Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/GNNRL8-QWPAgocualwAGBZIlq1w.roa
File: GNNRL8-QWPAgocualwAGBZIlq1w.roa (raw, json)
Hash identifier: jrzZNr2+hJ+mrKW+KvmqIBl9S1W++e+lycboI+Sjj6s=
Subject key identifier: 18:D3:51:2F:CF:90:58:F0:20:A1:CB:9A:97:00:06:05:92:25:AB:5C
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0189EFEDFD7C3A1AB9BBB42596A06BF73FEB
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/GNNRL8-QWPAgocualwAGBZIlq1w.roa
Signing time: Sun 13 Aug 2023 17:24:58 +0000
ROA not before: Sun 13 Aug 2023 17:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197674
IP address blocks: 91.92.115.0/24 maxlen: 24
85.202.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:ed:fd:7c:3a:1a:b9:bb:b4:25:96:a0:6b:f7:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Aug 13 17:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18d3512fcf9058f020a1cb9a970006059225ab5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e6:ff:78:a7:97:9b:35:3c:70:44:da:85:6e:
df:6b:d9:e1:b8:32:01:89:c0:70:0c:bf:63:14:69:
95:f5:cb:d4:13:09:55:3f:1d:19:7f:15:e1:e5:85:
a5:b9:d1:67:3d:25:11:75:75:26:09:fc:1d:50:6d:
50:3b:d8:bf:47:a7:04:71:f9:78:4f:72:bb:69:d8:
0b:8b:a5:77:14:6b:54:16:9a:e5:14:ea:7b:58:9d:
51:25:35:b0:39:96:21:e5:6c:73:34:88:d9:54:51:
9a:d8:68:49:d5:e7:b7:82:bd:65:6a:33:d8:16:a2:
e2:a4:ce:1b:dd:d2:ce:1d:37:4c:63:03:71:e7:ca:
7f:f1:f5:ec:c7:17:d0:97:83:b3:06:53:d1:64:8f:
78:29:c8:af:2e:84:b4:2e:1f:4c:fb:1b:73:e0:c0:
dc:b2:11:8c:df:00:1a:46:8e:c5:5b:2c:eb:d5:c0:
0a:b8:d2:e6:51:1d:dd:e1:d0:8f:10:b7:88:6a:5c:
03:7c:7d:c0:d6:a9:12:41:69:af:e1:5a:1a:27:bb:
d8:e1:16:f2:e6:01:44:95:48:76:ce:92:9f:1b:75:
ea:78:4c:f9:82:2d:01:b9:6d:83:98:34:f0:7d:9b:
f8:23:ec:32:f9:f6:23:60:b6:81:4f:48:21:37:51:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:51:2F:CF:90:58:F0:20:A1:CB:9A:97:00:06:05:92:25:AB:5C
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/GNNRL8-QWPAgocualwAGBZIlq1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.95.0/24
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4b:36:77:26:46:d4:12:12:4f:44:ae:4a:e3:08:c1:24:7b:
90:a6:f3:5b:46:1a:43:5b:ef:d5:b0:3e:7a:a4:79:0d:00:73:
7a:56:58:7f:4f:79:a7:42:98:b6:c3:c0:58:3b:51:07:99:41:
8d:05:f0:de:f4:2e:01:e2:91:20:e6:98:10:22:b0:31:a8:a7:
47:4a:20:6a:e9:f1:8d:d6:bc:51:85:35:3b:66:3f:f7:82:7a:
bb:d8:cb:b7:5f:e0:2a:ab:47:c4:e5:07:43:53:da:f5:d0:a9:
bd:e2:a6:d1:08:cd:22:b0:5c:2a:de:14:f7:6d:cb:33:99:7e:
43:eb:6c:df:c9:70:b7:2e:b1:a6:76:4b:13:ba:7d:e3:8a:90:
ea:29:58:9a:33:c8:3d:2a:46:7c:68:bf:b6:19:d0:14:fc:c7:
5e:01:f9:1a:5d:cb:39:43:7e:14:54:73:fb:b4:4e:f3:3c:e2:
32:ce:ca:68:4d:31:19:c9:90:b9:1e:7d:67:8b:2d:61:20:31:
02:69:6e:a0:89:a3:d1:fc:82:c4:e6:c6:ca:ae:b9:fe:36:cf:
e8:eb:df:7f:1d:96:09:d8:36:4e:9b:79:1c:37:4a:48:91:db:
9c:b9:f8:9d:a6:ff:b1:61:3c:ae:5b:b2:27:c2:30:f8:7a:96:
1b:bc:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:20 2024 by rpki-client on console-ams.rpki-client.org