Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/DDraVrXbkQy07DTMPVETOJyzStc.roa
File: DDraVrXbkQy07DTMPVETOJyzStc.roa (raw, json)
Hash identifier: fVW17+Dubhflxgs/7mWKQT8WHgjDiqTp3VcBOCckGKo=
Subject key identifier: 0C:3A:DA:56:B5:DB:91:0C:B4:EC:34:CC:3D:51:13:38:9C:B3:4A:D7
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018AF50D1CE131A573F29C7A20A2DFCE23C6
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/DDraVrXbkQy07DTMPVETOJyzStc.roa
Signing time: Tue 03 Oct 2023 10:19:51 +0000
ROA not before: Tue 03 Oct 2023 10:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
185.81.30.0/23 maxlen: 24
45.146.232.0/23 maxlen: 24
188.64.108.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:0d:1c:e1:31:a5:73:f2:9c:7a:20:a2:df:ce:23:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Oct 3 10:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c3ada56b5db910cb4ec34cc3d5113389cb34ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:27:ca:46:0a:5a:9f:69:d1:1e:f2:42:26:
48:96:90:65:17:2c:d0:9f:93:e4:a7:82:03:b7:18:
46:77:28:0a:36:fd:b7:fb:ca:bb:44:30:55:fc:20:
60:d0:bd:d7:9e:2a:4d:1f:d4:35:6d:32:c0:48:2d:
52:41:37:59:aa:87:97:4a:b1:25:f2:63:c5:ec:58:
87:50:55:af:01:1c:f6:92:44:cc:ca:ab:43:62:5a:
39:81:cd:ce:91:83:13:ff:d3:00:b6:3e:e8:6b:fb:
9f:ce:5c:41:00:bb:5b:b1:2f:47:09:3c:84:b5:ec:
a3:2f:b9:bc:16:7b:6d:b4:0f:f0:cc:b7:09:8e:b4:
9c:72:8c:05:35:52:c1:8b:8e:90:ac:52:e1:25:8e:
c8:b8:91:6e:c8:5e:3a:3e:89:08:66:7a:f6:42:9b:
51:8d:3c:80:93:ec:bf:d0:e0:fd:19:07:c1:da:ef:
f2:16:5d:4d:ac:2f:d6:52:43:01:13:a7:e0:46:93:
21:47:12:32:c3:15:9d:d2:55:d2:69:00:af:a7:6d:
de:c0:5b:27:e0:50:78:22:d2:63:6d:09:b2:08:7e:
89:46:70:27:63:03:6c:f6:8d:b2:c2:0f:be:ed:93:
6a:83:05:46:28:ac:ac:2a:2c:b4:b5:1c:4f:c6:a5:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3A:DA:56:B5:DB:91:0C:B4:EC:34:CC:3D:51:13:38:9C:B3:4A:D7
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/DDraVrXbkQy07DTMPVETOJyzStc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.232.0/23
185.81.28.0/22
188.64.108.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:31:e1:12:35:c9:21:20:af:e8:95:c5:90:61:d0:74:5e:64:
78:11:86:f0:17:ea:31:53:51:32:7c:47:76:fc:b6:55:41:e3:
0c:de:fb:43:22:1d:d9:e6:a9:01:20:8e:94:7a:23:39:35:25:
19:86:56:b6:46:ab:c1:ba:a0:43:6d:b5:15:2c:ff:fa:0e:2b:
8f:a3:8a:af:34:df:2f:8b:f5:09:51:b9:a4:01:45:37:f7:ec:
54:f2:2e:90:66:ff:8d:fa:0d:13:c9:6e:10:b7:f5:84:36:3f:
1a:0a:79:2e:cf:18:2d:ec:f6:5a:48:f1:6e:a1:80:bf:a9:7c:
37:4a:28:81:c7:b1:01:ab:33:95:a3:db:c2:48:bd:c0:6d:9e:
bb:a0:b6:5f:8e:c7:c3:cf:a8:e7:9d:f5:f5:83:5c:ae:14:b5:
8f:eb:be:93:6f:b6:90:e3:1a:e6:73:4f:fd:7a:e0:bc:ce:8e:
cb:e6:42:8c:be:d0:4b:ae:3d:33:4a:4a:08:41:4e:3f:85:42:
43:7b:38:fe:de:df:b8:05:a2:93:28:65:76:e1:12:25:ae:5b:
f2:7c:6a:30:3a:4d:cf:d3:02:ca:99:6a:0e:98:77:d9:c7:97:
1a:bc:de:62:49:a1:53:d7:ab:5c:d3:b4:14:35:d2:d4:f2:22:
10:51:59:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 15:21:28 2023 by rpki-client on console-ams.rpki-client.org