Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/gc0d2HuJiLmJ8804V41rAaf2COg.roa
File: gc0d2HuJiLmJ8804V41rAaf2COg.roa (raw, json)
Hash identifier: e1vupCJxCcInc9/5kUxnVNPyaV13RgmtAX2WS3gDkok=
Subject key identifier: 81:CD:1D:D8:7B:89:88:B9:89:F3:CD:38:57:8D:6B:01:A7:F6:08:E8
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 0186DFF6ED032DC436AD25C06A13BB5BE67C
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/gc0d2HuJiLmJ8804V41rAaf2COg.roa
Signing time: Tue 14 Mar 2023 11:52:27 +0000
ROA not before: Tue 14 Mar 2023 11:52:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41032
IP address blocks: 185.181.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:f6:ed:03:2d:c4:36:ad:25:c0:6a:13:bb:5b:e6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Mar 14 11:52:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81cd1dd87b8988b989f3cd38578d6b01a7f608e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:b8:4e:5f:07:30:60:1f:ad:e7:e5:3b:d0:
ee:e8:e3:f0:62:7d:b8:e7:9f:84:17:5a:6d:c6:52:
d7:7c:b2:c9:55:76:5c:66:33:d6:bc:28:22:7a:36:
0c:31:a0:0b:f3:0a:a2:85:03:00:f0:bd:3d:36:11:
82:cb:15:cd:e3:2e:82:66:23:e9:4b:0d:ad:19:cf:
79:cd:d9:27:a2:55:85:fa:73:43:c2:a4:a6:87:07:
57:62:47:3c:a1:73:7d:02:28:0d:f3:9a:c5:1e:4b:
13:d4:aa:d5:d9:fc:38:7d:d0:02:5d:fe:b5:6c:9e:
34:80:81:3b:af:b6:84:e1:0e:53:30:67:da:16:72:
9e:ff:64:df:43:b0:74:84:c5:a7:63:c8:6d:83:e7:
03:39:f4:0d:3a:3c:90:56:56:c7:e8:5d:b3:27:05:
27:1f:f1:7f:8f:43:22:57:ac:71:63:83:ea:aa:c5:
ae:43:0f:9a:61:cf:10:27:b7:5c:6e:bc:04:de:1b:
6e:c9:ca:67:69:98:9f:36:0a:ce:8d:d8:dc:5e:fb:
60:2b:2c:6b:dc:45:f6:a5:c0:2e:20:5e:6c:19:02:
f0:60:ad:dc:94:36:e4:81:02:c3:f0:71:5d:ab:2d:
44:7d:88:52:da:1b:c7:1d:a0:3d:e0:db:2a:2a:25:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CD:1D:D8:7B:89:88:B9:89:F3:CD:38:57:8D:6B:01:A7:F6:08:E8
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/gc0d2HuJiLmJ8804V41rAaf2COg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.109.0/24
Signature Algorithm: sha256WithRSAEncryption
61:62:c0:7e:39:ed:2a:63:75:57:69:12:b4:90:86:44:6e:7a:
2f:7d:a5:22:a4:8f:03:f6:2f:86:e5:c3:45:33:6d:41:25:f3:
71:89:29:90:01:59:3e:b0:7e:5f:84:68:24:90:98:19:4c:cc:
50:01:66:ca:42:6f:55:59:4c:2b:ea:71:93:da:75:4f:cd:91:
f8:0a:28:06:d9:95:f9:a7:d6:82:6e:ab:34:75:b9:70:e8:25:
b1:dd:3d:a0:13:3f:e8:67:26:40:27:9c:30:0f:00:7a:4f:ec:
db:f0:80:94:9a:f8:76:61:c0:f2:47:f6:05:50:be:8c:e2:13:
6e:c4:e2:f2:da:f3:ee:18:d0:2c:57:99:83:ce:7d:a8:e1:23:
ea:51:74:1d:40:96:64:1a:6a:a4:a4:10:6b:a0:c3:85:6e:33:
9d:7a:c1:ab:19:bb:25:40:2d:3c:7b:30:d2:1e:46:21:02:de:
32:64:ac:ea:f7:8c:df:11:3a:6a:ad:10:88:9c:8c:12:66:bd:
49:e5:da:c5:37:48:55:f9:7a:3d:39:36:a9:fe:ac:05:0a:e0:
18:68:db:f1:59:49:dc:a6:38:43:74:28:25:a4:ba:00:e3:a5:
cc:ee:39:7f:57:0b:c6:07:0a:b4:02:cf:4c:4e:c8:97:5c:14:
d5:21:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:44 2024 by rpki-client on console-ams.rpki-client.org