Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/GLDL_cdMnWGJfacW9Iu71BqNhG0.roa
File: GLDL_cdMnWGJfacW9Iu71BqNhG0.roa (raw, json)
Hash identifier: nx6n93vFh2Lgt96uJDRJsMx9QbAlR8UigUAsnlDKUSA=
Subject key identifier: 18:B0:CB:FD:C7:4C:9D:61:89:7D:A7:16:F4:8B:BB:D4:1A:8D:84:6D
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 018F86D6A3856F43B714930C545B57BF8A10
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/GLDL_cdMnWGJfacW9Iu71BqNhG0.roa
Signing time: Fri 17 May 2024 13:56:04 +0000
ROA not before: Fri 17 May 2024 13:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 91.204.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 22:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:d6:a3:85:6f:43:b7:14:93:0c:54:5b:57:bf:8a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: May 17 13:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18b0cbfdc74c9d61897da716f48bbbd41a8d846d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:84:f6:17:48:2c:54:f5:db:54:47:23:1a:
51:a1:38:2b:a7:de:c4:aa:bd:cc:23:fb:ce:51:2d:
8f:dd:53:89:73:67:b6:b3:ca:5c:7a:1a:4a:e5:26:
23:3b:3d:eb:bc:c6:87:c6:f5:91:80:61:09:14:7d:
a8:4c:76:45:c2:b1:2e:cf:77:ac:69:52:08:bd:02:
df:4f:0f:61:d3:ba:7a:44:20:e7:a4:89:a7:05:bd:
10:26:e0:b7:69:6b:d5:f7:65:6d:e0:a1:e2:ff:fd:
56:34:ac:89:3a:24:e4:9e:7d:cd:c4:90:8f:27:0e:
52:4e:90:cb:4f:cc:d8:f5:7c:23:d1:45:aa:02:d8:
4a:bd:31:30:ba:65:c6:d7:f6:96:a4:e0:4e:99:72:
c1:e0:78:cb:22:94:4e:af:0b:5e:fc:2b:23:17:9b:
c2:52:62:ac:68:56:e0:79:b6:42:31:80:93:f9:ca:
d3:39:7d:ef:37:c2:bb:53:7b:ff:3a:07:6c:1b:10:
0b:9f:cd:4d:63:0f:95:5b:0a:f7:bd:fa:7c:73:00:
f6:e7:db:2b:2b:b7:c8:9c:16:54:6e:37:45:c6:f2:
b0:59:02:90:f5:b0:f8:45:8b:ce:2a:e0:ac:70:34:
86:f4:35:2b:46:e3:78:2c:79:96:4c:dd:fa:8f:75:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:CB:FD:C7:4C:9D:61:89:7D:A7:16:F4:8B:BB:D4:1A:8D:84:6D
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/GLDL_cdMnWGJfacW9Iu71BqNhG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.78.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f1:0e:b2:00:29:56:49:3d:0f:19:0a:97:da:a5:08:26:f1:
76:3a:93:28:52:72:9f:b0:83:f4:e6:c5:a7:fb:4d:c5:8c:fd:
d3:62:ae:50:10:e4:de:35:d3:82:2e:83:1c:1c:5e:9a:50:2c:
af:d8:92:ef:ec:e3:62:19:ef:a9:d8:ac:5d:4c:7b:ef:e9:63:
c2:9b:85:18:a0:7a:1b:2b:e4:66:90:e8:d8:64:0a:17:b0:f1:
28:23:e2:c7:6f:8f:8b:00:92:f8:df:4e:98:d5:ff:3c:54:eb:
49:b9:22:6b:3e:9b:cd:49:40:6f:a3:12:46:cf:7c:ba:6e:e4:
d5:24:ca:8e:e7:fd:d6:e5:de:1f:b4:30:0c:56:8f:2a:e0:ed:
04:7f:79:d7:3c:22:21:3a:fd:88:85:e6:13:6b:82:46:e2:6a:
12:b1:c2:f7:2a:40:0b:7b:b1:11:d5:97:48:4e:45:75:7c:7a:
1c:4b:15:f8:5d:39:1d:ba:fe:35:8d:69:ec:ef:31:0d:2c:d4:
ed:55:4e:ad:d4:0f:b9:34:12:22:db:4e:19:fe:e0:28:cf:f2:
73:2c:76:f1:40:7f:d0:a2:0d:8e:29:a8:01:e5:e7:2e:f6:b0:
b4:14:bd:94:f9:47:8d:2a:07:16:1d:b2:df:ba:fc:b7:45:ae:
a7:93:29:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 23:41:05 2024 by rpki-client on console-fra.rpki-client.org