Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gCgdo0Omrh5I9WH4Qul5Lu-6iMA.roa
File: gCgdo0Omrh5I9WH4Qul5Lu-6iMA.roa (raw, json)
Hash identifier: R7picv3RTUAh5cDSRd7VmmRMi5bUpriSuDTrNpmaSQs=
Subject key identifier: 80:28:1D:A3:43:A6:AE:1E:48:F5:61:F8:42:E9:79:2E:EF:BA:88:C0
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018A4293EAE12D2EA35D4D05642498F4ACCF
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gCgdo0Omrh5I9WH4Qul5Lu-6iMA.roa
Signing time: Tue 29 Aug 2023 18:35:04 +0000
ROA not before: Tue 29 Aug 2023 18:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 264825
IP address blocks: 185.181.32.0/22 maxlen: 22
185.181.32.0/23 maxlen: 23
185.181.34.0/23 maxlen: 23
185.181.32.0/24 maxlen: 24
185.181.35.0/24 maxlen: 24
185.181.33.0/24 maxlen: 24
185.181.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:93:ea:e1:2d:2e:a3:5d:4d:05:64:24:98:f4:ac:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 29 18:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80281da343a6ae1e48f561f842e9792eefba88c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:8c:02:56:00:52:7c:11:db:34:4d:a2:99:
50:8a:ed:6b:5a:03:67:f5:7d:c8:40:3a:95:f1:4c:
14:d3:c7:48:57:fa:86:75:11:39:73:75:33:b1:fb:
a7:3f:b0:da:dd:b5:8a:c0:60:a4:8c:5a:57:04:eb:
8a:be:6d:a8:f7:dc:2d:ae:1c:09:19:be:9b:fc:ec:
29:07:f6:c1:4b:e7:b2:bd:de:c5:74:1d:36:83:52:
00:90:fa:cb:53:11:87:d4:67:96:f7:56:1e:fd:89:
70:d3:43:da:69:bb:98:96:32:5d:ef:4d:24:6d:6e:
ad:62:44:82:63:82:49:50:ee:60:6c:36:ae:74:0d:
c4:9d:6b:35:f5:26:32:0d:97:c4:66:3d:f6:58:ab:
78:b0:62:26:15:0d:99:39:21:52:c0:9f:24:21:80:
36:67:f2:00:9f:e3:2b:e5:28:f8:54:1a:3e:cc:2c:
98:ea:8a:7b:13:8b:a7:ca:98:76:d6:63:c1:ba:fc:
11:56:02:7d:46:92:04:4b:62:bd:37:39:96:43:c4:
82:b8:2c:cc:38:95:18:8a:8b:fe:59:91:2b:58:a6:
a0:1f:09:53:fb:8b:2c:78:c9:b5:0e:12:09:d3:02:
67:3b:54:17:e5:f5:c7:1f:fa:c9:67:45:7e:b5:79:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:28:1D:A3:43:A6:AE:1E:48:F5:61:F8:42:E9:79:2E:EF:BA:88:C0
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gCgdo0Omrh5I9WH4Qul5Lu-6iMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:91:06:4d:df:26:aa:9d:ce:e2:9a:b3:0d:64:ef:da:7e:13:
4d:30:ff:54:dc:4f:17:5f:9f:9c:88:4b:b7:bc:0d:90:96:17:
da:c4:90:d3:54:41:7d:bc:33:30:62:a1:99:90:d7:be:18:c8:
65:63:26:e2:11:48:3b:91:26:61:cf:78:de:34:61:70:7f:67:
dc:c0:0e:1f:62:10:28:f7:7c:46:a8:9a:54:5e:7c:49:df:46:
33:af:75:bd:24:c2:cd:fd:55:47:ba:27:11:05:bb:ad:bc:3d:
e5:7c:3c:d5:ab:c5:0e:ff:4c:b2:96:86:6e:a6:e0:f6:1d:39:
4f:3b:72:cb:5c:c1:89:59:00:e2:4c:14:ae:ee:25:1d:d1:aa:
4b:c2:de:4f:3f:49:e4:ef:5c:07:ee:b5:4c:5c:21:9d:a7:4c:
39:7b:f6:74:1b:d8:f5:f8:03:20:6a:ff:51:97:7f:2e:d5:59:
e8:f1:f7:56:f5:35:5b:f6:e4:f0:3f:db:f9:6c:cc:d5:31:93:
11:71:2d:87:52:26:9b:c0:b3:c3:02:75:7f:63:a2:5e:bd:b1:
80:63:ff:6e:92:4f:f5:74:57:06:1f:13:15:90:d7:9e:8b:c6:
00:be:81:7f:57:fb:81:7e:34:51:cf:61:c5:14:04:72:1b:9b:
75:6c:1f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org