Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ECxhDBq6WDd53YmQoSnW4kG_Vls.roa
File: ECxhDBq6WDd53YmQoSnW4kG_Vls.roa (raw, json)
Hash identifier: hVVrulLg1eg8fOqSccCUmfJ93hBxrm7TRPU/qcIszsg=
Subject key identifier: 10:2C:61:0C:1A:BA:58:37:79:DD:89:90:A1:29:D6:E2:41:BF:56:5B
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018B5856595A784D67AC14E4EB4BF7C592FF
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ECxhDBq6WDd53YmQoSnW4kG_Vls.roa
Signing time: Sun 22 Oct 2023 17:02:15 +0000
ROA not before: Sun 22 Oct 2023 17:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
188.64.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:58:56:59:5a:78:4d:67:ac:14:e4:eb:4b:f7:c5:92:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Oct 22 17:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=102c610c1aba583779dd8990a129d6e241bf565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:06:cd:b5:04:80:d5:6c:f7:da:71:64:15:25:
15:ba:0c:b1:87:9c:83:25:a0:60:42:fa:51:19:3b:
94:6a:7c:f7:da:7e:13:7d:13:a6:b3:16:15:2b:dc:
e4:aa:02:66:1a:74:5f:07:06:72:5d:81:78:97:57:
14:95:61:07:0c:9f:f6:04:f1:f2:f7:cc:a6:a7:8d:
48:08:cc:a0:c8:6a:c3:67:af:34:56:ef:89:96:52:
dc:15:31:c3:dc:32:78:3e:25:ec:30:4f:82:1a:ca:
59:0d:d4:6d:17:d8:9d:d3:27:56:11:e7:95:0a:df:
ed:c3:3c:18:8f:92:66:9e:c0:a3:a1:a5:23:27:c2:
fa:e3:49:e3:dc:42:22:c4:06:33:45:90:59:c5:76:
4c:d8:ff:03:0d:a2:81:6d:14:54:87:8f:f2:2a:85:
aa:f2:f7:67:48:f9:b5:1d:eb:2f:08:86:e8:de:ef:
6e:01:11:e5:f0:61:19:93:9c:aa:ba:9f:63:85:c4:
4c:c2:19:96:8c:4d:72:59:7d:89:db:21:2b:3c:71:
fb:0a:5d:69:a8:6c:c1:49:2d:30:52:e5:b2:4d:aa:
4f:17:6f:79:0f:9b:d7:d5:30:f4:35:42:96:38:37:
5c:eb:fe:8b:9e:19:1c:12:45:1e:46:a9:bb:16:35:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:61:0C:1A:BA:58:37:79:DD:89:90:A1:29:D6:E2:41:BF:56:5B
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ECxhDBq6WDd53YmQoSnW4kG_Vls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
91:2e:bc:ce:c7:98:b2:9c:82:e9:bd:e8:69:d4:b3:87:3e:2d:
b4:4f:fe:08:32:86:32:f0:63:24:94:5f:e1:c1:16:1a:35:c3:
5e:0a:14:b1:78:e5:ce:30:95:86:8b:c2:db:74:7f:d9:ec:2a:
90:7c:99:e8:52:bc:25:7c:74:2d:3d:b4:8c:bb:1a:96:93:0f:
d4:95:f4:20:2a:78:d2:5f:7f:a9:e8:58:b2:f9:4e:c1:71:e8:
5f:1a:02:e3:f7:ce:6e:9a:f8:8c:96:fb:3a:3d:d5:49:72:a6:
ca:bb:51:c5:6c:25:68:e7:49:ce:93:1a:a9:2f:f0:4c:25:73:
e5:43:26:96:a2:eb:93:d6:a0:fb:0a:a5:43:f5:ee:9c:5e:88:
81:ab:4e:18:dd:55:f5:6a:1b:ec:51:0f:b8:61:ff:d7:99:69:
d6:de:3f:ed:4b:4a:d3:14:12:6b:c6:e5:78:bb:51:65:7f:39:
8d:ae:5c:34:06:b2:75:3d:da:5d:16:37:46:6b:c0:37:75:e6:
fc:5b:d1:fe:53:b8:be:71:67:8e:fa:0f:a8:eb:0d:2c:24:e8:
9c:88:34:02:b7:5c:be:63:b8:37:e3:be:3e:11:01:c5:52:01:
02:24:e8:b8:86:33:13:f4:25:e0:d9:ef:fb:5d:50:de:b7:0c:
ae:55:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 07:02:27 2023 by rpki-client on console-fra.rpki-client.org