Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GJ-M9aRAjmdmf9xUBBLIIw9UEFc.roa
File: GJ-M9aRAjmdmf9xUBBLIIw9UEFc.roa (raw, json)
Hash identifier: lKz7tjAt/d6ErPh5IqjJGNPSvsNjWwNOLD4dtqZTfGk=
Subject key identifier: 18:9F:8C:F5:A4:40:8E:67:66:7F:DC:54:04:12:C8:23:0F:54:10:57
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188AA61BCC81F7192F00F7AE40EF691C164
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GJ-M9aRAjmdmf9xUBBLIIw9UEFc.roa
Signing time: Sun 11 Jun 2023 12:15:12 +0000
ROA not before: Sun 11 Jun 2023 12:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 79.175.95.0/24 maxlen: 24
79.175.96.0/24 maxlen: 24
188.255.144.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
188.255.212.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
109.121.36.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:61:bc:c8:1f:71:92:f0:0f:7a:e4:0e:f6:91:c1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 11 12:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=189f8cf5a4408e67667fdc540412c8230f541057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:67:c1:b3:47:d2:a6:3a:ee:0d:ff:b8:9b:
fb:07:97:3f:39:15:9f:e7:c3:2c:97:63:f1:f3:5a:
b2:99:06:e6:30:d3:98:3a:fe:53:aa:90:78:d6:b5:
e2:04:59:ef:04:75:12:fb:de:e5:3e:b3:09:9d:c8:
97:86:14:c7:22:5b:77:f3:b8:51:12:6b:a4:21:aa:
9c:d1:84:44:cd:3e:73:29:89:60:52:73:24:8f:00:
34:50:09:75:93:20:ec:8c:fa:fd:da:94:50:57:9d:
d6:61:d6:be:ae:4a:7a:b3:81:0a:d6:df:e2:13:02:
f3:99:20:8e:9b:0c:11:d3:63:05:49:f2:38:8f:f7:
58:d2:b2:af:d4:7f:1d:11:75:84:19:a2:39:29:06:
a2:81:c8:a4:18:86:ad:e2:b1:6d:ad:c6:a6:a5:b5:
e0:f8:ac:8f:33:fc:cd:96:48:5d:68:bc:d8:83:b7:
62:69:37:6b:67:24:2a:bf:f8:c2:79:f8:14:b9:f6:
81:0e:13:49:60:22:c8:fd:a0:7f:6d:1f:76:76:0f:
4d:62:51:e5:c8:57:14:af:66:0e:9a:fd:8d:7f:d9:
df:8c:3b:81:b0:52:43:a9:c2:71:e6:6f:18:26:66:
dd:39:bd:73:4e:16:f0:e3:95:c5:b9:3c:19:eb:1b:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9F:8C:F5:A4:40:8E:67:66:7F:DC:54:04:12:C8:23:0F:54:10:57
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GJ-M9aRAjmdmf9xUBBLIIw9UEFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
79.175.67.0/24
79.175.95.0-79.175.96.255
109.121.33.0/24
109.121.36.0-109.121.43.255
109.121.45.0/24
109.121.47.0/24
109.233.184.0/23
178.253.237.0/24
188.255.144.0/24
188.255.212.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c9:e7:c0:4f:1e:1b:56:9a:dd:c8:44:f4:2e:04:c3:0f:9e:
5d:d2:91:0e:66:42:e5:d2:1d:93:ec:ca:4b:dd:d1:f3:34:2e:
bd:70:59:67:f4:df:d6:59:20:e1:3c:dd:e7:5c:1a:16:d7:35:
d9:9c:c3:fb:66:8c:a6:b5:e7:05:1d:0a:03:bb:82:98:83:33:
69:5a:54:68:94:69:e6:fa:c9:e5:d0:d6:ba:76:d7:77:ba:af:
cc:43:da:f9:d2:40:aa:3f:96:84:e7:ea:7c:bc:b6:eb:03:74:
4c:16:e5:d2:7e:c0:90:4f:62:54:8d:29:8d:7f:f3:d8:2d:30:
0a:45:9f:3b:24:89:67:32:2e:a0:c5:a0:29:af:36:30:a2:c7:
a2:34:a6:0e:5e:8b:62:1c:d9:e7:94:09:98:ba:ce:fb:26:c5:
4a:09:61:2f:e7:92:d5:85:0d:27:f8:db:d2:a3:82:f0:71:8d:
6e:f3:90:98:34:ba:27:38:a9:84:c7:96:1b:52:1c:33:df:cb:
62:98:a0:c3:7a:77:76:e3:52:a3:38:ed:98:4c:6a:36:d7:ec:
0c:d9:58:1a:40:fa:31:fa:6b:94:b1:6f:9b:85:91:57:e4:be:
0b:87:8e:6e:8a:aa:f0:d8:25:7d:dc:c7:e0:2c:17:d2:00:6a:
6c:a9:b0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org