Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9MT9mulLUreLLcgv4Z4TwXbMge0.roa
File: 9MT9mulLUreLLcgv4Z4TwXbMge0.roa (raw, json)
Hash identifier: YsfzTnk9nJxaYO+oRScfWWWipYYZrelaMNWQnNhRD8s=
Subject key identifier: F4:C4:FD:9A:E9:4B:52:B7:8B:2D:C8:2F:E1:9E:13:C1:76:CC:81:ED
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0189A1EFD572A1891969A6EC48B7BC19C2F6
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9MT9mulLUreLLcgv4Z4TwXbMge0.roa
Signing time: Sat 29 Jul 2023 13:56:36 +0000
ROA not before: Sat 29 Jul 2023 13:56:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
188.64.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a1:ef:d5:72:a1:89:19:69:a6:ec:48:b7:bc:19:c2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jul 29 13:56:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4c4fd9ae94b52b78b2dc82fe19e13c176cc81ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:2a:22:ab:71:8c:b0:47:04:75:0b:ec:e3:
64:e3:34:b2:91:64:69:49:73:91:46:40:1d:dd:0a:
92:67:ce:a7:5e:0d:43:35:c2:f1:b9:f3:42:78:5d:
a8:d4:e0:40:cc:63:79:38:2e:df:16:a7:7a:73:02:
27:22:2d:81:43:25:eb:29:26:de:c1:04:f4:1d:df:
08:3e:29:56:26:a0:d1:d1:d8:8b:77:82:98:8f:5e:
9a:b7:c4:69:87:b3:28:5f:5e:c4:58:b9:3c:95:ab:
bd:f2:88:ec:f6:04:1a:01:4f:2a:af:ff:c9:b3:d5:
6d:3d:71:a2:96:f3:4c:16:df:43:2b:d9:0e:d0:ec:
e0:ee:d4:52:ce:69:20:28:2e:93:f7:31:9a:0b:c4:
12:2c:e2:4f:04:6d:10:f4:27:9e:de:8c:8f:4e:5e:
5e:4a:66:6e:47:b0:4e:03:bf:d9:ad:55:92:d9:41:
39:53:8f:9c:7b:03:05:3c:a2:85:30:a2:c2:a0:8a:
9e:94:67:46:90:92:e4:75:a6:eb:cc:db:de:9a:79:
bc:3e:cd:d6:d9:12:32:f5:30:b0:a1:ca:a6:5e:10:
44:72:3b:8d:e8:3c:67:ef:59:49:38:1a:5c:b1:fd:
5f:bc:2c:f2:27:bd:cd:b3:8d:02:f2:e6:a4:f3:6b:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C4:FD:9A:E9:4B:52:B7:8B:2D:C8:2F:E1:9E:13:C1:76:CC:81:ED
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9MT9mulLUreLLcgv4Z4TwXbMge0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:2d:72:81:0a:f9:9a:1f:6b:a9:29:b2:ec:90:ea:48:9a:9d:
f6:54:50:db:4b:07:54:af:cc:14:bc:f9:c7:10:03:34:ad:1a:
b0:98:ea:9a:70:66:40:ea:15:4a:69:5f:0b:c2:2a:72:1d:4b:
9a:fa:9f:45:bf:50:af:a8:fe:4d:ae:17:f0:95:ea:63:ec:67:
48:46:04:03:47:62:c1:12:d5:9a:47:2d:ba:01:88:c7:a2:89:
a0:c3:5d:5b:3b:66:27:0d:0e:79:d6:1f:fb:8c:7f:22:7b:e7:
42:4a:4a:d4:50:5c:e3:47:72:6b:3a:ee:ee:f5:d0:ee:8a:d6:
c3:0a:74:bf:21:0c:d7:28:22:7f:3c:6b:9f:b2:33:20:37:dd:
af:ff:6c:8f:78:d1:41:96:4f:d6:76:02:5b:0e:09:7c:f6:05:
7e:82:db:b8:62:8b:e0:4f:70:c6:19:73:3c:fa:38:54:ad:bc:
56:4d:a9:7f:13:a4:21:5c:cf:34:6b:cc:7a:8c:8b:6a:2f:b1:
54:fb:63:fd:98:de:06:f5:50:43:65:71:51:e5:a4:14:70:de:
47:28:81:8d:59:a6:90:86:cf:9d:af:05:bf:74:44:62:a5:0b:
87:4c:30:a1:71:09:18:ee:87:d8:5d:91:56:42:df:eb:15:93:
83:07:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 12:32:26 2023 by rpki-client on console-fra.rpki-client.org