Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/gb1wqMYLkhkPGjtEH10s5yTEmmU.roa
File: gb1wqMYLkhkPGjtEH10s5yTEmmU.roa (raw, json)
Hash identifier: 6y7MngLT0bmKEpb6kSF6LCsP4R5PSSm0JQ6VkwKjWRw=
Subject key identifier: 81:BD:70:A8:C6:0B:92:19:0F:1A:3B:44:1F:5D:2C:E7:24:C4:9A:65
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018DA92AA937FA068BCBAB83A623B756E7AF
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/gb1wqMYLkhkPGjtEH10s5yTEmmU.roa
Signing time: Wed 14 Feb 2024 19:49:21 +0000
ROA not before: Wed 14 Feb 2024 19:49:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55081
IP address blocks: 185.81.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 22:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a9:2a:a9:37:fa:06:8b:cb:ab:83:a6:23:b7:56:e7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Feb 14 19:49:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81bd70a8c60b92190f1a3b441f5d2ce724c49a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:8a:9f:36:e3:47:14:ae:60:a7:9c:04:e7:
e8:f8:bf:d3:62:76:9c:e1:96:45:56:fe:fd:f3:de:
d8:ed:a2:34:ca:c0:00:c9:5f:72:43:af:ea:bc:b6:
4f:b3:99:1b:bb:86:9d:6e:63:98:22:23:a8:9b:1c:
6d:31:00:79:75:60:fa:13:4c:8a:1a:d7:7d:80:67:
a6:0e:d6:a6:59:2a:67:5e:c7:14:b3:2b:45:ef:71:
02:33:da:89:cd:a4:1b:59:d5:3d:89:ea:0f:e8:65:
13:09:ee:18:bc:43:d7:89:5d:a0:f7:a0:ba:a3:5d:
2a:4e:2b:1f:05:00:ef:04:ab:8d:c3:9e:44:f0:ba:
6b:d8:85:3b:3f:48:62:cf:33:0d:99:7d:96:9d:63:
b5:9d:ee:80:0d:c3:32:04:d4:4d:77:d3:1c:b2:94:
d4:d4:b9:be:55:49:1b:05:25:bd:f6:ed:55:fe:bd:
f2:98:78:03:7c:81:c0:88:78:b2:4c:9a:15:19:b4:
96:2a:3f:94:2e:3d:b4:00:4f:14:d3:3a:d4:bd:33:
6b:aa:58:20:64:a1:26:89:8c:52:10:44:2a:ca:76:
bf:bd:35:1a:71:7d:cf:bc:14:11:00:0a:0a:fc:d1:
c4:9e:c9:93:58:15:55:8f:bf:74:59:7b:16:6c:49:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BD:70:A8:C6:0B:92:19:0F:1A:3B:44:1F:5D:2C:E7:24:C4:9A:65
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/gb1wqMYLkhkPGjtEH10s5yTEmmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.181.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a3:e6:ed:cb:4a:72:c5:ac:75:32:63:33:c4:5e:1f:a4:ea:
3d:8d:e3:e7:a5:f3:73:fc:da:7f:26:d0:b6:33:fb:fd:95:7d:
03:bb:77:b7:19:08:74:59:b6:88:7a:fc:55:c6:49:16:f7:7b:
bd:6d:8d:1e:64:94:a2:60:ea:dc:37:3c:53:fa:52:27:cd:e9:
ce:1a:0b:af:e5:1b:8e:c2:30:83:b9:78:66:19:a2:10:5a:33:
e2:37:c8:1e:02:83:e1:15:e7:56:10:b9:64:33:3d:ca:7a:22:
89:94:65:14:c5:ab:b8:fc:83:3a:d8:9c:6c:fe:1e:74:1e:d2:
97:c6:85:c7:e2:c3:1b:d7:4a:05:9d:f8:2f:06:22:e7:a1:90:
3c:24:4f:93:78:d5:b5:41:71:e7:11:33:fc:66:10:ad:7d:4c:
9d:47:3e:1c:18:e1:8e:61:8f:04:51:f1:38:b2:66:f0:1e:f9:
4d:90:f9:02:1e:da:92:48:2a:63:a9:d7:21:b6:ec:a9:f5:93:
31:73:86:61:cc:dd:9d:13:45:bf:9f:1e:a8:8c:e7:e1:c7:21:
56:b0:a1:a3:3d:c9:bd:54:28:a1:20:f3:50:9a:55:bb:73:53:
95:c0:1e:f0:d5:7b:95:97:c2:4a:46:56:44:b9:c2:e8:f4:43:
b7:36:fc:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2pKqk3+gaLy6uDpiO3VuevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjQwMjE0MTk0OTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWJkNzBhOGM2MGI5MjE5MGYxYTNiNDQxZjVkMmNlNzI0YzQ5YTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWeKnzbjRxSuYKecBOfo+L/TYnac
4ZZFVv79897Y7aI0ysAAyV9yQ6/qvLZPs5kbu4adbmOYIiOomxxtMQB5dWD6E0yK
Gtd9gGemDtamWSpnXscUsytF73ECM9qJzaQbWdU9ieoP6GUTCe4YvEPXiV2g96C6
o10qTisfBQDvBKuNw55E8Lpr2IU7P0hizzMNmX2WnWO1ne6ADcMyBNRNd9McspTU
1Lm+VUkbBSW99u1V/r3ymHgDfIHAiHiyTJoVGbSWKj+ULj20AE8U0zrUvTNrqlgg
ZKEmiYxSEEQqyna/vTUacX3PvBQRAAoK/NHEnsmTWBVVj790WXsWbEkKbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIG9cKjGC5IZDxo7RB9dLOckxJplMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvZ2Ixd3FNWUxraGtQR2p0RUgxMHM1eVRFbW1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVG1MA0G
CSqGSIb3DQEBCwUAA4IBAQAqo+bty0pyxax1MmMzxF4fpOo9jePnpfNz/Np/JtC2
M/v9lX0Du3e3GQh0WbaIevxVxkkW93u9bY0eZJSiYOrcNzxT+lInzenOGguv5RuO
wjCDuXhmGaIQWjPiN8geAoPhFedWELlkMz3KeiKJlGUUxau4/IM62Jxs/h50HtKX
xoXH4sMb10oFnfgvBiLnoZA8JE+TeNW1QXHnETP8ZhCtfUydRz4cGOGOYY8EUfE4
smbwHvlNkPkCHtqSSCpjqdchtuyp9ZMxc4ZhzN2dE0W/nx6ojOfhxyFWsKGjPcm9
VCihIPNQmlW7c1OVwB7w1XuVl8JKRlZEucLo9EO3NvyN
-----END CERTIFICATE-----
Generated at Wed Mar 13 23:03:51 2024 by rpki-client on console-fra.rpki-client.org