Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FNuiqXkuJ6Wp1XvxdqbscyNZ_NI.roa
File: FNuiqXkuJ6Wp1XvxdqbscyNZ_NI.roa (raw, json)
Hash identifier: wsKB8+bRPNkIb10Aevl5+CVo7EbqLnTkqM8tFziP1CA=
Subject key identifier: 14:DB:A2:A9:79:2E:27:A5:A9:D5:7B:F1:76:A6:EC:73:23:59:FC:D2
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018B4C25533EE125C4E2BB0173345EB4C5D0
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FNuiqXkuJ6Wp1XvxdqbscyNZ_NI.roa
Signing time: Fri 20 Oct 2023 08:13:16 +0000
ROA not before: Fri 20 Oct 2023 08:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
188.64.104.0/22 maxlen: 24
185.179.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Oct 2023 17:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:25:53:3e:e1:25:c4:e2:bb:01:73:34:5e:b4:c5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Oct 20 08:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14dba2a9792e27a5a9d57bf176a6ec732359fcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:d0:61:90:18:12:66:87:cb:d6:ea:a6:39:
3e:63:66:51:d4:a4:e8:6a:26:fc:aa:d6:04:f2:5b:
c8:13:7e:16:2f:60:18:88:5e:02:72:16:b4:c4:d4:
93:93:ec:4c:64:61:18:93:df:06:79:3b:5c:dc:6b:
2d:c6:72:d8:e2:c5:32:37:2d:cb:11:0d:ae:b1:d2:
6d:65:ed:f5:0b:db:08:9e:4f:26:d6:37:ad:7c:75:
2b:d8:3f:39:f2:8e:5f:28:18:5f:46:cd:e5:ac:0b:
8b:fe:57:8c:12:22:b4:29:0c:ef:79:91:63:6a:b2:
c3:90:15:a3:e9:57:36:d1:26:0c:5d:b0:4b:47:d5:
2e:a1:f6:a9:18:c1:3f:e0:a1:30:9d:78:63:51:55:
4b:d3:6e:b7:0b:c6:83:52:36:5d:1d:9e:ff:de:60:
92:86:e6:40:e9:86:5d:cb:cd:21:12:b6:ec:53:ff:
1e:73:16:09:13:9e:65:08:73:08:77:0a:28:40:3b:
8b:fd:ab:d6:6e:ce:7f:ba:c2:4b:19:16:67:aa:f0:
ba:a3:ba:5f:b5:bb:c3:77:5d:e4:42:84:4f:c1:80:
7c:e8:7c:57:7f:1b:08:b7:cb:96:9f:5c:3c:cb:3f:
72:12:d2:95:ec:fe:91:9d:73:8e:91:d1:a9:bc:89:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:A2:A9:79:2E:27:A5:A9:D5:7B:F1:76:A6:EC:73:23:59:FC:D2
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FNuiqXkuJ6Wp1XvxdqbscyNZ_NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
185.179.216.0/24
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
62:c8:7a:21:23:5d:2e:7c:e4:d5:51:30:ae:5e:d5:04:28:64:
73:71:03:e7:ba:86:76:6d:54:86:84:62:33:fe:b4:09:19:7e:
45:49:a4:74:69:45:8e:09:d6:eb:f4:37:79:52:1e:8f:08:21:
4f:46:db:10:b4:2e:e5:a9:a1:6f:21:ae:3d:41:b2:6c:3d:04:
f5:93:83:ea:e3:73:9e:a8:fc:38:d4:12:19:d1:f6:8b:2b:bc:
45:86:d8:99:24:21:f4:2e:1d:e7:35:9b:a8:aa:fc:b3:91:2d:
9d:02:97:76:ce:2b:d3:fc:8e:51:55:e9:97:c8:b9:61:c7:97:
61:1f:70:d0:75:e0:c0:75:db:a8:d3:e9:87:6f:bb:fc:8b:22:
0e:9e:8e:ee:b8:99:7e:57:c1:7c:e0:72:85:33:2c:f0:f0:0f:
50:52:44:e1:f8:0f:89:cb:33:ad:b9:78:e8:36:ce:f0:4a:2c:
65:72:34:9c:62:74:b3:10:d4:87:b5:25:d5:76:bb:79:f4:3c:
46:37:b8:d0:bb:8c:d4:92:dc:d8:ff:bb:3b:22:7f:f2:67:bf:
18:b6:9a:72:35:80:23:35:d8:63:80:7e:9f:fd:b8:d4:b2:e0:
33:02:06:c9:30:bd:bd:f7:15:72:50:99:1e:67:66:eb:e3:6f:
fc:ad:84:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org