b5:83:fa:0d:81:db:e2:0e:f8:d8:59:
26:df:d5:ca:2b:32:71:20:a8:1b:f5:f3:1e:dc:76:b7:4c:af:
c6:c4:1f:ae:4d:e3:47:98:83:2d:b3:3c:b0:01:4f:4c:28:1a:
0e:2f:7c:db:82:12:34:0d:40:7b:25:73:a0:dc:61:1d:bd:73:
ff:ac:9e:a7:f8:ba:3b:ba:0f:37:32:69:a8:22:47:c9:7e:67:
6d:9e:94:51:2c:67:d7:de:e1:38:9c:41:ba:c7:02:82:ff:7b:
cb:23:9f:39:dc:3c:30:c7:e7:ac:bc:e1:90:f5:48:db:bb:bf:
1b:00:12:db:dc:95:5a:67:e4:5f:3c:38:78:91:6d:ec:b1:16:
d0:1c:d2:03:64:26:d1:cc:b5:a4:4a:c8:1d:58:ee:da:58:39:
73:2d:ee:71:f8:e6:c3:18:c3:70:d7:cd:19:f5:bd:5e:da:70:
2e:ab:39:e0:7a:b0:f4:66:c1:14:6d:b9:ab:bf:0c:0b:fd:2e:
f4:7a:1a:09:56:6a:71:e7:03:86:e7:c1:76:06:78:c3:22:2c:
8a:c6:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:00 2024 by rpki-client on console-ams.rpki-client.org