Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/11iCGAruXfi38F2RkgUGcoomHbE.roa
File: 11iCGAruXfi38F2RkgUGcoomHbE.roa (raw, json)
Hash identifier: fv2UwpDgQfJ2ry1PwkQBRB1gimAN3mRSlGkALH1efRc=
Subject key identifier: D7:58:82:18:0A:EE:5D:F8:B7:F0:5D:91:92:05:06:72:8A:26:1D:B1
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018C2A07F1CB6D1E778464747E5489C34E4D
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/11iCGAruXfi38F2RkgUGcoomHbE.roa
Signing time: Sat 02 Dec 2023 10:16:52 +0000
ROA not before: Sat 02 Dec 2023 10:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
185.179.218.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:07:f1:cb:6d:1e:77:84:64:74:7e:54:89:c3:4e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Dec 2 10:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d75882180aee5df8b7f05d91920506728a261db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:20:6e:0d:d8:e1:73:32:12:a6:3e:04:6d:
88:62:77:71:5b:a7:ee:92:53:b0:fd:4d:32:dc:3b:
a2:26:4b:b3:de:11:64:92:c7:c3:9b:70:23:1c:91:
bc:a5:91:36:78:b7:25:dd:0a:92:42:14:a2:25:09:
9d:c0:2a:38:9f:76:01:a6:3a:58:33:f0:91:54:1c:
49:48:09:b3:dd:e1:77:83:0c:a1:db:b5:ee:79:d6:
26:2b:16:3f:7c:2b:59:91:98:71:3f:ce:d3:a9:d7:
3f:52:c8:43:4f:1d:61:c7:71:01:8f:05:1f:c4:65:
2c:61:ba:c2:3e:d5:e7:ce:bb:64:a6:9c:9a:d5:8b:
21:60:14:24:c6:e0:8a:5d:db:58:00:cc:4e:04:a4:
c4:c0:2d:8d:fa:c8:d1:ed:df:cc:c8:f2:66:0b:44:
49:b4:a2:11:87:34:ed:e0:99:0d:2b:77:56:d4:06:
b2:02:7d:47:6e:d4:c5:e2:a5:51:52:6e:78:c6:54:
c2:6c:01:94:2f:f4:6d:5f:be:c7:36:f1:2d:da:35:
c8:8d:af:12:c5:b3:a6:71:a8:dd:5d:9d:d1:24:b2:
65:f8:4e:af:51:dd:f6:1b:be:57:89:2d:d4:26:b2:
46:f3:28:b0:db:27:cf:f1:3f:29:d1:87:3f:44:66:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:82:18:0A:EE:5D:F8:B7:F0:5D:91:92:05:06:72:8A:26:1D:B1
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/11iCGAruXfi38F2RkgUGcoomHbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
185.179.218.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:44:da:3d:ed:61:c4:86:e6:51:99:75:95:ff:49:dd:29:6c:
39:7f:20:b1:f6:d4:f2:d9:f5:4d:cd:ea:bd:36:f6:54:71:0c:
d2:c1:8a:34:9a:35:69:1a:d5:b4:57:f2:31:29:72:a2:d7:33:
2c:b3:d3:a6:bb:62:bf:ac:eb:00:3c:6e:c4:71:57:eb:0c:c4:
0b:a8:65:db:e0:c6:3f:4e:9b:55:ef:bd:1c:44:1c:74:6d:91:
39:4d:c1:17:a5:c4:8e:e7:0e:fb:33:1d:cf:c3:e2:b2:c9:98:
82:3c:e7:53:8c:12:80:7a:57:37:bb:8b:aa:ad:b5:b6:fd:d3:
8e:66:b5:6d:b3:b7:79:0f:5b:5d:53:3a:dc:90:b4:a1:30:18:
72:04:64:ca:0e:00:a9:68:38:e9:7e:7e:4f:f4:be:77:40:98:
cc:56:9b:2e:bb:e7:a4:95:76:f4:73:76:19:9c:14:6f:90:78:
9e:ec:bb:5e:e4:70:c4:20:33:75:c3:36:f1:b0:5f:79:93:0a:
77:08:af:6b:f8:00:e7:1d:81:f2:30:7a:8c:f8:bf:3a:bb:42:
76:37:af:80:83:38:fb:1d:2e:e2:f1:e3:0d:46:f9:de:92:16:
61:5f:21:46:cd:b3:ea:ce:5d:41:04:81:fe:96:39:f2:9a:25:
98:5e:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 07:36:25 2023 by rpki-client on console-ams.rpki-client.org