Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/GFNt-W15t4ieAt5QwXoJl4WdyTE.roa
File: GFNt-W15t4ieAt5QwXoJl4WdyTE.roa (raw, json)
Hash identifier: quexIsqNcHQNFMEY3dKAKsS+Dn/Wfz24LmrXBo8E/UQ=
Subject key identifier: 18:53:6D:F9:6D:79:B7:88:9E:02:DE:50:C1:7A:09:97:85:9D:C9:31
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 018E48EC89DA69838A38C192D2688BF7BA8C
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/GFNt-W15t4ieAt5QwXoJl4WdyTE.roa
Signing time: Sat 16 Mar 2024 20:20:45 +0000
ROA not before: Sat 16 Mar 2024 20:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 91.207.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 16:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:ec:89:da:69:83:8a:38:c1:92:d2:68:8b:f7:ba:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Mar 16 20:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18536df96d79b7889e02de50c17a0997859dc931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:d1:17:ad:ed:06:47:a9:2d:b6:dc:e6:69:
4a:55:f3:f9:21:14:55:bc:3f:45:21:22:46:4a:e2:
18:be:b7:e9:ce:e8:31:00:e5:f9:b4:48:54:bb:6b:
5e:64:9e:1b:cd:bb:41:1d:35:bb:9f:03:46:66:fa:
8e:8a:ed:ce:c6:f3:e2:12:f7:fa:bc:4b:fb:a5:5d:
dc:0d:b6:7f:82:52:2a:ad:68:44:0f:32:57:78:9b:
68:a3:76:9a:72:f4:5c:fd:6e:8c:81:d0:81:82:47:
65:79:9d:dd:75:b2:ac:82:e7:5a:77:8c:29:da:49:
6a:14:a3:47:4b:8c:a7:07:21:03:8d:9f:a5:37:ab:
3f:80:c5:a2:e7:75:b0:15:0c:d9:8f:a7:7b:88:af:
f2:e0:56:83:b5:ad:da:87:80:2e:4c:88:b2:a6:e5:
2c:73:09:ad:21:20:66:4c:ba:2e:ba:91:6a:a1:06:
60:e6:ed:cd:67:66:61:0a:8c:e2:ed:f2:bc:11:3b:
7b:93:8c:fb:86:41:1d:4c:f8:f6:80:46:46:a2:1f:
2f:49:83:24:34:85:da:c5:81:f8:ec:bf:1e:51:58:
57:ac:c1:ea:47:70:12:c4:1b:da:42:5d:ec:a4:cd:
17:75:fe:70:35:07:e0:3e:dd:53:ed:e6:cf:a4:57:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:53:6D:F9:6D:79:B7:88:9E:02:DE:50:C1:7A:09:97:85:9D:C9:31
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/GFNt-W15t4ieAt5QwXoJl4WdyTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.19.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e8:2f:d0:77:67:e1:b3:f1:f0:19:3d:9a:c8:8d:03:42:9b:
ee:4e:94:c4:ae:5f:3c:e4:82:1b:ae:4f:5c:2b:01:e7:13:ef:
42:10:b2:9b:e5:3d:79:10:4a:e2:0e:6b:f5:3b:78:55:a1:d2:
fb:c4:88:f4:6f:69:f4:b6:f2:98:7e:e0:c0:c8:99:ce:e6:d0:
90:37:50:63:7f:61:50:1c:d5:49:d6:e5:38:42:34:1e:b2:06:
43:f7:09:05:20:20:6d:76:ac:6c:0b:84:cb:e1:fc:3c:f3:07:
0d:38:9f:90:78:47:98:c3:6f:13:54:de:d7:a5:fc:02:6b:87:
43:6d:20:6c:48:03:be:76:78:66:8a:c2:ea:4f:50:cd:74:00:
20:48:82:7d:31:bf:88:46:1a:ec:12:fa:20:cc:c0:c7:58:03:
95:be:67:38:d6:b8:3b:a7:52:62:0c:d6:cf:7d:3d:f9:b2:79:
00:e8:9e:ef:fd:5a:bf:2f:cf:5d:91:2e:23:78:7f:34:0c:dc:
d1:e9:ba:9d:52:81:4c:e9:f9:40:cc:04:0e:95:13:14:24:08:
12:6e:63:7d:de:c0:79:58:b1:84:bf:24:5a:a0:35:3c:93:01:
87:7c:19:4f:c7:87:d7:0f:3f:58:3a:d3:9e:61:69:8a:7c:b1:
10:c8:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:08 2024 by rpki-client on console-ams.rpki-client.org