Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/gl-U_p8d36c9HSU9u9u6Dvs_wT4.roa
File: gl-U_p8d36c9HSU9u9u6Dvs_wT4.roa (raw, json)
Hash identifier: LwibyOajqEUYoTOEY8u7h86qRuhB7so3n3t660vvVP4=
Subject key identifier: 82:5F:94:FE:9F:1D:DF:A7:3D:1D:25:3D:BB:DB:BA:0E:FB:3F:C1:3E
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 018A7708AF2D1383027D3DC9C5BF8C5D916F
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/gl-U_p8d36c9HSU9u9u6Dvs_wT4.roa
Signing time: Fri 08 Sep 2023 23:02:52 +0000
ROA not before: Fri 08 Sep 2023 23:02:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207522
IP address blocks: 192.145.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:77:08:af:2d:13:83:02:7d:3d:c9:c5:bf:8c:5d:91:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Sep 8 23:02:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=825f94fe9f1ddfa73d1d253dbbdbba0efb3fc13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:47:bd:ef:29:70:df:9e:eb:35:1e:a4:33:
9d:4c:cb:b0:66:c3:a3:84:a0:fd:a7:45:2d:9b:3a:
65:19:2b:a7:42:38:e1:56:50:be:90:56:4e:57:32:
a4:61:ba:49:65:46:ac:44:1e:48:2f:47:c5:c4:de:
ab:0e:2a:bd:3c:f9:2d:91:c3:03:b8:89:bb:7a:5e:
d6:8f:a4:57:c7:c6:a7:e1:2f:6c:fb:ae:dd:6f:9d:
98:6a:03:91:f7:46:88:28:82:83:ea:7a:e9:7a:e8:
74:e9:50:30:07:8f:e7:61:22:f2:b7:c5:3e:8b:e3:
e3:c4:53:79:12:8a:a4:d5:3f:45:f1:33:a0:75:93:
19:e6:25:77:b6:05:70:54:be:32:cf:19:9c:4d:4b:
da:ca:02:5c:a0:cc:1e:33:ee:45:54:a2:b9:ca:02:
92:a7:4d:05:68:78:d7:9d:96:0b:3b:c5:6c:bb:49:
89:9d:ab:2c:97:b2:2b:2f:e6:30:19:20:04:42:c4:
1d:ca:dd:45:f1:83:04:d3:94:23:18:fa:4e:40:0b:
a9:85:45:d1:d2:dc:6d:75:8a:c9:32:0f:cc:af:6a:
e0:b8:7f:a9:15:4f:41:4e:6c:dd:7f:f0:f4:11:83:
66:b8:4d:00:cd:7b:af:d2:10:9a:27:57:17:01:9c:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:94:FE:9F:1D:DF:A7:3D:1D:25:3D:BB:DB:BA:0E:FB:3F:C1:3E
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/gl-U_p8d36c9HSU9u9u6Dvs_wT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.111.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0a:0e:b7:f8:5a:ff:7d:88:19:d5:e8:39:14:c2:77:84:73:
48:62:e6:6a:8e:c8:c8:fe:34:c9:84:8d:8c:6a:02:5e:33:60:
7f:9a:cd:2d:f9:e8:70:11:5a:df:7c:be:ca:cc:13:7f:6a:ba:
62:89:6a:63:e3:7e:e6:35:11:c6:fc:4e:a5:96:31:d7:d4:ef:
95:33:96:8c:47:26:a4:73:a5:15:c5:4f:e8:a1:b5:ce:c2:db:
51:88:7f:2b:72:61:97:39:5d:9e:b1:f2:72:67:13:36:a9:1b:
61:1e:27:ae:8b:38:9d:45:d3:9d:79:82:24:6a:ca:4d:f8:29:
6b:cd:ab:2c:10:e6:70:ad:ca:d8:f4:b9:4f:9b:26:db:f4:b7:
1f:6c:72:07:ff:e9:7a:8c:2a:c7:71:7c:dd:1e:14:e1:34:6c:
76:09:79:fc:5d:ea:98:ae:0c:62:bb:0c:6a:92:56:cd:e0:69:
8f:1e:cd:f8:99:9a:fa:26:6d:a5:17:ee:3c:11:96:35:c7:dd:
2e:da:b5:07:ce:0a:71:5d:d9:a1:c7:41:41:60:06:6b:ae:c8:
a7:ed:7c:de:08:a0:be:72:b5:05:85:ae:44:1f:db:5b:06:3c:
02:a7:86:66:b0:56:ca:17:86:1e:1f:d5:00:f1:01:58:9f:ce:
9c:39:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org