Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/GLSWojy15B1AZTMimDjfTzCnuGo.roa
File: GLSWojy15B1AZTMimDjfTzCnuGo.roa (raw, json)
Hash identifier: tL+6m7IGsgh00u521ulAY4sO1GrT0AxkQuyEYzL2MwE=
Subject key identifier: 18:B4:96:A2:3C:B5:E4:1D:40:65:33:22:98:38:DF:4F:30:A7:B8:6A
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01920965F24795BFF9F3D77CAB41AA44F514
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/GLSWojy15B1AZTMimDjfTzCnuGo.roa
Signing time: Thu 19 Sep 2024 08:28:48 +0000
ROA not before: Thu 19 Sep 2024 08:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 188.209.131.0/24 maxlen: 24
188.209.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 09:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:09:65:f2:47:95:bf:f9:f3:d7:7c:ab:41:aa:44:f5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Sep 19 08:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18b496a23cb5e41d406533229838df4f30a7b86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:cf:f0:37:6c:11:f7:08:47:5d:63:ac:db:
07:b1:15:33:53:d3:b0:36:b4:27:68:3d:d6:c6:27:
de:b4:df:f8:20:c0:d7:b3:f2:c7:ea:6d:57:83:47:
3d:8f:37:19:fb:4a:e5:d4:b9:6c:fc:01:b3:cd:0e:
fb:c4:a8:45:24:cf:f6:d3:f3:13:8e:17:90:0c:b4:
4a:75:6b:10:92:47:48:f7:30:f2:e6:37:48:0b:13:
47:48:d3:1b:e9:d2:bb:7f:a8:95:5b:34:0f:85:5d:
5f:d3:a5:16:06:78:ff:1f:4f:57:be:ab:a7:b2:45:
81:e8:a1:4e:90:8d:26:9f:86:c1:e0:ae:f8:59:b5:
c6:a9:e3:7b:f8:b3:21:20:a8:71:3d:9d:0b:4f:17:
8a:a4:dd:db:6a:ca:b7:88:42:7e:42:54:5c:76:23:
fd:51:18:82:4a:e2:b1:e8:49:7d:fd:d0:ab:86:73:
e8:51:b0:d9:1b:71:9d:08:46:23:00:e7:c6:bd:5b:
4e:5c:bd:d6:86:27:26:19:34:c8:1a:f3:71:ea:96:
8f:d6:b2:f9:51:99:1f:64:c9:06:b7:55:12:83:44:
49:39:42:77:3e:d4:e1:84:e5:e1:34:09:35:58:fa:
78:48:d1:7b:52:69:20:82:96:7c:b9:db:56:d9:ad:
34:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B4:96:A2:3C:B5:E4:1D:40:65:33:22:98:38:DF:4F:30:A7:B8:6A
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/GLSWojy15B1AZTMimDjfTzCnuGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.131.0/24
188.209.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bd:e4:a6:d4:77:16:4a:06:80:bf:35:12:29:82:37:9c:53:
ed:32:c8:71:e3:3b:32:a3:81:59:cf:b8:b5:36:e5:44:f7:d7:
2e:45:ca:64:a0:bd:5f:97:8b:3a:1c:11:b5:9c:ed:0d:73:20:
90:6c:0e:fe:05:4a:09:15:17:fa:da:68:f3:45:68:e2:b7:69:
97:ef:9f:41:02:f8:f3:82:fe:55:16:77:7d:e3:bc:0a:8a:2b:
4b:79:92:94:b2:b7:5e:6b:ee:e7:3d:0a:bd:05:87:2e:81:4a:
45:74:b0:83:10:e2:cf:00:18:69:8d:84:10:40:d8:c3:e0:8c:
48:80:f1:09:13:f7:ed:05:ad:62:b8:f6:41:c2:d9:b7:38:f7:
67:a4:5b:39:87:20:f8:a4:03:cb:c2:98:b9:0b:fa:a9:11:d2:
35:a3:69:7e:7f:fb:c3:f7:43:fc:f4:41:99:37:4a:b5:1a:e8:
ca:50:0c:d6:75:28:03:c5:7f:37:52:b2:56:c9:84:08:2f:c5:
13:86:f6:4c:c5:6f:7c:bc:76:c1:d2:24:4e:10:d8:93:e3:62:
62:bd:61:d7:bd:55:52:2a:9d:0b:c3:92:0c:fa:ff:f2:fd:d3:
33:04:b2:aa:d3:6e:cd:b9:65:d3:2f:57:22:d5:d4:19:8c:82:
1f:1b:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 11:20:00 2024 by rpki-client on console-ams.rpki-client.org